Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/gbpTeo0yP98ZSdgLmdpcLzdZzv0.roa
File: gbpTeo0yP98ZSdgLmdpcLzdZzv0.roa (raw, json)
Hash identifier: CbsxGhJhoE8yvGtURZm7/5jfNWzpy2kZAlBuSWC42H0=
Subject key identifier: 81:BA:53:7A:8D:32:3F:DF:19:49:D8:0B:99:DA:5C:2F:37:59:CE:FD
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019425219E966EE998ABE55DA6F4D694C006
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/gbpTeo0yP98ZSdgLmdpcLzdZzv0.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201217
IP address blocks: 2a13:a5c6::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9e:96:6e:e9:98:ab:e5:5d:a6:f4:d6:94:c0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81ba537a8d323fdf1949d80b99da5c2f3759cefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:c2:af:b3:3f:8a:02:41:f5:d7:18:8d:41:
81:6e:5b:9b:65:de:87:3e:65:f8:0b:91:72:fd:e0:
e6:12:b2:94:df:e5:d4:7b:15:5d:cf:cb:5d:40:72:
23:dd:42:ec:02:b4:92:d7:34:d6:b6:01:68:84:37:
db:de:d4:4c:2d:b2:4a:af:51:2a:6e:17:7a:55:b3:
64:23:d7:57:f6:a1:5e:2d:cd:57:c4:33:b3:ea:2c:
f7:15:af:51:e8:f1:5a:fb:e8:35:60:9a:74:15:4b:
5a:89:f2:7e:f1:ec:72:dc:0d:19:02:3d:f2:9b:92:
d1:a4:22:73:a5:51:41:3a:8d:e5:58:7b:8b:42:a2:
09:78:57:d5:da:c4:7d:28:91:ff:d5:7b:d9:cb:9c:
ad:8e:b0:c2:f8:3d:b4:a4:1a:74:c7:0f:1d:60:6e:
f3:ee:dc:0b:75:dc:d1:b9:29:40:da:8b:2e:d0:31:
29:9b:cc:46:09:1e:4e:8f:bf:bd:9e:8a:ab:96:8e:
30:6d:29:4c:4a:8a:ef:e6:dc:33:1f:c6:5c:48:21:
65:9d:d6:fb:59:3d:20:eb:fd:76:58:40:b9:75:d8:
c9:3f:87:24:50:20:c6:13:fd:a2:17:5f:46:43:83:
48:41:0a:4e:0c:17:4c:b4:84:e2:cb:7a:ca:01:10:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BA:53:7A:8D:32:3F:DF:19:49:D8:0B:99:DA:5C:2F:37:59:CE:FD
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/gbpTeo0yP98ZSdgLmdpcLzdZzv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c6::/32
Signature Algorithm: sha256WithRSAEncryption
6d:e7:35:a4:83:b5:95:86:70:76:30:a8:19:5a:0e:f9:d1:54:
fb:f0:68:6c:9a:00:71:58:de:9c:a7:98:7d:47:fa:8f:79:a2:
0f:72:50:6f:4c:6a:71:15:1f:23:82:9a:b9:c2:6a:54:81:fd:
d6:a9:28:d8:dc:b1:be:e5:78:07:63:09:ad:7f:c3:59:dd:fa:
76:39:a6:18:e4:b9:df:27:72:0e:d1:ed:a5:bd:fc:d1:f0:44:
5b:bc:8e:d3:ed:94:91:c1:ac:b8:cf:b0:bf:b3:3e:de:1a:7f:
6a:ed:dc:90:53:03:ae:3e:b5:d8:7d:ef:97:7d:9f:7e:8f:c8:
e5:33:3b:db:76:91:93:48:eb:95:26:17:cf:3c:55:8c:03:c5:
0a:da:d7:41:82:82:ec:73:29:eb:e6:09:35:1e:d8:ea:a8:04:
33:f6:15:f7:80:c8:78:58:6c:21:29:8d:26:15:45:f4:46:23:
8f:4b:e5:c5:3f:10:e8:1d:3a:b5:2d:f6:f0:29:ed:79:c8:87:
71:c2:f6:0c:2c:b7:e4:73:32:bd:45:15:3a:9a:d0:cc:38:19:
bd:b8:4d:30:42:3a:6b:e9:6c:c1:da:0b:6c:8d:d2:5f:c4:a5:
e8:86:eb:60:36:01:5c:93:5b:cc:25:bb:8c:13:aa:61:c2:50:
ce:37:33:71
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQlIZ6WbumYq+VdpvTWlMAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwMTAyMDM0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWJhNTM3YThkMzIzZmRmMTk0OWQ4MGI5OWRhNWMyZjM3NTljZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHXCr7M/igJB9dcYjUGBblubZd6H
PmX4C5Fy/eDmErKU3+XUexVdz8tdQHIj3ULsArSS1zTWtgFohDfb3tRMLbJKr1Eq
bhd6VbNkI9dX9qFeLc1XxDOz6iz3Fa9R6PFa++g1YJp0FUtaifJ+8exy3A0ZAj3y
m5LRpCJzpVFBOo3lWHuLQqIJeFfV2sR9KJH/1XvZy5ytjrDC+D20pBp0xw8dYG7z
7twLddzRuSlA2osu0DEpm8xGCR5Oj7+9noqrlo4wbSlMSorv5twzH8ZcSCFlndb7
WT0g6/12WEC5ddjJP4ckUCDGE/2iF19GQ4NIQQpODBdMtITiy3rKARBRiQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIG6U3qNMj/fGUnYC5naXC83Wc79MB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvZ2JwVGVvMHlQOThaU2RnTG1kcGNMemRaenYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOlxjAN
BgkqhkiG9w0BAQsFAAOCAQEAbec1pIO1lYZwdjCoGVoO+dFU+/BobJoAcVjenKeY
fUf6j3miD3JQb0xqcRUfI4KaucJqVIH91qko2NyxvuV4B2MJrX/DWd36djmmGOS5
3ydyDtHtpb380fBEW7yO0+2UkcGsuM+wv7M+3hp/au3ckFMDrj612H3vl32ffo/I
5TM723aRk0jrlSYXzzxVjAPFCtrXQYKC7HMp6+YJNR7Y6qgEM/YV94DIeFhsISmN
JhVF9EYjj0vlxT8Q6B06tS328CnteciHccL2DCy35HMyvUUVOprQzDgZvbhNMEI6
a+lswdoLbI3SX8Sl6IbrYDYBXJNbzCW7jBOqYcJQzjczcQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:07 2025 by rpki-client