Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/gH2Ml08pkcNQk3L7CCHmTjTSwKQ.roa
File: gH2Ml08pkcNQk3L7CCHmTjTSwKQ.roa (raw, json)
Hash identifier: d4RSH6+xorxY40URBoEfRdGUVfAgCYRaB6RGA++Wipc=
Subject key identifier: 80:7D:8C:97:4F:29:91:C3:50:93:72:FB:08:21:E6:4E:34:D2:C0:A4
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C57582BFFD10F10D46847642254B
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/gH2Ml08pkcNQk3L7CCHmTjTSwKQ.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203638
IP address blocks: 2a05:b0c6:500::/48 maxlen: 48
2a05:b0c6:5ec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c5:75:82:bf:fd:10:f1:0d:46:84:76:42:25:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=807d8c974f2991c3509372fb0821e64e34d2c0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:e9:8c:8b:0b:94:f3:35:44:90:b5:34:2d:
d6:54:44:8a:1a:31:84:50:eb:5f:2b:55:4c:80:2b:
95:2d:f0:80:27:ad:60:38:4b:fd:9c:25:be:89:53:
24:4a:f7:21:32:8f:02:80:56:86:a1:42:8f:9b:95:
a5:64:4c:9a:7e:9c:a1:37:9c:bc:cc:79:cc:7d:3f:
3a:99:df:7e:ca:65:39:0b:c1:55:ad:92:aa:53:ec:
17:fb:67:3a:06:b4:9e:05:73:9b:ee:7f:ef:27:67:
f1:ae:62:f0:fd:a1:23:d8:f6:7f:63:13:0c:e2:48:
fe:be:9b:b8:9b:ec:54:f3:9c:9f:4e:57:e2:e2:bc:
7d:9c:47:c6:54:a4:6e:b3:a2:ba:c4:ae:95:41:30:
a6:c1:52:70:7d:2b:61:20:8f:93:de:5e:c0:88:be:
cb:8e:68:33:0d:c9:eb:d2:49:ec:be:26:20:23:36:
0f:78:88:7e:82:74:cf:1f:f9:e8:5f:b0:eb:97:42:
bb:f6:ce:89:7b:ad:41:06:75:73:51:2a:29:f0:fc:
7e:5a:08:0b:2c:e9:5b:6f:dc:6d:34:eb:65:b5:16:
b5:09:5b:33:17:17:cf:ae:9d:cc:35:4f:63:bc:59:
a9:45:f1:e3:ac:78:04:5b:8f:e3:f8:2f:c2:52:52:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7D:8C:97:4F:29:91:C3:50:93:72:FB:08:21:E6:4E:34:D2:C0:A4
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/gH2Ml08pkcNQk3L7CCHmTjTSwKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:500::/48
2a05:b0c6:5ec::/48
Signature Algorithm: sha256WithRSAEncryption
7b:40:33:a7:dd:e3:da:2c:8b:b0:eb:a9:3b:a3:4d:55:9f:eb:
48:d4:4b:13:56:0e:bd:af:a2:c7:90:3e:5e:4d:23:ce:a8:9f:
67:27:c9:0e:6e:34:89:08:c0:2a:b9:e9:3c:fe:9e:42:b5:05:
f1:e0:f6:e4:a4:2a:fa:ee:53:ea:82:d8:d8:05:bf:57:4d:39:
58:fc:4d:b2:d6:ba:78:6b:cf:82:0d:9d:e1:99:a7:9c:3e:79:
39:56:e2:17:76:41:60:fb:ce:51:38:39:72:46:d3:9a:a2:99:
55:1a:d2:60:ad:81:ef:44:19:cf:0b:8b:76:3e:24:b1:95:f3:
39:df:72:9b:d1:52:04:5f:40:b3:93:01:26:fe:5f:18:46:b0:
9c:61:fa:a5:1b:b8:e7:8d:74:90:c4:98:32:08:fb:3b:14:ff:
ef:ba:cd:b4:db:be:f5:45:a7:82:a6:63:9e:a6:97:95:02:31:
fb:56:b0:6a:b1:42:ff:21:06:ea:f5:8b:dc:5b:ef:50:07:4d:
dc:c4:83:0f:b6:3b:9e:8b:c3:fe:9c:31:62:dc:ba:f2:61:d1:
9d:2e:b3:04:c1:e9:b4:33:aa:86:87:fa:bf:a7:bc:10:23:9e:
92:c6:26:a0:9e:47:67:49:ac:ed:94:a6:0b:9e:5a:f7:22:fb:
1a:0a:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:36 2025 by rpki-client