Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/GWavcDZYFXNc0oPZlZALSN19Gx8.roa
File: GWavcDZYFXNc0oPZlZALSN19Gx8.roa (raw, json)
Hash identifier: YLbPK/VV/HIlARUyi8sCYukw1OYwFHiiVRMHbtzMFAw=
Subject key identifier: 19:66:AF:70:36:58:15:73:5C:D2:83:D9:95:90:0B:48:DD:7D:1B:1F
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 0E70982B
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/GWavcDZYFXNc0oPZlZALSN19Gx8.roa
Signing time: Sat 01 Jan 2022 13:06:18 +0000
ROA not before: Sat 01 Jan 2022 13:06:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 2a0b:32c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242260011 (0xe70982b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Jan 1 13:06:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1966af70365815735cd283d995900b48dd7d1b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:1a:03:31:63:39:2a:c1:df:9e:a8:d5:9e:
6e:6e:c1:ea:54:69:4a:3e:0e:6e:14:e9:ce:fb:ae:
08:0f:56:e4:14:9c:a8:f6:19:33:17:ec:49:99:d1:
89:e7:8e:b8:41:0e:45:7e:73:64:c2:b6:ca:cf:49:
21:18:2e:26:17:e8:d0:51:1f:8f:00:40:35:1e:b7:
a0:ea:f3:2f:10:1e:3a:07:1c:de:26:4d:63:0e:9f:
cb:95:d9:b7:82:de:d1:2f:db:e4:02:10:59:89:f3:
ba:c4:ad:cc:5b:72:62:cf:d3:ad:63:7e:69:83:89:
34:66:aa:dd:ee:eb:0b:24:f1:fe:1d:6f:06:03:ac:
45:c0:cf:f9:fc:4a:6b:35:1e:60:db:a6:c3:da:02:
5c:ca:ac:3a:49:48:02:87:e3:07:23:21:48:7c:8c:
bd:22:34:b3:95:22:ae:9f:e0:ee:71:91:8d:65:39:
7c:69:dd:09:cf:41:c8:64:d5:02:28:dd:24:46:14:
ce:26:2d:ee:c4:81:50:42:15:a9:a0:26:58:6e:15:
d2:0d:60:78:69:e7:9d:c0:17:fc:54:8b:22:90:28:
24:61:f2:9a:41:0d:26:4c:5e:ca:ab:3b:e2:be:0f:
d3:bc:37:ce:dc:9f:75:ed:53:7c:36:8b:66:e0:1a:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:AF:70:36:58:15:73:5C:D2:83:D9:95:90:0B:48:DD:7D:1B:1F
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/GWavcDZYFXNc0oPZlZALSN19Gx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:32c0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:e3:0c:2d:d7:65:f3:2f:01:17:71:59:73:a4:fb:a9:94:b8:
69:48:32:61:31:a6:27:f5:ca:ab:46:d4:4b:09:12:9d:d7:dc:
e6:4a:55:6f:a4:53:14:94:2b:4d:60:93:41:fe:54:1f:dd:2b:
76:c0:4d:85:52:03:a8:fc:0f:f6:a6:b1:00:91:eb:e7:ce:95:
ff:54:98:2d:94:5b:02:fb:5e:0a:41:b1:05:b8:20:d2:cf:be:
8d:0d:98:62:87:e6:e6:99:23:c0:71:5a:9c:33:2c:71:f7:6c:
6a:00:02:05:ee:cf:75:9c:a9:bd:8d:c5:3b:58:b1:46:06:77:
d3:9f:dd:98:28:a5:b8:81:de:0f:f4:7d:15:6a:56:33:58:c9:
22:cb:22:91:1a:f4:a8:55:0f:25:5e:7d:d1:f3:42:40:7b:85:
cc:c9:db:b7:92:61:cf:95:9a:2b:df:0a:9d:7d:d7:e4:d3:2d:
bd:14:d4:b2:b7:6b:d7:16:a6:a3:de:43:2f:c7:e3:5c:9b:59:
a5:43:36:f9:b0:8b:dd:70:59:c5:e2:a1:2e:5e:d7:7e:2a:5a:
5c:26:2f:f6:38:47:15:1f:1b:ed:88:b1:aa:6d:df:74:67:59:
29:e3:b1:4a:78:9b:6a:71:1f:82:79:45:8f:ca:31:49:51:0d:
9c:7b:c9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:33 2025 by rpki-client