Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gspg21PC-Bi6SGHc2DwZhP3SxPE.roa
File: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (raw, json)
Hash identifier: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=
Subject key identifier: 82:CA:60:DB:53:C2:F8:18:BA:48:61:DC:D8:3C:19:84:FD:D2:C4:F1
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0194266BDE54432B4D13D192B5EAB625EEB9
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gspg21PC-Bi6SGHc2DwZhP3SxPE.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206499
IP address blocks: 2a04:5b81:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:de:54:43:2b:4d:13:d1:92:b5:ea:b6:25:ee:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82ca60db53c2f818ba4861dcd83c1984fdd2c4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:00:03:d7:1f:91:4b:78:ed:61:f1:cd:fa:
d4:8f:57:22:e8:41:bb:1d:65:75:bb:e0:5f:5c:11:
05:6d:e5:8c:0f:37:2c:8e:52:6c:14:be:80:38:58:
fd:21:d0:65:23:6f:30:96:49:0a:09:53:10:0a:ee:
84:47:ce:07:3b:58:25:6f:d0:25:dc:cc:21:d5:20:
ba:24:28:f0:f6:49:a7:60:97:16:e1:fe:28:6b:1d:
d5:3c:f9:7b:57:1d:27:3d:b8:79:38:9a:0d:e4:c2:
94:97:75:af:1d:aa:9c:de:d1:42:7b:5e:6a:63:a4:
43:93:02:7b:49:39:56:bd:30:84:b8:3a:75:57:52:
f2:1c:29:13:60:b0:b1:8f:30:2c:9e:a8:13:80:0e:
78:f4:4a:b4:81:bb:5b:2d:ef:bb:79:e0:7b:c5:c1:
db:ae:ef:b6:9a:85:35:c9:f7:e7:c1:53:79:d1:f4:
65:d6:3e:f2:e6:3e:7a:8e:27:2e:24:29:ee:be:3f:
5a:01:2e:02:4c:34:1e:7f:19:12:0c:0e:29:8d:7d:
1b:f2:7a:e9:97:b6:a6:4d:a9:c0:d9:f1:d5:ec:d6:
00:6e:3e:2f:0b:4d:88:75:da:98:8d:67:31:4c:13:
c9:ef:84:95:4d:be:52:8d:c8:7c:1c:4a:99:a9:f3:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CA:60:DB:53:C2:F8:18:BA:48:61:DC:D8:3C:19:84:FD:D2:C4:F1
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gspg21PC-Bi6SGHc2DwZhP3SxPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:2000::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ca:61:5c:e1:b6:52:3b:2d:4e:8a:9d:ce:3f:35:10:db:73:
5f:a1:79:a1:27:a1:db:a7:2e:6f:4b:98:1b:f2:a6:76:7f:5b:
d4:d8:e6:b4:c3:8b:4e:11:d4:9d:c5:e0:e8:bb:3e:81:7e:08:
24:5e:d9:5d:1e:85:6d:77:52:e8:18:dc:e6:46:51:bb:30:f7:
67:e2:ed:3a:ba:c7:af:fd:40:83:11:d4:9e:da:0f:66:c2:57:
59:37:05:38:1e:bb:be:c2:c0:10:3a:f9:fb:29:dd:4f:82:cb:
4c:08:3a:08:dc:e5:96:3a:24:27:5d:fc:c2:b4:56:16:82:4a:
a9:91:63:62:77:0b:7f:92:6e:f3:b3:eb:15:a2:71:4e:39:68:
16:01:28:4e:4d:17:b9:c7:83:36:7c:91:7e:04:ec:ff:0d:9c:
4c:ea:59:65:3f:57:87:21:53:d2:f1:9e:98:25:6e:e6:c1:71:
16:8d:c9:c1:91:71:5b:d0:ad:95:4d:3b:1e:37:6c:93:d9:2c:
ff:5b:11:40:4a:4c:17:54:48:72:1e:b1:c3:a4:1a:63:87:07:
ef:12:f6:9f:e2:0d:52:ed:71:2f:cc:11:60:42:cc:cf:1e:ff:
84:93:39:1a:54:18:6c:ba:2e:9b:d5:b7:97:e8:b9:88:9d:33:
c0:0e:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:19 2025 by rpki-client