Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gmtjPi_2tDgF9adDFad_ts4oZTM.roa
File: gmtjPi_2tDgF9adDFad_ts4oZTM.roa (raw, json)
Hash identifier: nM0TGfHP79BTx1dVh/59TxCPwSdv5z4ojngZQO5ukWg=
Subject key identifier: 82:6B:63:3E:2F:F6:B4:38:05:F5:A7:43:15:A7:7F:B6:CE:28:65:33
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182E998653CDE017DE2D152CF1ACB9ED40F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gmtjPi_2tDgF9adDFad_ts4oZTM.roa
Signing time: Mon 29 Aug 2022 12:34:14 +0000
ROA not before: Mon 29 Aug 2022 12:34:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203314
IP address blocks: 2a06:a005:6f0::/44 maxlen: 48
2a06:a005:18c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:98:65:3c:de:01:7d:e2:d1:52:cf:1a:cb:9e:d4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 29 12:34:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=826b633e2ff6b43805f5a74315a77fb6ce286533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:a9:a3:97:73:05:b4:b9:96:7d:a8:bd:8c:
87:6f:ff:da:d6:fe:3c:a3:b3:10:bc:f2:40:30:72:
f1:d9:f7:ca:d0:5b:08:65:03:57:19:74:76:11:fd:
ce:92:b0:35:5b:b2:fa:76:3e:e3:94:47:99:1f:d8:
7d:2e:62:8b:b9:ce:ad:66:37:b2:5c:76:e2:55:9b:
86:e9:e0:ad:62:9e:44:4b:45:91:6f:11:2f:7e:f3:
8c:50:4e:63:d6:9f:f2:ff:5d:74:7e:c9:91:83:d8:
23:63:26:99:e6:ee:c7:b0:ea:48:4f:69:26:d6:6e:
80:c5:7a:82:ab:c1:bd:2d:d3:b1:a3:51:1d:50:6f:
3f:24:2c:0f:fc:be:8d:75:69:82:b6:48:24:43:a1:
67:98:c3:09:47:94:bc:4f:e8:c6:f2:98:5b:fa:d8:
e0:e2:19:3b:a5:18:46:aa:89:e7:91:df:34:8e:28:
0e:43:f5:98:67:fa:b7:cb:f0:81:4c:50:f2:32:d9:
98:89:de:28:2f:ec:96:3c:04:31:3e:a8:e9:8f:2c:
f5:19:e2:9b:05:7c:30:f8:a7:83:ed:66:de:e0:87:
5e:7d:a6:82:a5:a4:44:0f:8d:15:d5:f5:de:d4:16:
8a:99:9f:47:a6:7e:18:4f:b1:92:95:fe:67:f2:7d:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:63:3E:2F:F6:B4:38:05:F5:A7:43:15:A7:7F:B6:CE:28:65:33
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gmtjPi_2tDgF9adDFad_ts4oZTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6f0::/44
2a06:a005:18c0::/44
Signature Algorithm: sha256WithRSAEncryption
34:a5:c5:d5:8f:4b:33:f7:82:d1:a8:d7:b8:ea:e5:c9:ba:51:
d9:ff:75:11:e5:f4:58:07:3d:d7:6b:32:f7:26:e3:cd:24:15:
76:6b:20:63:f7:1f:2e:f3:96:cb:d7:9b:c9:a2:a8:e0:8e:ff:
62:cd:eb:14:3e:cd:b6:ba:7f:6e:3c:b9:49:f9:ba:97:c6:30:
ae:63:d1:2f:c0:d3:9a:bb:f3:70:b4:c4:78:55:0a:79:1d:d7:
c6:f3:4e:a5:e7:fc:bc:a1:7d:fe:c1:95:5f:1d:4a:80:0e:5d:
15:63:3f:ce:c6:98:df:04:99:96:00:4d:ee:a9:ac:4f:0a:bc:
85:82:52:f2:76:c5:d3:4d:f0:2a:68:0f:a3:99:64:12:71:bd:
6c:a6:83:99:4a:82:b2:5e:82:09:2d:f3:8e:da:3d:fe:1b:df:
79:39:7d:40:d3:af:1a:11:86:c4:d6:5b:86:5d:1b:4f:9a:45:
cb:a3:7a:b5:3f:fc:c2:db:41:82:be:54:2f:27:dc:04:40:22:
0f:b9:0e:2e:4d:f7:5c:8f:4c:32:99:32:c0:ac:f2:e5:87:80:
59:ba:7a:75:b5:5c:6e:c7:23:d0:ee:6d:f0:ad:37:fb:f9:55:
29:46:81:6b:cd:54:31:9f:50:01:5b:4b:b6:ef:6c:7d:15:64:
fa:12:2d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:36 2025 by rpki-client