Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/GgcXjbFf8mlEuNVIAcHRErlG0DE.roa
File: GgcXjbFf8mlEuNVIAcHRErlG0DE.roa (raw, json)
Hash identifier: aU3/cIt29ulG37q/HnxD7KuB42acmRwvl4Q/yo0oLB4=
Subject key identifier: 1A:07:17:8D:B1:5F:F2:69:44:B8:D5:48:01:C1:D1:12:B9:46:D0:31
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB7731563A03798300F242A982364D
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/GgcXjbFf8mlEuNVIAcHRErlG0DE.roa
Signing time: Wed 01 Jan 2025 17:48:12 +0000
ROA not before: Wed 01 Jan 2025 17:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57529
IP address blocks: 2a01:48a0:4501::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:77:31:56:3a:03:79:83:00:f2:42:a9:82:36:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a07178db15ff26944b8d54801c1d112b946d031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:16:25:aa:d1:c0:a4:3c:63:6a:f2:d2:ef:
45:70:40:f0:9c:55:76:26:69:ef:a8:8c:d8:5c:49:
ce:30:d7:ee:fb:a3:16:9f:cd:00:89:76:d6:01:5a:
0c:96:fa:ac:d0:69:11:25:c1:2e:ce:a8:34:01:b8:
12:0b:b9:4d:73:69:9e:d7:93:4e:71:74:a0:4e:48:
9b:02:10:dc:07:34:df:4c:4e:ae:3b:e1:00:48:9e:
b9:02:68:db:f6:68:20:32:b3:53:e1:af:d7:60:de:
42:c7:5a:67:1e:d3:3d:84:e1:10:78:d8:91:fc:fc:
9d:b0:0f:6d:60:cb:05:b9:f2:48:36:ce:b3:7b:eb:
31:18:70:6d:fb:b7:70:ec:83:7c:9d:66:e4:88:0f:
d0:4e:3f:6d:c7:e8:42:6c:e4:46:f7:a7:ec:cb:0e:
5e:31:72:8d:bf:f2:90:bd:83:c6:21:90:5c:69:80:
ec:44:44:a6:5e:0e:42:cd:e8:19:75:ee:99:84:69:
a0:38:43:c0:60:0e:01:52:45:67:ee:5b:db:7f:72:
08:2b:69:14:c1:5b:85:c3:51:c1:08:a6:dd:17:7e:
f5:8b:11:2e:20:b3:25:ea:fe:27:72:3a:37:89:ba:
a2:25:cd:a6:e3:4c:ea:f2:c2:08:03:07:b9:37:7b:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:17:8D:B1:5F:F2:69:44:B8:D5:48:01:C1:D1:12:B9:46:D0:31
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/GgcXjbFf8mlEuNVIAcHRErlG0DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4501::/48
Signature Algorithm: sha256WithRSAEncryption
3f:00:07:12:54:39:0c:f5:4a:ce:a3:0a:b1:f3:34:50:40:9a:
e3:ad:ca:70:eb:93:bd:d4:aa:2f:72:25:6b:6f:9f:d1:4a:28:
ad:91:48:ea:5e:2c:b2:32:ec:5d:d0:21:f1:68:53:11:54:77:
5c:4d:5c:10:91:9a:a8:05:fb:f4:d3:7b:fe:2d:fd:67:e6:42:
71:fa:2f:f9:ec:36:aa:f9:12:4d:60:a4:e2:06:a9:25:7a:bb:
21:b9:b0:60:ea:4a:df:ee:a5:ee:be:bb:78:3a:4e:3a:56:a9:
6d:13:7a:ee:17:d0:7d:62:a6:ee:46:7a:13:e4:e6:3f:69:8d:
01:5c:ab:cd:d6:0d:0e:53:93:d8:6f:cc:f5:57:15:a6:99:e8:
e1:cd:f7:07:49:78:7a:84:2b:84:6a:3e:8b:1d:7c:81:57:37:
30:ee:8a:cc:a9:9c:4e:94:e9:cc:89:86:3d:b4:63:d3:b0:5d:
98:3d:42:70:4e:22:0f:04:d1:8e:f8:77:02:e4:bb:e7:a6:2c:
37:8c:d5:39:37:48:e7:bc:4c:ee:09:52:dd:bf:dd:d7:46:02:
47:c5:0d:ca:f5:1b:d9:6a:a8:a3:73:d2:4e:f2:03:ed:47:1e:
05:24:21:54:69:ed:ef:a9:6f:61:a7:79:26:ad:dc:32:ed:cb:
9f:95:db:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:41 2025 by rpki-client