Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/GanbvvtqSZENbmIdtfbYun4fuOo.roa
File: GanbvvtqSZENbmIdtfbYun4fuOo.roa (raw, json)
Hash identifier: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=
Subject key identifier: 19:A9:DB:BE:FB:6A:49:91:0D:6E:62:1D:B5:F6:D8:BA:7E:1F:B8:EA
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019424458940A58C62BAB0F56F257E256EA4
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/GanbvvtqSZENbmIdtfbYun4fuOo.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50819
IP address blocks: 2a00:1480:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:89:40:a5:8c:62:ba:b0:f5:6f:25:7e:25:6e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19a9dbbefb6a49910d6e621db5f6d8ba7e1fb8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:ba:76:d9:b1:f3:b4:19:84:c2:1b:75:5d:
a7:7b:3e:8d:80:ae:1d:88:55:48:4c:f5:e5:a0:7d:
83:a0:8a:d1:3e:46:ec:43:5c:6a:bd:3d:f2:a8:bc:
c5:2a:97:3b:0c:ae:48:47:fc:f9:da:66:66:de:8a:
4e:fa:b4:af:cd:51:21:1a:b4:79:e3:12:d5:17:22:
2b:93:8b:fb:2c:6e:22:c5:31:92:61:fd:bd:50:f7:
a4:ae:32:69:35:f8:10:14:70:d7:95:fd:c1:30:58:
f7:8b:9d:b9:9f:e4:15:13:ec:42:81:17:1a:b7:11:
ec:82:c4:59:a6:4e:09:e5:01:00:d3:dd:06:40:f7:
92:1b:a7:7a:94:d5:af:97:f9:72:96:01:5c:42:2e:
14:4c:15:5b:7a:37:64:fc:b7:2c:c0:09:94:ba:45:
0e:3f:67:44:0f:a2:6b:4a:19:75:83:01:26:a5:92:
74:cf:d7:90:87:e9:72:de:07:9c:85:cf:85:d4:e9:
89:56:b0:d1:94:f9:11:b2:2e:3a:ca:0f:ea:b7:1a:
1d:81:23:9a:09:a7:4c:4c:90:c2:32:f1:92:e4:09:
29:74:ac:b5:b6:62:e5:32:a9:4a:87:19:4b:12:55:
ed:8e:5a:5c:a6:24:91:b2:7e:b8:66:be:04:67:51:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:DB:BE:FB:6A:49:91:0D:6E:62:1D:B5:F6:D8:BA:7E:1F:B8:EA
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/GanbvvtqSZENbmIdtfbYun4fuOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1480:3::/48
Signature Algorithm: sha256WithRSAEncryption
32:e4:f8:03:80:64:d6:ce:c2:4b:d3:dd:1f:31:de:13:21:12:
15:1a:64:15:e8:f3:61:c2:9e:d7:b5:8b:5b:f0:15:5e:6b:8d:
5b:6b:c9:5c:63:69:09:44:d0:93:63:ae:fb:fe:f5:3f:6d:cc:
7f:ab:1e:50:83:f6:5d:4c:bb:66:da:5c:98:7c:c4:74:85:98:
22:4c:59:0c:8d:75:de:84:ea:ff:b1:64:7d:c0:b8:4e:80:a1:
a4:d3:01:f6:bc:53:eb:ea:ef:63:21:cc:05:be:a2:4d:df:1b:
ae:7b:dc:cb:60:7d:83:15:3f:67:28:29:e1:81:c0:6c:da:04:
3f:96:4e:65:f4:ce:e3:4f:f3:8b:77:13:6c:72:8a:aa:9a:48:
d9:3e:f5:2b:46:86:68:89:e4:93:cf:20:12:97:92:b8:30:9c:
6a:c9:7b:bd:18:d8:ed:87:c4:51:1b:7c:e5:84:14:da:b5:ae:
aa:40:08:fe:ca:4f:3e:c5:e2:2a:87:fe:49:e9:05:bc:bc:06:
52:31:07:66:b6:67:36:8a:41:88:2d:ea:95:e3:52:95:f1:81:
13:7e:cf:ca:92:88:23:a0:8e:94:86:45:74:f3:9e:76:a4:29:
86:3f:a7:90:93:b8:5e:91:dc:d3:07:11:1a:6c:81:43:d7:31:
c8:30:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:19:45 2025 by rpki-client