Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/GGYsUbNmcwRXrjXwCfuzJhyk4kc.roa
File: GGYsUbNmcwRXrjXwCfuzJhyk4kc.roa (raw, json)
Hash identifier: J7VFcwr7sFGWQDbVe90pSJ6hH8RyG9CWQkvikNqtFU0=
Subject key identifier: 18:66:2C:51:B3:66:73:04:57:AE:35:F0:09:FB:B3:26:1C:A4:E2:47
Certificate issuer: /CN=2ac77e8001f0d4a213837b9c65ad9a1f33dd8bcd
Certificate serial: 05C07438
Authority key identifier: 2A:C7:7E:80:01:F0:D4:A2:13:83:7B:9C:65:AD:9A:1F:33:DD:8B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksd-gAHw1KITg3ucZa2aHzPdi80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/GGYsUbNmcwRXrjXwCfuzJhyk4kc.roa
Signing time: Sat 01 Jan 2022 06:57:44 +0000
ROA not before: Sat 01 Jan 2022 06:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209616
IP address blocks: 2001:678:15c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96498744 (0x5c07438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac77e8001f0d4a213837b9c65ad9a1f33dd8bcd
Validity
Not Before: Jan 1 06:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18662c51b366730457ae35f009fbb3261ca4e247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:ae:ad:71:7b:9a:70:18:e8:05:28:df:b7:
7d:17:a7:a2:80:21:d8:4d:2e:d5:3f:89:0c:01:29:
31:9f:11:40:a2:1b:e4:98:d5:a9:03:83:41:c4:2e:
eb:dc:21:06:73:d8:88:2b:c7:f9:45:71:b5:b6:8a:
2b:06:af:55:87:54:9b:f7:3f:ee:e1:fe:71:f3:94:
c6:91:f3:ca:0b:48:a1:00:75:dd:48:ee:61:68:b0:
b9:b0:f3:82:07:55:35:0b:a2:b8:d3:22:4f:b3:15:
85:64:f3:76:44:fe:8e:eb:fc:1c:ce:7c:21:68:a3:
5f:bc:18:85:19:e2:6e:90:bc:f0:98:6f:5f:21:66:
8a:33:68:49:1a:4f:13:b5:31:04:99:be:96:5d:59:
2f:93:63:55:55:6a:c7:7f:6f:46:35:19:ed:47:82:
79:6b:d4:35:2b:79:08:dd:03:da:64:3f:a2:e7:3b:
3e:59:93:25:db:0f:cb:02:e1:2d:db:22:96:24:28:
ea:a6:e1:34:46:1c:e6:aa:1e:44:7f:4c:c8:17:d3:
1b:76:99:c2:3c:c3:9c:38:51:6d:cc:72:7f:96:89:
0c:97:c4:bc:48:77:0f:64:36:fb:b9:f7:ec:38:f3:
1c:1f:01:30:f3:b6:e0:6a:d3:50:17:5a:e7:27:29:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:66:2C:51:B3:66:73:04:57:AE:35:F0:09:FB:B3:26:1C:A4:E2:47
X509v3 Authority Key Identifier:
keyid:2A:C7:7E:80:01:F0:D4:A2:13:83:7B:9C:65:AD:9A:1F:33:DD:8B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksd-gAHw1KITg3ucZa2aHzPdi80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/GGYsUbNmcwRXrjXwCfuzJhyk4kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/Ksd-gAHw1KITg3ucZa2aHzPdi80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:15c::/48
Signature Algorithm: sha256WithRSAEncryption
9b:e8:57:04:e7:4b:a7:18:0c:68:a1:2b:2b:43:b8:55:75:6e:
b6:a9:1f:f6:84:f2:53:45:91:7a:c2:59:07:f9:cc:9f:45:73:
d9:1a:96:a8:bc:6e:ca:7d:d7:4a:75:9b:99:71:3c:41:db:84:
74:22:ad:7e:49:d6:45:9b:48:67:1a:9e:b1:db:58:82:f1:f1:
a9:9e:d2:90:9c:20:f2:e2:9e:bc:74:4c:95:96:38:4b:28:6d:
d3:df:71:fe:1f:cf:d2:d0:69:30:2d:0d:e8:ca:a5:e2:14:ce:
b2:cb:ec:ef:c4:e3:ed:0b:dd:13:ec:6d:41:32:20:97:23:cc:
0e:3a:ef:40:6d:8b:7e:65:ce:1c:d3:8d:2d:79:b2:5d:90:ac:
1e:09:b0:e8:f9:71:26:bc:8c:07:f3:a8:f9:2c:63:b7:7e:aa:
d3:72:94:62:ec:a6:7a:0b:15:77:3c:47:5f:0b:e7:e7:47:aa:
73:33:d2:e6:df:d6:8a:1b:59:86:b4:b0:67:36:10:a9:59:2d:
61:de:e9:2c:bb:ec:4c:79:14:e2:a1:9f:4b:6d:67:1b:f2:7a:
d7:d7:9e:5d:45:bc:37:58:86:91:d6:0d:09:b7:3a:42:0c:fa:
9b:b4:ba:3a:42:f8:aa:48:03:6a:df:67:b6:25:db:7d:69:c5:
fc:79:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:19 2025 by rpki-client