Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa
File: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (raw, json)
Hash identifier: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=
Subject key identifier: 1A:DA:E7:A6:7B:B6:12:EB:D3:69:26:5C:AB:E9:3B:59:CF:12:42:9A
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0194228D14E823E128B23AAA945FDCFED43C
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa
Signing time: Wed 01 Jan 2025 15:47:38 +0000
ROA not before: Wed 01 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211184
IP address blocks: 2a12:4946:4000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:14:e8:23:e1:28:b2:3a:aa:94:5f:dc:fe:d4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1adae7a67bb612ebd369265cabe93b59cf12429a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:01:6b:16:61:52:17:c9:ca:2d:af:af:e2:
a5:ce:17:70:18:31:4a:1f:d2:dd:fc:92:a3:23:83:
45:d1:86:e9:7d:6c:09:be:bc:0d:ed:6d:22:31:6f:
30:6f:87:ed:05:1b:5a:73:05:cc:79:d3:cb:5b:c4:
84:1d:39:4c:87:31:c2:10:b3:66:58:29:ff:fc:3f:
6e:59:8c:f3:a2:83:44:18:35:10:6e:b5:5f:a1:c4:
bf:0c:9b:a8:54:1a:fa:af:cf:2d:ec:35:e2:64:85:
ac:bd:c2:35:67:d9:95:cd:f9:eb:b5:65:eb:18:95:
38:8e:6b:50:08:fb:db:9e:96:1b:9a:e4:34:8d:83:
30:90:26:6f:91:8d:7d:22:8d:2f:d3:e6:25:5d:b0:
e3:b5:ce:a3:0a:c3:31:57:07:2a:24:4c:2b:e8:aa:
b2:8a:d2:3f:34:73:6a:64:f1:a2:dc:7e:fc:f0:7b:
44:f6:38:46:47:2e:bb:55:8d:33:57:74:e0:2b:87:
c6:4f:ff:2b:b3:2c:14:9d:ef:54:8c:25:1e:dc:02:
2d:b4:27:cd:a4:65:ab:77:bd:75:d9:94:61:6c:fb:
78:8c:f8:0b:d2:31:31:0d:5b:73:f1:cf:8b:f3:f0:
bc:3d:54:6d:74:9b:0c:0d:2b:f4:3a:cd:c3:31:e9:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DA:E7:A6:7B:B6:12:EB:D3:69:26:5C:AB:E9:3B:59:CF:12:42:9A
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4946:4000::/44
Signature Algorithm: sha256WithRSAEncryption
a5:64:31:2e:75:d2:f9:75:fa:9b:21:cd:50:7e:f2:e4:f5:27:
da:24:9c:f9:95:f1:45:78:fd:d8:e5:e0:60:24:4b:63:82:7f:
2d:e0:e5:5b:4f:18:2d:77:ac:74:a7:a5:46:2d:d2:6c:fe:f6:
84:6a:1e:76:dc:c1:f9:d2:81:17:99:13:bc:56:de:3c:b8:d5:
55:c5:82:38:7b:2c:41:ee:9e:9d:d6:ce:b8:9a:86:1a:c0:53:
81:dc:27:0f:19:54:00:ce:83:6e:59:03:5f:2e:23:14:af:ae:
44:a7:d3:00:ee:c5:56:eb:1d:e3:39:e0:1b:9a:c3:77:45:ad:
a9:01:11:24:9c:39:35:4b:c7:c4:6b:63:69:c6:8f:75:33:d6:
68:71:e0:b6:1b:d7:30:ce:b8:27:36:f0:1a:eb:d7:a3:19:69:
cb:57:95:ff:57:cd:58:bf:72:a3:c4:a0:38:34:b0:d0:37:82:
7a:75:07:1e:82:78:33:41:52:f5:a2:8b:59:c7:03:cd:cf:13:
cd:c5:f1:12:4d:d0:91:0f:fe:03:37:ca:d3:5e:87:f2:4b:cc:
f2:8f:de:77:2d:08:fb:43:03:c5:85:01:9a:7b:2f:d0:7a:61:
60:f1:76:d2:aa:f8:94:c3:a1:03:a8:ab:d3:69:cb:4e:3a:45:
73:d9:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:39:51 2025 by rpki-client