Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/Goxrp879_J5buQR39LV8jISHPfc.roa
File: Goxrp879_J5buQR39LV8jISHPfc.roa (raw, json)
Hash identifier: vgWxdmbFFE/fIrxbE4Hz8JfEbrJTZWgc88Rx9zkF408=
Subject key identifier: 1A:8C:6B:A7:CE:FD:FC:9E:5B:B9:04:77:F4:B5:7C:8C:84:87:3D:F7
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 0187BB149686D1CE2413647269FC637413DF
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/Goxrp879_J5buQR39LV8jISHPfc.roa
Signing time: Wed 26 Apr 2023 01:01:41 +0000
ROA not before: Wed 26 Apr 2023 01:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22439
IP address blocks: 2a0f:85c1:270::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bb:14:96:86:d1:ce:24:13:64:72:69:fc:63:74:13:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Apr 26 01:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a8c6ba7cefdfc9e5bb90477f4b57c8c84873df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:d8:c8:5a:83:8b:3d:86:8a:6d:bf:af:b6:
36:ef:da:98:54:33:0d:5c:73:12:bc:49:97:26:06:
3e:ae:3e:af:c3:31:dd:2f:76:b8:b2:c5:ee:5f:89:
5d:1d:e5:7e:da:d8:7c:a2:d1:31:bf:ee:16:6b:fd:
db:3e:c3:14:8b:5e:3d:b5:df:5e:08:68:81:a8:80:
84:6b:bb:13:28:35:36:07:01:9a:ab:17:6f:f0:e3:
a3:63:16:25:b0:44:56:3b:4b:f9:19:55:c2:d6:7a:
21:41:43:17:22:52:81:24:91:b8:10:39:25:24:8c:
c8:d1:4d:2a:02:22:7b:87:ec:9b:2b:5d:47:3e:6b:
41:2e:6a:b9:02:69:bc:d8:37:4a:8d:c5:57:18:6b:
97:9c:36:2c:c0:fb:64:fa:da:34:85:9b:07:4a:5c:
09:61:6c:48:7d:da:da:aa:69:f4:45:75:a5:27:d1:
64:e9:49:6f:b1:12:d0:ce:2e:99:1a:ea:63:fd:ab:
2e:de:43:4c:ce:cd:61:a8:f3:a9:2a:e3:89:8f:3a:
b9:76:d4:0c:65:7d:96:15:90:fa:57:e8:80:ac:ca:
2b:83:03:20:44:52:dc:aa:18:ff:7a:7c:21:4e:b1:
d3:e5:76:88:a6:9b:91:67:6e:0e:7f:41:db:37:7a:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:6B:A7:CE:FD:FC:9E:5B:B9:04:77:F4:B5:7C:8C:84:87:3D:F7
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/Goxrp879_J5buQR39LV8jISHPfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:270::/44
Signature Algorithm: sha256WithRSAEncryption
26:15:6c:8c:3d:42:e1:d9:eb:89:f3:3d:78:1e:1a:e2:62:c2:
f3:5a:07:57:b0:ec:6f:4a:3a:24:ab:3d:19:0d:45:c0:91:3c:
95:d9:3a:33:de:65:ff:9d:17:13:ab:7d:e6:ff:ab:e0:71:74:
54:7f:9a:7c:57:d5:7f:9c:16:84:8f:a5:3d:21:6f:0b:54:8c:
5d:db:f1:af:ee:eb:f8:40:d3:96:2c:5e:72:48:34:ce:f7:8e:
6c:56:a9:1a:10:80:c6:72:2f:19:8e:7b:b5:be:f7:e1:dd:f8:
85:94:e8:82:d1:96:bd:99:b0:b2:88:29:45:a4:04:74:a5:7c:
95:18:35:dd:ae:25:bd:df:a9:17:9d:86:b3:e1:62:94:92:40:
96:ce:ae:2f:ad:e4:44:0a:03:a8:48:72:e9:c6:48:61:fd:64:
18:e0:b8:1d:47:1b:d5:c5:09:6f:d3:1c:a6:bf:af:35:51:1b:
34:68:19:c5:ca:13:d1:ef:c3:2f:95:3a:c1:7a:48:1c:2b:f4:
5a:c2:4f:a1:bd:05:09:e2:9d:2c:1e:81:f2:71:28:ee:13:a3:
f5:04:f9:de:fb:83:97:ad:ea:0d:11:c4:28:fe:b7:bd:73:74:
cd:21:31:d5:a9:6a:50:a3:6c:7e:d1:fc:7c:8e:00:5b:4b:30:
f0:27:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:06 2025 by rpki-client