Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/gyqRsIv5YtGLcuPo84iy28_g0Ow.roa
File: gyqRsIv5YtGLcuPo84iy28_g0Ow.roa (raw, json)
Hash identifier: X5mGwt8IkxTSLJ+3/axB2X4+LJ3PGiNZFax8C/wKnhY=
Subject key identifier: 83:2A:91:B0:8B:F9:62:D1:8B:72:E3:E8:F3:88:B2:DB:CF:E0:D0:EC
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 0191E61F94CD7E4EDCD845F56AC4F797D4C9
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/gyqRsIv5YtGLcuPo84iy28_g0Ow.roa
Signing time: Thu 12 Sep 2024 12:05:14 +0000
ROA not before: Thu 12 Sep 2024 12:05:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206728
IP address blocks: 2a11:2081::/32 maxlen: 32
2a11:6502::/32 maxlen: 32
2a11:c102::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e6:1f:94:cd:7e:4e:dc:d8:45:f5:6a:c4:f7:97:d4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Sep 12 12:05:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=832a91b08bf962d18b72e3e8f388b2dbcfe0d0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:97:1d:d7:33:5c:9e:22:33:58:15:1a:69:
38:01:5b:a3:87:11:f3:37:8a:bb:08:ce:fe:7a:3f:
cd:6e:af:1b:04:bc:93:15:da:94:42:67:ab:e4:20:
c0:6d:20:42:30:cf:d2:d7:af:e4:08:8b:9a:17:97:
7e:ed:2b:54:51:2c:a7:5d:0f:df:a8:eb:cf:60:1e:
c2:e0:89:65:22:a0:f9:53:cc:58:90:5e:87:6a:3d:
df:6e:e1:f0:e4:42:47:e4:f7:e3:41:29:e7:33:fc:
ea:a6:f6:37:8b:2d:66:d2:06:69:29:f9:73:39:86:
98:dc:6e:8e:3f:2f:68:32:06:73:c1:3a:69:97:2d:
2b:8a:57:37:01:e5:62:3b:79:d8:44:27:36:7b:41:
2c:a7:1f:98:17:8b:01:34:90:df:18:77:c7:46:ee:
5b:79:a9:f0:09:47:88:b0:74:99:80:a0:f6:db:89:
3a:ba:ef:59:cf:30:03:e6:57:43:63:91:b5:56:a6:
9c:65:4e:48:4c:dd:6a:71:8c:59:79:0e:b0:31:6f:
2f:8e:c3:41:92:fc:aa:e5:af:bc:24:24:04:54:2a:
5e:cb:5b:30:05:26:27:63:9e:59:9e:46:46:bf:50:
08:fa:0a:2c:38:85:8d:d3:ae:b7:b8:80:9a:17:71:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2A:91:B0:8B:F9:62:D1:8B:72:E3:E8:F3:88:B2:DB:CF:E0:D0:EC
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/gyqRsIv5YtGLcuPo84iy28_g0Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2081::/32
2a11:6502::/32
2a11:c102::/32
Signature Algorithm: sha256WithRSAEncryption
6b:aa:3a:be:b1:12:b6:21:2b:8f:29:75:52:80:75:44:56:0e:
a7:72:1c:36:0f:47:8a:fa:8c:f6:d6:56:07:2a:cf:df:bc:f1:
ae:94:37:3b:71:29:4c:6e:b2:a3:90:da:e8:03:50:c9:b0:7f:
a8:27:31:8a:4a:59:71:04:cd:06:be:2a:7a:ca:57:69:09:de:
3c:8c:0b:98:e6:ee:d7:dc:9b:ec:8e:9e:f5:5a:4a:61:12:3c:
5d:4e:45:71:6c:3a:20:7d:03:4e:fe:ab:3f:68:66:87:4b:c4:
b5:43:75:75:5e:87:40:94:58:65:4c:b7:d9:54:15:dd:d5:51:
30:0e:bc:91:c1:61:52:e3:44:f4:c3:ab:4c:23:58:0f:d3:3f:
37:23:0e:0a:6e:33:13:71:44:5b:32:c5:e9:69:ff:b4:37:61:
99:19:07:ef:98:54:dc:a6:ca:d6:49:84:14:45:66:e5:46:9c:
ed:01:66:59:b6:83:ad:fc:d1:d5:f6:a3:53:9b:f6:9e:34:6b:
22:00:80:5b:1f:75:0e:37:7d:1d:be:b3:87:21:b8:54:9c:93:
7e:54:72:ca:ca:f8:a0:20:ad:01:85:00:c7:74:a3:4f:f8:e5:
b8:4a:37:bc:33:0f:c1:e0:89:50:84:5c:91:41:34:0f:18:df:
f7:28:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:56 2025 by rpki-client