Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GPv7Cu3AAIV17OB2hoOeeln0z0U.roa
File: GPv7Cu3AAIV17OB2hoOeeln0z0U.roa (raw, json)
Hash identifier: n6wsikUe3lM4uYpVDKStgKJqtWUTWWFr66jlTc1qP8w=
Subject key identifier: 18:FB:FB:0A:ED:C0:00:85:75:EC:E0:76:86:83:9E:7A:59:F4:CF:45
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D69BB57541E3C4FBFD842EAB6A26
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GPv7Cu3AAIV17OB2hoOeeln0z0U.roa
Signing time: Thu 02 Jan 2025 17:50:24 +0000
ROA not before: Thu 02 Jan 2025 17:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207807
IP address blocks: 2a00:7180:800c::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d6:9b:b5:75:41:e3:c4:fb:fd:84:2e:ab:6a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18fbfb0aedc0008575ece07686839e7a59f4cf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:5d:2c:9c:d4:5d:4e:3b:91:98:ff:fa:af:
f9:7c:a4:0c:eb:8c:d0:ef:5a:99:14:25:6e:a9:db:
5f:a7:c3:86:f2:1d:12:eb:c7:bc:b1:a5:fb:e5:1a:
88:15:f9:2d:50:19:1f:e4:e4:e7:14:d6:39:32:44:
92:92:d6:cd:20:31:ea:93:e1:84:80:8f:e4:57:9a:
11:0f:ef:98:c0:e4:7f:32:77:18:2d:31:00:34:c4:
27:86:f9:18:d6:f1:6b:94:f7:c4:70:c8:ba:1f:71:
a9:ee:02:25:10:05:d6:31:d1:a7:79:43:a0:38:2d:
c3:af:14:f4:c9:d4:76:a8:3c:eb:4c:7c:ed:3d:10:
c1:2d:32:f2:d5:d6:db:09:09:71:6f:d7:96:7f:ee:
c5:83:08:5c:aa:52:ec:6a:58:3d:67:cf:52:71:4a:
60:6b:5d:71:45:15:ee:31:e8:b1:73:4f:1a:24:7e:
a7:07:53:f0:e1:fd:59:0c:96:9d:06:4a:4d:ac:ac:
f8:9e:e0:3e:f3:b4:be:a1:fb:bc:36:08:1d:47:d2:
71:eb:0e:4c:b6:5c:17:5c:e2:12:47:25:ad:ce:75:
43:d4:6b:b2:bb:e1:96:53:7a:92:0c:ec:46:52:37:
60:d9:e2:60:51:2f:d3:ea:77:be:da:3c:1e:ef:42:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FB:FB:0A:ED:C0:00:85:75:EC:E0:76:86:83:9E:7A:59:F4:CF:45
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GPv7Cu3AAIV17OB2hoOeeln0z0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:800c::/46
Signature Algorithm: sha256WithRSAEncryption
45:b1:dd:2c:cc:3c:51:2a:62:08:b1:d4:4d:ad:f7:24:ce:e6:
87:99:7a:e5:65:c3:55:69:c0:7a:9e:9d:9f:60:52:07:92:34:
13:fb:da:66:0d:6c:42:2e:29:ca:ff:84:2e:7a:ae:0f:b9:17:
9a:70:80:ea:80:1a:c4:c9:08:a3:76:21:53:c9:45:cd:6a:ea:
94:21:c4:9c:d2:a2:72:79:25:e1:6d:6f:ea:a8:d3:0c:1d:59:
61:ff:48:27:09:fc:c7:6f:5d:2d:4f:76:43:f1:45:8f:06:23:
ec:02:ff:98:70:4d:81:46:11:94:1b:8e:82:dd:19:27:f0:af:
25:16:85:dd:f6:b3:32:ee:dc:f1:e9:37:40:ce:55:ab:3a:84:
06:6d:bb:cb:ef:72:ed:b4:3e:f9:4c:2d:2a:c6:3c:79:3e:da:
bf:5e:17:6a:7d:47:95:46:5c:e1:7c:75:a6:a4:84:43:bb:5d:
d9:c7:2d:5e:4d:ee:fb:12:d1:55:30:69:8e:73:a1:ce:d9:bb:
ff:83:e3:d1:41:10:a0:6f:45:0d:ad:42:cf:25:28:51:f3:54:
84:0f:0e:db:fa:19:6a:07:97:4e:d7:c8:7a:bb:45:bb:2c:75:
18:58:a0:89:45:07:c0:1b:3a:97:32:ff:e2:4a:de:4d:7a:de:
f7:ab:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:20 2025 by rpki-client