Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/gmw_I3E6uPxb2e-OSOgT_HuXEKk.roa
File: gmw_I3E6uPxb2e-OSOgT_HuXEKk.roa (raw, json)
Hash identifier: rL/ejrsvY70HYutn8WqHCNVDH7wYuGK50gXp9wJZsis=
Subject key identifier: 82:6C:3F:23:71:3A:B8:FC:5B:D9:EF:8E:48:E8:13:FC:7B:97:10:A9
Certificate issuer: /CN=6c3ffebfc3c33b611b5875e3717eefb84ceeba1d
Certificate serial: 01857130A17D252E3B718AE0A68CE4DB12B9
Authority key identifier: 6C:3F:FE:BF:C3:C3:3B:61:1B:58:75:E3:71:7E:EF:B8:4C:EE:BA:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bD_-v8PDO2EbWHXjcX7vuEzuuh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/gmw_I3E6uPxb2e-OSOgT_HuXEKk.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208702
IP address blocks: 2001:678:a98::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a1:7d:25:2e:3b:71:8a:e0:a6:8c:e4:db:12:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3ffebfc3c33b611b5875e3717eefb84ceeba1d
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=826c3f23713ab8fc5bd9ef8e48e813fc7b9710a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:13:e5:b2:11:d3:89:b3:8e:f4:d2:e5:bc:1e:
f2:3c:65:6d:a4:ee:7e:d3:ef:44:f0:5d:c3:36:ac:
c9:60:f0:7d:cf:22:12:a6:25:d5:01:93:d8:54:f1:
a6:ff:cf:46:ee:b2:a3:47:75:a2:dc:a2:bb:8b:e5:
4c:e7:ee:ba:35:44:a5:39:44:5b:2e:ed:d1:02:5a:
a5:e6:f3:86:78:da:09:3b:78:0e:fd:29:9d:7b:2c:
0c:b0:e4:e6:9b:2c:d3:69:9f:89:96:60:71:7c:1c:
a0:2c:b6:30:f3:b9:f7:41:7c:96:be:49:82:e4:15:
9d:42:a8:80:b6:76:98:8d:e9:6a:24:1b:8c:70:cb:
bb:5c:5f:87:fa:6f:4a:f2:64:f3:58:70:fd:3c:15:
3e:b4:ca:4f:21:33:86:70:6c:52:80:29:69:91:f8:
f4:dc:15:33:31:53:85:c9:c4:3d:29:55:68:15:be:
be:39:4a:e6:2f:11:10:fa:fa:cf:1b:8e:d4:e6:d8:
6c:21:c3:2b:89:27:85:47:33:54:bc:a3:a0:28:2a:
d4:ed:16:8b:39:87:e2:c5:07:2a:4e:84:7f:e0:eb:
b9:f0:16:25:b9:cd:ab:7f:96:ea:b0:03:3a:c5:12:
cb:4c:10:28:75:a7:79:15:1c:5e:17:0e:6e:52:d9:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6C:3F:23:71:3A:B8:FC:5B:D9:EF:8E:48:E8:13:FC:7B:97:10:A9
X509v3 Authority Key Identifier:
keyid:6C:3F:FE:BF:C3:C3:3B:61:1B:58:75:E3:71:7E:EF:B8:4C:EE:BA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bD_-v8PDO2EbWHXjcX7vuEzuuh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/gmw_I3E6uPxb2e-OSOgT_HuXEKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/bD_-v8PDO2EbWHXjcX7vuEzuuh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a98::/48
Signature Algorithm: sha256WithRSAEncryption
12:44:b9:f4:55:fe:dd:37:4e:63:e9:03:c9:6f:84:25:d8:98:
82:b4:f9:c1:4d:a6:31:0a:6c:47:31:3e:08:a9:27:7c:95:42:
7f:66:0b:76:3b:18:cc:72:cd:e5:72:2c:c6:51:aa:a0:03:8b:
5b:63:ce:1a:8c:f8:dd:cd:b9:8b:34:88:d4:0a:f2:16:5a:11:
74:35:e8:4b:30:17:01:e0:2d:32:d1:f1:04:40:52:4b:f4:ca:
c8:03:51:f1:91:61:36:37:9d:49:d5:e0:c8:5d:d8:3e:c6:91:
1c:ef:e2:b0:28:8d:af:96:c9:42:c1:9d:d6:59:74:dd:c9:04:
60:63:83:97:01:6e:9e:a7:ae:dd:b2:e0:e9:80:11:77:3c:30:
2a:80:5c:40:8e:c8:28:db:ff:b6:cf:34:73:ac:e3:4c:ed:05:
32:b1:9a:91:96:ed:2c:e1:ec:e8:d9:41:4c:a0:bc:75:20:e1:
ee:01:8e:7e:ec:f6:96:3e:19:c3:87:9e:c7:1a:45:a6:4f:11:
94:bf:80:82:ed:a1:b6:6d:00:93:eb:7f:65:77:9a:a0:f2:17:
56:25:02:a4:dd:03:cb:ab:ec:9f:46:97:48:34:5a:93:52:cb:
4f:d5:0f:cc:1a:60:c3:9a:7f:ee:79:a6:b9:94:5f:cb:f3:7f:
93:aa:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:23 2025 by rpki-client