Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/GGFiclsiEmsgZbqwTL7fq_cX4XA.roa
File: GGFiclsiEmsgZbqwTL7fq_cX4XA.roa (raw, json)
Hash identifier: dCBk3pAnBCWra5GtjlVIIO0Zk0nAnkQDi11gRaoDJeU=
Subject key identifier: 18:61:62:72:5B:22:12:6B:20:65:BA:B0:4C:BE:DF:AB:F7:17:E1:70
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067ED78A0CF8A767B0F559FBE0BCF7A
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/GGFiclsiEmsgZbqwTL7fq_cX4XA.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203472
IP address blocks: 2a12:3fc2:dd00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ed:78:a0:cf:8a:76:7b:0f:55:9f:be:0b:cf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=186162725b22126b2065bab04cbedfabf717e170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:2c:39:07:f6:6d:18:c0:dc:80:8a:a8:56:
aa:6d:a7:ed:9d:25:f6:13:5a:31:3b:c3:1e:cd:82:
dc:91:b7:25:75:16:a4:8e:51:5a:f4:8a:15:e7:3e:
fd:31:82:f5:2b:f7:7d:79:de:ed:ea:1e:69:d5:35:
c1:3f:e2:ea:ce:71:7d:ff:3d:8d:35:80:fd:2f:b6:
ca:43:33:8a:fc:0e:7a:bb:32:c1:e2:5e:1a:d0:f6:
2b:38:82:7f:5a:27:37:f4:1a:e8:0c:a8:bb:42:d9:
bd:92:d5:d8:86:94:13:15:95:11:c2:6e:85:2a:e2:
a3:e5:3f:cd:49:19:87:4a:10:2b:7f:ff:4a:f7:6c:
e4:1b:fa:2d:7f:8d:9f:31:3c:1a:7d:a1:50:6d:e6:
6d:fa:b3:2e:ad:a1:80:9a:a1:c8:9c:b8:8f:1f:e1:
b1:6f:25:a4:2d:48:54:43:f7:ba:97:5c:da:15:8d:
2c:50:78:14:38:61:83:9d:d6:ef:23:c9:ff:a3:7b:
b2:49:c5:b0:0d:8e:05:08:1d:ab:da:fa:e9:77:a1:
ca:f0:41:ad:9d:8a:ae:f7:9a:48:2a:08:3b:79:c7:
c7:06:6f:dd:d5:5c:11:ad:0a:51:9e:42:ad:4e:bb:
62:61:08:ed:e8:10:9f:0c:c1:94:f0:f6:e4:eb:70:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:62:72:5B:22:12:6B:20:65:BA:B0:4C:BE:DF:AB:F7:17:E1:70
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/GGFiclsiEmsgZbqwTL7fq_cX4XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:dd00::/40
Signature Algorithm: sha256WithRSAEncryption
26:0c:b9:dd:4a:13:24:7e:87:b5:bf:79:b8:d1:49:23:f0:7e:
a1:da:38:ad:32:1d:3e:7b:8a:93:b9:88:6d:97:ad:ec:e8:67:
28:2f:8a:1a:7f:30:45:ab:01:00:49:05:94:0d:a8:0d:02:d8:
82:26:01:0f:bc:e5:c9:33:8e:f6:36:1e:3a:d4:68:f6:25:08:
8c:fe:7b:cc:c7:08:91:5b:d2:bc:5c:9e:76:4f:ec:04:44:3c:
e7:57:c3:82:9c:93:87:d2:d1:5c:ea:f9:2d:de:dd:6d:c7:f6:
c9:b0:3c:8b:4d:0f:2f:4b:72:d3:d7:70:ec:40:80:dd:62:bf:
42:fc:f2:94:f6:58:c6:ad:43:2b:3f:08:b3:29:3a:91:77:0d:
b7:ad:81:84:4e:87:a2:e8:bf:2e:ab:fa:0b:f9:03:2c:84:a9:
7b:8f:12:00:f9:6d:c8:15:37:cb:54:69:5b:b5:eb:cb:7b:23:
b2:5d:fb:f5:44:e4:fe:35:ee:45:b9:54:d6:8e:e7:86:a1:d3:
6a:33:1f:a5:3b:01:16:ad:14:ee:1f:d2:8a:f0:1d:3e:7b:ac:
e5:4d:e6:ce:d5:1e:59:36:07:fa:34:cc:a3:0b:8f:67:f7:4a:
7d:65:26:cb:21:6c:48:47:76:50:79:12:8f:db:15:95:12:ce:
a3:18:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:39 2025 by rpki-client