Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/gnCeSZoIiLVaka81SLnakBuc_cI.roa
File: gnCeSZoIiLVaka81SLnakBuc_cI.roa (raw, json)
Hash identifier: cRfqYjnBj716zwu3c4XTiSIVlnYuu6u9rltjfvBho7I=
Subject key identifier: 82:70:9E:49:9A:08:88:B5:5A:91:AF:35:48:B9:DA:90:1B:9C:FD:C2
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067E7D51A9CA22B0138CAE1C78DA6EB
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/gnCeSZoIiLVaka81SLnakBuc_cI.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200592
IP address blocks: 2a12:3fc2:e300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e7:d5:1a:9c:a2:2b:01:38:ca:e1:c7:8d:a6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82709e499a0888b55a91af3548b9da901b9cfdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:69:c1:cf:ea:40:f9:29:76:24:92:a9:1c:
3a:31:a7:a0:7e:0d:00:30:96:b5:3c:51:d6:88:35:
e9:c0:18:6d:ab:ec:ac:30:8c:fe:92:9a:1e:e6:61:
da:be:78:6c:f9:9e:21:7f:56:99:12:d2:97:8b:98:
bf:00:d7:f2:cb:c9:70:9a:fc:c3:ba:a0:c4:5f:dd:
dc:c9:8b:bc:6c:20:79:c3:4d:f5:a2:49:94:ab:c9:
fd:fa:59:80:c0:ab:16:52:2c:82:d0:97:93:08:0f:
82:37:8e:fe:5a:6b:08:da:6f:44:82:5e:aa:36:6f:
4a:37:a1:f0:a6:39:67:eb:26:6e:3f:bb:e9:7e:06:
93:39:8b:6b:a9:a5:a1:70:c2:33:60:25:be:f5:03:
7b:c9:69:bb:07:1c:63:ce:4d:8a:e5:f1:4c:e4:d4:
63:03:b5:91:e3:dd:61:57:a5:a8:0d:09:c1:68:d9:
7c:5e:37:fe:f7:d4:5b:23:66:91:2c:a8:c0:ca:52:
d8:f0:d1:53:39:c0:ac:07:b3:ec:d3:f6:94:67:d1:
f5:24:92:99:48:9b:92:f4:7f:3f:76:0a:99:a9:0e:
3e:fc:a6:24:8c:38:15:77:ab:82:1e:09:e6:ce:70:
de:af:cb:2a:ab:48:67:1c:88:a4:51:35:4a:44:ae:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:70:9E:49:9A:08:88:B5:5A:91:AF:35:48:B9:DA:90:1B:9C:FD:C2
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/gnCeSZoIiLVaka81SLnakBuc_cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:e300::/40
Signature Algorithm: sha256WithRSAEncryption
5b:60:ef:56:cf:fb:e0:ad:de:4a:51:e8:fc:19:a5:03:d6:ca:
b7:93:50:59:88:ff:d6:e8:e0:f0:e8:cb:33:ae:88:c2:51:d0:
be:e4:e1:7a:bc:df:23:7f:42:92:cd:78:e6:26:77:52:e1:55:
80:32:a2:7e:22:7e:2c:5f:16:cf:ed:46:87:da:73:b5:93:c2:
f1:e5:98:3b:0b:8a:0a:85:fd:a8:cf:bf:0a:fe:6e:3d:e7:27:
9e:7b:c3:ce:86:00:dc:dd:c0:f3:2f:fa:88:6b:d4:8a:6d:85:
35:75:43:78:e2:ed:6f:9a:a0:a9:e3:01:4c:74:53:ee:89:b3:
2b:01:cd:3e:7f:b8:15:41:28:5a:8e:a8:48:76:10:9d:ce:4a:
80:1c:8b:df:ec:53:6a:46:f7:c9:d6:b3:d9:5e:5c:63:db:d4:
2f:c0:13:68:67:00:30:02:50:3a:c1:67:1c:c4:7a:2b:4e:0a:
22:b1:a6:8e:33:53:91:9a:8a:b4:63:49:f3:b5:a9:93:2b:db:
6b:dc:1c:1f:40:db:41:3a:b8:88:11:29:88:db:15:82:7f:5f:
5a:4a:d3:3c:fc:bf:01:3e:6c:8b:57:84:11:de:2b:41:58:a3:
a2:23:1b:6e:b0:36:80:46:6d:fd:3d:ec:c9:2a:5d:9d:f6:38:
55:76:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:50 2025 by rpki-client