Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G5GKrNQcf_fyBPo8dsmqKO7UNr0.roa
File: G5GKrNQcf_fyBPo8dsmqKO7UNr0.roa (raw, json)
Hash identifier: Mw4CzFMMXBTuyJlJcdBZ2YTLJZlfIuZpjSla+Wz6e50=
Subject key identifier: 1B:91:8A:AC:D4:1C:7F:F7:F2:04:FA:3C:76:C9:AA:28:EE:D4:36:BD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019472ADE51CC64BCBCA07B2EDDB5C7A218B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G5GKrNQcf_fyBPo8dsmqKO7UNr0.roa
Signing time: Fri 17 Jan 2025 05:13:06 +0000
ROA not before: Fri 17 Jan 2025 05:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:72:ad:e5:1c:c6:4b:cb:ca:07:b2:ed:db:5c:7a:21:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 17 05:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b918aacd41c7ff7f204fa3c76c9aa28eed436bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:0c:04:2a:ce:48:44:48:27:f0:6d:70:bd:
10:8d:7a:3f:9a:62:46:9b:9e:32:c5:81:16:c6:0b:
70:94:d7:cb:c7:e0:93:f5:db:10:6a:be:af:19:da:
c0:f4:31:8a:0a:a4:cb:66:f4:52:f3:89:e7:70:db:
25:a4:f7:73:d9:c1:33:10:58:7d:13:40:fb:3f:84:
61:af:cb:8a:1f:fc:26:d8:8e:f5:1c:54:35:b5:94:
d2:34:cf:0f:c9:6c:dc:67:4e:5e:40:57:11:ab:a7:
de:35:81:e7:bf:1c:29:6b:97:17:91:c1:cb:d8:9a:
51:df:af:8d:2d:0d:c6:b5:08:d6:8f:bc:4e:50:c0:
5f:5a:9c:27:38:81:04:d6:25:1b:4b:95:c9:8d:4e:
b7:54:8c:b0:13:f3:7c:4c:66:c4:d4:ab:ea:6c:b0:
f0:70:bb:59:41:07:fc:81:d5:0b:35:9c:19:49:0d:
b9:76:7b:c2:33:86:c7:f9:05:70:88:82:c4:29:50:
42:67:a6:f1:e6:ad:c9:1b:1c:78:12:09:3e:c2:1c:
90:a8:3c:14:0d:1a:41:ab:f4:4f:d1:92:05:03:09:
72:a0:56:9a:0e:67:1e:0b:f4:10:6d:78:46:0e:49:
e2:a3:b5:ef:d3:e0:28:93:27:60:f6:46:82:f3:a2:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:8A:AC:D4:1C:7F:F7:F2:04:FA:3C:76:C9:AA:28:EE:D4:36:BD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G5GKrNQcf_fyBPo8dsmqKO7UNr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
79:e0:ee:98:68:9f:b6:94:ea:11:53:c7:07:4b:d1:a2:b8:e1:
7b:75:f6:5d:4a:d4:72:39:e6:54:54:64:2b:30:74:5e:88:1a:
8b:56:db:85:77:36:ba:78:20:8d:9a:d8:3b:d2:53:60:32:f7:
34:16:20:4d:31:75:e1:03:16:ef:3b:2e:13:45:da:51:bc:85:
c8:84:89:7d:77:e8:07:56:c1:72:ff:23:56:b5:3c:57:69:b2:
7b:5c:9b:56:f9:39:be:aa:99:38:83:ca:3f:db:85:9d:5d:04:
b7:3c:3f:47:1e:8f:0e:d1:8f:28:90:9b:89:f1:c0:22:a9:26:
87:26:61:82:a3:bf:17:fb:45:d7:7a:b3:df:d4:8e:52:8f:6c:
62:7e:c8:b7:d4:c8:14:e7:9d:3e:79:c9:a5:4c:b0:44:d8:b4:
a3:3c:97:b0:43:80:b9:9a:0b:b7:0b:33:92:16:6f:22:58:3f:
57:47:74:d1:66:84:71:c9:13:7a:1a:0d:59:c3:18:91:42:c5:
42:d1:6f:d8:85:6d:08:fd:af:3a:5c:4a:8c:50:60:af:f0:85:
00:01:9f:c4:ff:22:46:c8:db:cf:fa:2a:4b:cd:fb:b3:73:9c:
1f:37:6a:9e:84:d2:ed:27:50:37:ec:be:75:78:6e:85:cc:a5:
09:de:3e:f3
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZRyreUcxkvLygey7dtceiGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTE3MDUxMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjkxOGFhY2Q0MWM3ZmY3ZjIwNGZhM2M3NmM5YWEyOGVlZDQzNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UUMBCrOSERIJ/BtcL0QjXo/mmJG
m54yxYEWxgtwlNfLx+CT9dsQar6vGdrA9DGKCqTLZvRS84nncNslpPdz2cEzEFh9
E0D7P4Rhr8uKH/wm2I71HFQ1tZTSNM8PyWzcZ05eQFcRq6feNYHnvxwpa5cXkcHL
2JpR36+NLQ3GtQjWj7xOUMBfWpwnOIEE1iUbS5XJjU63VIywE/N8TGbE1KvqbLDw
cLtZQQf8gdULNZwZSQ25dnvCM4bH+QVwiILEKVBCZ6bx5q3JGxx4Egk+whyQqDwU
DRpBq/RP0ZIFAwlyoFaaDmceC/QQbXhGDknio7Xv0+Aokydg9kaC86I1NQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFBuRiqzUHH/38gT6PHbJqiju1Da9MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRzVHS3JOUWNmX2Z5QlBvOGRzbXFLTzdVTnIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAeeDumGiftpTqEVPHB0vRorjh
e3X2XUrUcjnmVFRkKzB0Xogai1bbhXc2unggjZrYO9JTYDL3NBYgTTF14QMW7zsu
E0XaUbyFyISJfXfoB1bBcv8jVrU8V2mye1ybVvk5vqqZOIPKP9uFnV0Etzw/Rx6P
DtGPKJCbifHAIqkmhyZhgqO/F/tF13qz39SOUo9sYn7It9TIFOedPnnJpUywRNi0
ozyXsEOAuZoLtwszkhZvIlg/V0d00WaEcckTehoNWcMYkULFQtFv2IVtCP2vOlxK
jFBgr/CFAAGfxP8iRsjbz/oqS837s3OcHzdqnoTS7SdQN+y+dXhuhcylCd4+8w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:23 2025 by rpki-client