Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GC_F1312L6iknw4daOMfiyWC00A.roa
File: GC_F1312L6iknw4daOMfiyWC00A.roa (raw, json)
Hash identifier: UV3Hk7fFefWnJ4Dd8eTqKzdUEJ+vajSoqDCyiu6pygw=
Subject key identifier: 18:2F:C5:D7:7D:76:2F:A8:A4:9F:0E:1D:68:E3:1F:8B:25:82:D3:40
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191426C614841E3E50D460B92144B67680A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GC_F1312L6iknw4daOMfiyWC00A.roa
Signing time: Sun 11 Aug 2024 17:11:24 +0000
ROA not before: Sun 11 Aug 2024 17:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:42:6c:61:48:41:e3:e5:0d:46:0b:92:14:4b:67:68:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 11 17:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=182fc5d77d762fa8a49f0e1d68e31f8b2582d340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:80:14:7d:12:5b:87:f3:b1:2e:30:eb:e9:
88:ca:af:6f:25:6a:8b:12:d1:a8:63:f2:25:83:88:
de:01:17:45:32:8a:67:ac:7c:72:75:f3:ab:69:b8:
dd:d5:44:48:46:ae:e3:d2:20:a5:1a:06:fa:09:69:
af:78:7f:6f:9b:87:bd:cc:40:51:f4:20:d6:0c:1c:
6b:18:4e:bd:1f:36:44:85:23:52:47:56:f4:1b:f5:
38:36:3e:87:57:59:a5:14:4a:f9:4e:aa:99:5c:c2:
37:fa:94:35:8f:82:29:fa:e4:2f:47:26:22:3e:7d:
34:89:6b:e2:ab:cf:41:07:dc:18:c4:6e:33:9a:ad:
f1:fd:e8:49:03:28:4b:43:74:d8:f6:ad:53:d3:ab:
10:56:4f:e1:10:f6:8d:77:c1:31:2b:11:c8:df:d5:
42:ef:4a:b7:d5:89:89:86:7d:48:23:34:fb:6e:bc:
38:6c:3f:8a:a2:35:64:23:b5:b0:38:95:d6:53:89:
ac:8e:ac:2b:75:cd:dd:c9:18:22:a2:ed:b8:77:30:
e2:0a:93:c4:71:68:25:6f:50:fb:42:af:7b:55:e1:
3e:f9:5e:a6:f3:4d:29:f6:40:15:67:ed:df:f3:c0:
bb:5f:90:82:64:25:c3:00:85:1e:07:e4:84:85:d4:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:C5:D7:7D:76:2F:A8:A4:9F:0E:1D:68:E3:1F:8B:25:82:D3:40
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GC_F1312L6iknw4daOMfiyWC00A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
94:5d:40:b0:e6:07:18:7f:f4:4c:b5:5c:d3:ee:0a:fc:e3:14:
11:73:f4:b7:fe:2f:5c:21:fa:10:dc:00:4c:78:53:c9:80:89:
4b:e6:31:09:ba:ce:6f:ba:8e:0b:b7:94:93:dc:b0:23:6e:b2:
d6:b6:41:ef:4d:a8:b7:05:5f:af:df:e4:07:48:1c:9f:03:9f:
17:d0:2a:75:40:ba:19:9d:e5:08:cf:d0:a3:7e:82:e1:01:02:
6a:46:29:c7:e4:ac:60:de:76:12:20:5d:c7:16:72:c9:04:46:
fb:9c:0e:0d:63:6b:1c:73:ec:2a:91:ff:4d:85:9b:e3:59:e2:
0b:4c:fb:c6:38:25:9d:13:1b:82:2c:77:4f:78:4e:04:30:24:
85:d8:6d:d6:68:4c:81:15:4f:7d:44:08:8e:fa:df:bd:ef:70:
bd:24:18:5c:6b:25:4d:30:86:bc:74:63:ec:08:19:67:98:19:
91:9a:10:49:d4:b2:55:a6:cd:9f:23:f5:6b:28:b9:e3:ed:32:
53:cf:4d:7c:b4:2f:15:25:88:1d:80:fd:2b:6c:17:7b:4f:48:
af:94:7e:3e:15:25:18:67:d4:10:d5:16:a5:e1:4f:7a:7c:4c:
5e:5c:5e:d0:0c:56:23:dc:17:81:3d:0f:fd:b9:e1:28:d0:43:
b0:c2:33:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:03:07 2025 by rpki-client