Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GkhuPy1k5Im67wI7AOywm5hnTxg.roa
File: GkhuPy1k5Im67wI7AOywm5hnTxg.roa (raw, json)
Hash identifier: NBJElEh7J9B0KDquebEoS2OXe4NX/7cSMgcPOjWOpzI=
Subject key identifier: 1A:48:6E:3F:2D:64:E4:89:BA:EF:02:3B:00:EC:B0:9B:98:67:4F:18
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01917134CEEF069FC48033167898D4C2B7C1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GkhuPy1k5Im67wI7AOywm5hnTxg.roa
Signing time: Tue 20 Aug 2024 19:12:51 +0000
ROA not before: Tue 20 Aug 2024 19:12:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:71:34:ce:ef:06:9f:c4:80:33:16:78:98:d4:c2:b7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 20 19:12:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a486e3f2d64e489baef023b00ecb09b98674f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:36:4a:b8:d1:67:7c:fd:00:da:2d:3d:60:
84:68:07:03:f6:ce:83:17:13:24:f2:16:02:0b:77:
e7:09:54:a7:b8:54:90:0d:bd:5b:4d:0c:23:76:e1:
70:8a:3a:98:62:69:01:b2:09:57:7a:fb:3e:63:70:
c6:a3:49:d4:e6:c1:e9:b1:01:ab:e0:b6:c5:b3:94:
77:ea:6f:24:11:80:22:3e:e8:d1:40:dc:06:65:78:
06:3f:b9:d6:28:9b:fc:08:12:33:b9:e6:6d:72:0f:
52:9d:a8:1f:85:b0:c0:e5:d1:aa:51:67:55:06:d2:
b3:6e:84:eb:52:54:77:26:be:0d:4b:5c:27:f4:5a:
32:a2:1d:f5:b6:f7:a5:3b:03:12:ee:9b:5e:c2:9e:
cf:e4:17:3c:3c:a8:22:13:4b:81:89:e6:70:1f:2d:
d8:86:c3:c0:c7:a7:34:01:13:4f:2a:39:95:1e:6b:
75:a8:da:87:09:2b:d9:97:d6:00:2b:75:21:8a:17:
13:6c:f5:ee:f3:8d:f9:30:ae:f3:ea:fd:e4:a9:a2:
78:35:71:f9:38:a5:73:5c:50:eb:5d:d7:dc:40:bb:
33:f7:bc:f3:7e:35:c4:02:ec:f5:de:e3:89:1f:46:
9d:eb:f4:18:2e:a1:18:df:4c:a8:51:b2:52:55:e1:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:6E:3F:2D:64:E4:89:BA:EF:02:3B:00:EC:B0:9B:98:67:4F:18
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GkhuPy1k5Im67wI7AOywm5hnTxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8a:2d:59:c3:1c:30:da:e8:0d:1e:a7:5a:22:28:96:78:ba:eb:
29:bb:1c:e7:6b:ad:8a:dd:73:cb:fe:09:ca:1c:f4:38:06:b0:
c7:50:97:c5:3c:a7:6f:03:10:77:84:71:33:50:3f:b5:c6:38:
c0:ea:c5:4e:cb:21:9c:6f:2b:23:bd:c2:76:1c:55:e9:6d:bf:
a2:7c:42:3f:ce:a9:cc:d3:6d:a5:fd:67:e1:b2:d8:a5:bf:9b:
c3:b0:0b:0c:39:1c:5c:f2:c0:5c:8a:2e:91:b5:df:30:5f:7b:
b2:85:ed:23:8d:d6:a7:b3:df:69:e9:4e:7d:fd:81:49:4f:1c:
80:3f:1c:e8:82:97:d8:c7:6a:0e:70:1a:b4:6a:ab:9a:cf:92:
83:9a:ef:9f:77:71:a3:c2:9e:c6:28:32:1b:0d:fc:d5:7e:72:
90:e7:e1:27:81:c8:ad:f0:92:59:44:42:d0:9b:88:cf:6e:ac:
16:9c:e2:84:5d:33:3a:88:a3:cd:1b:2d:3f:94:d6:86:47:bc:
0b:b7:1f:6b:c6:1a:2d:9a:fb:25:3d:2e:48:07:49:d0:92:06:
f2:1d:0f:00:7a:83:e9:4d:04:d1:8d:d4:76:99:ea:5b:82:46:
df:11:6a:bb:99:3f:47:e4:52:e6:74:71:e9:42:44:87:30:ad:
ed:fd:d0:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:27 2025 by rpki-client