Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GsGSb7isBW_oMDefLy045d3YZ9I.roa
File: GsGSb7isBW_oMDefLy045d3YZ9I.roa (raw, json)
Hash identifier: wdLX9sdddDDx4ww7Is5kBmj9hlk9F1anU83Z2aheAN0=
Subject key identifier: 1A:C1:92:6F:B8:AC:05:6F:E8:30:37:9F:2F:2D:38:E5:DD:D8:67:D2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918FACE2B8E6B6121FB6D04FEB7A7D0ABE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GsGSb7isBW_oMDefLy045d3YZ9I.roa
Signing time: Mon 26 Aug 2024 17:12:37 +0000
ROA not before: Mon 26 Aug 2024 17:12:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8f:ac:e2:b8:e6:b6:12:1f:b6:d0:4f:eb:7a:7d:0a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 17:12:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ac1926fb8ac056fe830379f2f2d38e5ddd867d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:4c:70:55:5d:95:b2:32:d5:0a:70:d2:11:
56:88:66:81:76:79:ab:77:db:77:4d:46:6b:9a:e2:
d1:7d:c7:98:3d:a2:f5:6a:3c:9d:75:29:86:39:7a:
e6:8e:0e:8f:1c:2e:40:2d:8a:d4:6d:56:6c:4e:41:
70:0c:4e:80:41:5a:4d:54:08:1e:6e:ca:08:d1:ea:
8d:85:5f:f1:68:7d:ac:ce:96:cb:15:5c:25:20:ee:
d6:6e:d1:c0:88:b5:51:3e:72:aa:5c:99:bb:ab:e9:
6c:78:2f:93:ce:6b:f2:bd:19:48:e5:ce:d2:2d:73:
ed:60:d7:4d:ce:4a:5b:2a:b8:66:b0:3b:a2:9f:ec:
8b:1a:18:8b:bc:5d:bd:bb:17:c2:5c:1e:71:b5:c2:
fa:ae:ff:5c:5d:78:2a:79:8c:3f:c0:8d:a8:f5:ea:
29:bf:fb:18:c6:2d:2a:4c:5e:36:e5:31:2a:0d:c4:
55:89:31:7e:1d:ba:40:d6:21:41:36:41:c7:e4:c6:
3c:fb:3d:6f:da:2c:ea:f3:d4:a5:e0:26:9f:9a:dc:
32:54:96:cc:ce:93:5b:bb:68:73:fd:c1:5b:b0:c4:
3d:17:05:66:c1:24:b9:52:12:4e:96:58:3f:97:80:
2c:9c:11:40:34:74:51:c1:05:91:23:bc:20:32:da:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:92:6F:B8:AC:05:6F:E8:30:37:9F:2F:2D:38:E5:DD:D8:67:D2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GsGSb7isBW_oMDefLy045d3YZ9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
00:33:aa:6b:9e:85:2f:30:dc:7c:2b:23:e2:e5:cc:1a:ea:cb:
0b:db:d4:43:8b:9b:61:99:64:96:37:f8:0a:f1:dd:97:c2:3e:
0f:03:ad:15:7a:55:fb:a1:15:48:4d:9f:0d:af:c6:31:39:69:
29:c6:3e:0d:5d:e5:5a:1e:14:e9:9a:0b:11:ab:57:82:70:2b:
a2:a7:2e:2b:e4:60:dc:9b:8d:c8:97:40:62:68:40:92:1c:a3:
87:83:db:db:fb:89:62:e2:6f:5c:7b:c4:fe:1a:ee:62:55:1f:
29:21:c0:e9:0d:18:e1:4a:d5:57:6e:65:b8:bb:b7:be:b6:d6:
6b:a8:37:22:02:f5:1c:db:62:9f:d9:73:26:29:a0:83:61:63:
c5:cd:ff:a5:72:4c:3c:ab:eb:82:be:b4:94:0e:b1:5a:ae:61:
c5:e0:46:6e:46:b6:32:39:d7:dc:c7:69:21:cf:97:4b:62:d7:
aa:cf:5e:a1:55:7d:86:4b:69:04:5f:e2:44:85:1e:8a:65:a6:
87:7c:9c:d3:f0:38:58:69:16:b3:9e:c2:50:12:56:e9:98:cb:
16:e7:66:01:15:0c:75:2f:6f:28:b4:0d:8c:b3:1a:91:c2:40:
c5:00:f2:8f:7c:cc:66:ad:2b:7c:2f:a3:b6:ee:75:55:45:f3:
7b:a8:d2:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:04:12 2025 by rpki-client