Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GwHhLfY2ynOS1qCjSPH2rPI7Scg.roa
File: GwHhLfY2ynOS1qCjSPH2rPI7Scg.roa (raw, json)
Hash identifier: ebape5ptiYYBvDwSOp0my4BS1/sCGqjDEm2dT8SpztI=
Subject key identifier: 1B:01:E1:2D:F6:36:CA:73:92:D6:A0:A3:48:F1:F6:AC:F2:3B:49:C8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019149B980C903F582988CD04AC28876674A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GwHhLfY2ynOS1qCjSPH2rPI7Scg.roa
Signing time: Tue 13 Aug 2024 03:12:59 +0000
ROA not before: Tue 13 Aug 2024 03:12:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:49:b9:80:c9:03:f5:82:98:8c:d0:4a:c2:88:76:67:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 13 03:12:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b01e12df636ca7392d6a0a348f1f6acf23b49c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:79:b0:96:5a:d3:0c:8e:9d:e8:84:c0:3a:
2e:02:b5:6f:1a:6d:56:2a:81:84:aa:08:67:64:31:
e5:a9:1f:86:5f:41:7e:41:96:b0:b6:86:91:bc:66:
ba:98:7a:b9:eb:c0:5f:fc:65:91:b7:9d:f4:38:ef:
7f:ac:fe:06:cf:34:75:b7:93:08:23:15:1d:dd:cf:
f9:1e:89:88:55:ee:1b:28:70:5e:bb:dd:ab:31:e3:
23:9c:30:ab:25:00:45:ac:8e:a3:27:04:46:72:fe:
13:e6:c0:be:ec:0e:c0:a3:d1:58:fb:6c:6f:f9:5d:
6e:83:a6:e2:5c:1a:8a:bc:d5:6b:95:c2:df:99:7f:
2a:3b:f2:d1:9f:0b:b9:8a:3c:c9:2d:ad:87:31:b0:
80:76:64:94:00:c8:16:4a:0a:f2:85:8a:2d:7e:75:
6f:34:90:f0:38:35:15:2c:26:46:7a:23:a4:23:2d:
71:f4:3f:24:ea:05:c7:38:a8:db:71:b7:7a:36:81:
80:af:00:38:3d:ff:13:90:b2:3e:25:ca:39:f4:06:
96:29:df:a3:af:e4:3b:1d:fa:75:b4:53:1d:93:3f:
16:2d:7b:f2:46:1c:62:2b:e8:11:fa:34:c9:db:30:
2e:55:10:5b:39:c5:3e:b5:49:22:1f:11:f4:74:a7:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:01:E1:2D:F6:36:CA:73:92:D6:A0:A3:48:F1:F6:AC:F2:3B:49:C8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GwHhLfY2ynOS1qCjSPH2rPI7Scg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
09:70:15:88:1f:12:e5:c7:95:b7:0b:82:09:bd:f4:1b:62:e2:
a3:21:d3:1d:7d:25:e7:ee:3b:52:89:f8:7b:0a:fe:4c:85:fb:
3e:41:14:a7:ec:1a:c7:84:77:aa:90:df:82:f5:da:96:e6:ec:
4a:e8:09:7c:db:88:8a:fb:11:fb:4c:b3:83:96:2e:c4:09:d0:
1d:ee:fa:ca:c6:a7:4b:37:b0:cd:49:04:85:cb:8b:a8:e4:0c:
a3:f8:4f:f4:da:3d:77:93:23:40:4e:b2:2b:db:5b:0d:df:16:
0f:18:ab:0d:8c:c2:85:5f:2b:fb:8b:f7:11:69:4f:f0:9d:92:
9c:36:be:96:11:e9:e0:84:26:07:fd:fe:92:7c:db:4b:9f:cf:
d4:f2:b8:92:a3:e3:74:62:46:ef:25:db:a1:20:21:93:08:34:
65:b7:eb:86:ef:7c:95:1c:d8:a0:75:13:f9:08:df:6e:1a:f1:
a9:bc:ff:65:bb:8f:4c:b6:bb:cd:ba:8b:46:27:90:ec:23:0a:
d8:ae:90:d1:be:62:f8:f6:ad:66:48:f8:7c:51:f2:70:7c:63:
10:43:23:87:61:cd:73:bc:fb:32:8e:e6:bf:dc:23:a9:eb:64:
69:27:24:0b:52:1b:68:50:e9:8a:bb:98:58:06:95:cf:e6:e4:
d0:b8:72:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:04:49 2025 by rpki-client