Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gb_pBkDsWBLa1x8vkZ5q-fR8StU.roa
File: gb_pBkDsWBLa1x8vkZ5q-fR8StU.roa (raw, json)
Hash identifier: nPdp8vA3nQ0JxUwATu7QbJt0uQeqPQJUt8PNYlxhr30=
Subject key identifier: 81:BF:E9:06:40:EC:58:12:DA:D7:1F:2F:91:9E:6A:F9:F4:7C:4A:D5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194E53BFA00475A74048C320D0663D5D644
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gb_pBkDsWBLa1x8vkZ5q-fR8StU.roa
Signing time: Sat 08 Feb 2025 11:05:00 +0000
ROA not before: Sat 08 Feb 2025 11:05:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:e53b:45b6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e5:3b:fa:00:47:5a:74:04:8c:32:0d:06:63:d5:d6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 8 11:05:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81bfe90640ec5812dad71f2f919e6af9f47c4ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:ac:ad:86:2e:ad:5f:b2:8c:50:8e:d3:e9:
77:ac:11:16:d4:5b:39:76:3e:85:e1:e2:a9:be:f1:
e1:06:78:d6:1a:35:b6:e6:d0:84:58:8f:f9:23:ed:
18:ea:98:2d:fc:58:f2:2b:7e:26:fc:4d:a6:75:6f:
33:b6:7a:8b:77:03:18:3d:e4:08:e2:5f:b4:f2:41:
71:65:71:e9:78:3f:6f:ba:d3:0a:35:84:e7:f6:95:
7c:9a:71:59:28:c4:24:8e:34:3a:ac:0d:f4:f5:38:
ba:0a:37:b8:b7:a3:38:05:8b:5c:6f:43:32:2c:94:
98:13:54:6b:58:4a:78:bf:c5:ff:46:62:d6:ee:bb:
4c:2a:e1:92:f8:fd:c0:97:86:b1:ef:fa:51:ac:b2:
ed:79:b8:9e:c0:f3:00:eb:27:b2:45:50:b4:ff:4c:
e9:fc:4c:d8:a3:5d:53:b8:af:52:6d:16:7b:cb:8d:
78:3f:7c:7e:94:fd:7b:6e:00:f6:35:18:68:94:83:
85:2e:40:71:50:ee:63:ff:38:c3:03:39:6d:de:87:
64:f7:fa:3f:d3:c7:ce:1d:10:06:cd:96:62:4f:ef:
38:a5:e5:6b:fc:ab:b0:00:3a:db:d4:06:a0:88:6e:
92:c8:c8:09:70:59:bd:6a:f8:34:b3:e5:d0:ac:db:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BF:E9:06:40:EC:58:12:DA:D7:1F:2F:91:9E:6A:F9:F4:7C:4A:D5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gb_pBkDsWBLa1x8vkZ5q-fR8StU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:e53b:45b6/128
Signature Algorithm: sha256WithRSAEncryption
44:59:37:9a:15:9a:a7:18:ea:50:37:75:90:48:36:62:9c:9c:
d3:2b:30:c8:85:5f:d6:90:17:57:c9:46:fe:c9:7c:71:d0:ad:
98:43:9b:9b:f8:e9:51:32:70:39:ff:dd:3e:ed:19:cc:31:cd:
12:8f:59:55:fd:d4:4f:a8:3b:ed:b9:64:b5:7e:54:d1:a3:a6:
3e:ac:9c:8d:67:d9:1a:2d:65:9c:81:1d:ba:08:84:51:1b:de:
6b:71:ee:37:d1:42:7d:34:42:9b:33:47:b6:37:c4:5e:dd:e0:
99:8c:42:38:a2:24:48:4a:14:36:f2:9c:e8:8e:f6:a1:a2:ef:
39:38:ec:02:4d:21:74:ce:bf:8f:a6:05:ef:48:16:14:79:01:
0e:e9:b1:f9:9e:61:34:ec:25:7a:4b:aa:36:6e:b0:ad:1f:77:
60:ae:b1:20:47:03:33:b9:c8:ce:b7:f3:b6:0a:0c:f3:11:3b:
75:ef:55:09:14:e4:b8:71:dc:b2:1c:b2:72:3a:ab:19:81:32:
6e:c4:e0:fc:28:51:57:d4:d0:b3:2d:3d:2a:d9:b9:bc:44:08:
4e:4b:c9:68:b4:79:f9:1e:f8:e4:27:7d:e7:d0:f7:90:73:9d:
b5:07:b7:d7:dc:a6:e5:47:69:cc:91:61:40:86:6c:79:a1:8a:
5c:10:0d:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:21:55 2025 by rpki-client