Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gcXrEw0fwYi-K1CFtZ6lZQtMTY4.roa
File: gcXrEw0fwYi-K1CFtZ6lZQtMTY4.roa (raw, json)
Hash identifier: ArqCDANFmYWrvNtYAQQcBiqDQqho+xakytHQ+sbZ0NE=
Subject key identifier: 81:C5:EB:13:0D:1F:C1:88:BE:2B:50:85:B5:9E:A5:65:0B:4C:4D:8E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193D06E7E654955C6B24CC0C6C7793AA2A6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gcXrEw0fwYi-K1CFtZ6lZQtMTY4.roa
Signing time: Mon 16 Dec 2024 17:05:22 +0000
ROA not before: Mon 16 Dec 2024 17:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:d06d:a205/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:6e:7e:65:49:55:c6:b2:4c:c0:c6:c7:79:3a:a2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 16 17:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81c5eb130d1fc188be2b5085b59ea5650b4c4d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:fe:f8:dd:ee:1f:a3:58:2a:b3:a4:a8:e0:
76:68:37:60:1b:f1:cf:6e:65:82:83:f2:7c:03:d4:
4d:f4:d2:5d:8b:9e:cb:d7:02:9c:e4:bf:45:eb:be:
ab:2c:ae:c1:bd:fd:7f:34:c3:91:3a:7e:d7:cb:25:
3c:f3:75:66:4b:c1:c6:58:28:bf:2e:0c:bc:81:ff:
61:7e:76:bc:3b:d5:99:d8:d1:9f:30:68:61:8c:27:
ae:e6:f7:80:85:e2:20:0e:a8:e1:cc:d4:ae:7e:08:
e0:21:21:57:54:63:6c:de:bc:d4:35:0e:68:cc:a3:
bf:71:2f:a3:30:12:f7:75:94:3d:f0:68:45:19:88:
ee:ba:7d:a4:06:28:1d:3e:f4:10:dc:28:b5:80:2a:
67:b7:fc:3e:00:89:ee:ca:16:f4:ea:ac:46:a0:ff:
17:4c:41:66:23:78:34:72:67:b1:86:9e:8d:f6:2c:
ac:eb:11:bb:2a:46:f2:94:25:fb:fb:6d:0c:a0:9d:
e9:66:35:a5:79:71:d3:a7:a3:99:73:36:a8:a6:91:
d2:81:78:27:3a:ec:ff:45:09:12:38:2e:5f:c0:37:
a5:6f:91:53:01:fa:b3:32:ba:f0:fd:06:67:45:be:
bc:01:d3:a3:00:57:4a:6e:59:7c:b6:6c:f2:7d:52:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C5:EB:13:0D:1F:C1:88:BE:2B:50:85:B5:9E:A5:65:0B:4C:4D:8E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gcXrEw0fwYi-K1CFtZ6lZQtMTY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:d06d:a205/128
Signature Algorithm: sha256WithRSAEncryption
75:fc:db:53:31:65:d5:fa:89:74:8b:87:89:6a:fb:3b:ec:64:
de:f1:d5:c8:40:9c:1b:b4:85:f3:fd:5f:b3:16:73:f3:b5:be:
a3:6f:ac:6b:7f:b6:18:0c:c3:96:ff:5f:7d:4c:c4:d7:57:d2:
15:5e:c8:cf:a1:93:2a:9e:24:18:58:34:95:ff:fa:10:c3:f4:
9c:4b:66:c6:85:00:76:c1:3c:4f:1b:2c:a6:f5:1b:69:e5:99:
4d:46:fa:30:43:20:0e:9b:88:8f:19:46:a7:5a:94:43:ac:fe:
6a:5d:c5:d6:ae:c2:74:09:f4:f4:19:20:1e:9e:90:49:35:bd:
1b:f5:e6:a9:e9:fa:b0:16:04:d9:eb:9c:9f:e7:75:93:d8:48:
cc:ee:98:a1:da:58:0d:f9:b1:ee:8c:25:ec:a9:a0:61:d0:da:
44:ba:4a:bf:3f:e0:8f:21:90:cb:5c:33:1c:9c:30:c1:94:49:
1d:db:e7:ac:39:ac:65:23:7b:aa:95:db:d1:5b:88:0c:f6:b5:
b4:96:3f:85:73:52:a9:5b:e8:b5:6c:0b:2d:0a:8f:44:51:99:
80:b3:ee:5e:e2:4e:97:75:cf:d9:1e:82:80:c1:fa:0b:d1:6c:
88:8e:99:eb:56:28:b1:06:04:48:34:3a:0c:06:5b:c9:0d:00:
8d:5d:48:b4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:06 2025 by rpki-client