Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Ga-WcRb9G_V0l09MOLdSXhxGem4.roa
File: Ga-WcRb9G_V0l09MOLdSXhxGem4.roa (raw, json)
Hash identifier: ZxbzMmfmtY6cXd0wdYqtG/z2jnbAV35aW1JoEoIKiPo=
Subject key identifier: 19:AF:96:71:16:FD:1B:F5:74:97:4F:4C:38:B7:52:5E:1C:46:7A:6E
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018C0FCFBC132A0D7A17E46D4990FB08A87D
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Ga-WcRb9G_V0l09MOLdSXhxGem4.roa
Signing time: Mon 27 Nov 2023 08:05:21 +0000
ROA not before: Mon 27 Nov 2023 08:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a10:9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:cf:bc:13:2a:0d:7a:17:e4:6d:49:90:fb:08:a8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Nov 27 08:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19af967116fd1bf574974f4c38b7525e1c467a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:62:68:8b:67:2b:2f:c9:1f:17:ef:bb:32:
44:4c:de:13:5f:b2:f2:95:4b:bf:aa:b2:80:f1:e2:
6b:11:de:f8:5a:ee:31:53:c1:de:c7:c7:70:6f:2d:
a4:3c:2c:10:be:cd:2d:9c:34:d2:7a:82:f3:8d:86:
a7:a5:b6:f7:e3:70:0f:fb:d8:ff:5c:05:eb:21:e5:
59:70:38:b7:43:5c:40:46:5d:46:12:b9:b3:a5:89:
a5:81:23:23:d1:83:b0:79:56:c2:b6:83:84:a3:dc:
64:46:05:5c:2f:6e:19:0b:26:4e:99:d7:db:8a:fe:
0f:3e:be:2f:c5:aa:1b:60:90:c9:74:6d:43:c3:01:
75:36:11:ac:bf:d2:2e:b0:3a:32:57:67:b7:55:f4:
e0:87:2d:aa:2f:61:39:e1:1a:7b:d3:df:e4:0e:e0:
2b:c4:65:57:eb:43:77:e8:c8:53:50:24:a7:cb:bd:
a1:b6:b1:88:e0:6f:f9:c4:24:82:4d:bb:08:cd:5f:
59:d5:4a:8b:b1:42:d2:64:64:3f:c3:1d:9d:79:1d:
32:14:06:ad:4e:7a:3a:17:b7:e9:aa:4b:e5:d3:ec:
d2:13:ae:79:bb:c4:f4:c4:88:8b:c7:b0:b5:91:ac:
93:e9:83:c9:ec:b0:32:3c:dc:c0:58:09:fe:33:58:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AF:96:71:16:FD:1B:F5:74:97:4F:4C:38:B7:52:5E:1C:46:7A:6E
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Ga-WcRb9G_V0l09MOLdSXhxGem4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:15:ce:4e:3a:5e:77:7e:54:96:2f:6e:d8:7f:07:2a:1a:db:
5a:7c:1a:96:f8:7b:84:ff:30:ed:61:04:f7:25:e9:c5:e3:e8:
73:b6:9c:f8:c7:bb:b1:36:18:6c:94:54:6a:7d:e6:25:63:c7:
5a:f6:e6:ff:da:d3:30:19:5d:47:25:47:bd:54:7b:42:79:db:
6e:32:ab:5b:ee:1f:35:68:16:0d:64:c5:b3:e4:55:0f:20:e0:
bd:4e:00:6d:ce:0a:31:e9:2e:82:d8:9d:4e:2e:11:2d:0d:20:
ab:b8:8d:2a:2c:2e:9f:0c:63:14:52:18:e6:5b:a4:88:c6:30:
6e:da:0a:f4:a8:70:e6:1e:52:42:45:f2:1c:cf:04:c2:26:76:
40:85:18:b4:9c:a5:29:e1:f2:73:96:39:53:a2:ce:bb:4c:55:
9f:61:32:91:e8:3c:15:13:f5:22:17:5b:2e:52:38:ab:d1:1e:
dc:26:70:4d:bb:3d:b9:fb:e2:68:c2:bd:fc:bd:f5:81:fd:00:
26:21:c4:a1:15:f1:28:dd:5e:f3:89:48:7b:2c:43:e1:5a:db:
39:db:07:7a:87:46:37:33:83:70:15:cc:44:a6:f2:af:bc:3f:
35:10:5c:f7:67:9c:c6:7e:25:1f:97:21:7c:cd:06:2f:fc:20:
fd:39:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:36 2025 by rpki-client