Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gKmpIHmhKw8IxA1430UNUbIT7fk.roa
File: gKmpIHmhKw8IxA1430UNUbIT7fk.roa (raw, json)
Hash identifier: lN/lhLcAbPHa9rMKosRs7p2iOYPz4Ov9Z03OAqaRdgs=
Subject key identifier: 80:A9:A9:20:79:A1:2B:0F:08:C4:0D:78:DF:45:0D:51:B2:13:ED:F9
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018BA8C2BC0701F9AA7892AC117AAF4F1D58
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gKmpIHmhKw8IxA1430UNUbIT7fk.roa
Signing time: Tue 07 Nov 2023 07:50:16 +0000
ROA not before: Tue 07 Nov 2023 07:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 2a10:12c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:c2:bc:07:01:f9:aa:78:92:ac:11:7a:af:4f:1d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Nov 7 07:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80a9a92079a12b0f08c40d78df450d51b213edf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fe:b6:5d:ee:2b:4a:3d:bb:e9:c4:04:e7:cb:
88:5b:92:c3:4e:0c:cd:c5:05:78:a6:38:0a:80:ec:
5b:a0:54:34:58:c3:15:6a:a8:ee:a0:b7:0e:77:d5:
df:23:26:74:58:9e:b5:7b:60:d7:3a:5d:c8:57:1f:
2a:96:d6:14:75:c2:68:d3:ce:fe:9c:61:be:f5:30:
7c:56:73:7a:67:9c:d5:15:cb:48:e2:b4:45:9a:d6:
71:0b:d2:20:6f:58:2d:a0:17:f5:8f:7c:66:6c:e9:
fd:7b:41:33:75:18:bb:d4:e6:5c:b7:af:be:93:19:
9a:8e:b2:ec:77:84:11:6d:11:1d:c9:bd:34:b5:15:
27:4c:1c:f9:78:06:50:d4:2f:aa:9a:d0:52:71:ba:
b7:01:9e:02:7d:2e:ec:48:cf:44:f3:92:35:b5:96:
ca:77:ef:cd:6e:15:3c:a4:da:d7:28:3b:dc:88:f5:
27:25:77:fb:08:eb:e4:54:cb:64:60:d9:43:35:bc:
00:3d:4a:8a:4b:04:d9:26:0f:b8:0c:f0:da:70:6d:
1f:ef:96:f3:c4:95:96:ae:18:61:60:10:7f:13:f1:
05:cd:16:09:98:f7:9e:61:a3:55:b4:2e:47:72:a0:
5b:8f:72:ba:89:e5:17:75:86:8b:2d:c5:8c:81:3c:
cb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:A9:20:79:A1:2B:0F:08:C4:0D:78:DF:45:0D:51:B2:13:ED:F9
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gKmpIHmhKw8IxA1430UNUbIT7fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:12c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:32:3d:cc:08:1a:02:18:d3:ea:06:59:97:5c:ed:3e:67:67:
5a:cb:18:6f:b2:04:58:3b:9b:cf:03:b4:55:b0:18:1d:e6:66:
3a:4d:c9:11:d2:25:15:95:97:f3:28:2b:63:f9:7d:f0:0e:37:
55:bd:c9:d9:d7:7a:68:ab:e7:70:db:e7:05:4e:a9:b2:15:cf:
d0:7e:1c:5e:9b:7c:43:9e:fc:f1:db:7a:96:05:e7:5a:53:1d:
61:15:55:de:1e:24:31:42:40:04:66:0f:20:f2:d4:90:4f:8f:
6b:8b:23:46:82:a6:ca:01:9c:03:eb:3e:78:2f:bb:b3:6f:e8:
82:bf:d1:99:e1:ae:49:c8:24:40:4c:d9:af:91:fc:ae:23:a0:
bd:58:a8:92:29:28:7f:af:b1:2a:2b:2d:be:82:23:29:e9:09:
e7:e7:08:8d:3b:14:b8:e7:61:e9:9a:11:91:15:6f:52:58:86:
c3:49:85:28:18:e4:52:5f:bd:8c:5c:84:84:56:c0:88:ca:cf:
b9:f0:5e:bf:a5:d1:99:48:84:f1:20:5d:57:b0:e5:97:71:58:
84:85:78:d3:e1:cd:39:5c:91:42:e5:bc:15:5c:83:1a:41:04:
77:36:7b:2a:b4:dd:81:80:bd:11:11:a8:4a:26:63:43:f6:ee:
5f:92:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:20 2025 by rpki-client