Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/GP8L0Brk6miWIr_jzrgxwfSb7pc.roa
File: GP8L0Brk6miWIr_jzrgxwfSb7pc.roa (raw, json)
Hash identifier: 5eh3fwoyj7ZQsdhbCIvKwypEwbcE25yEo3e6LGB7Bjk=
Subject key identifier: 18:FF:0B:D0:1A:E4:EA:68:96:22:BF:E3:CE:B8:31:C1:F4:9B:EE:97
Certificate issuer: /CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Certificate serial: 012DC281
Authority key identifier: 6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/GP8L0Brk6miWIr_jzrgxwfSb7pc.roa
Signing time: Tue 08 Feb 2022 09:37:59 +0000
ROA not before: Tue 08 Feb 2022 09:37:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34734
IP address blocks: 2a11:3880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19776129 (0x12dc281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Validity
Not Before: Feb 8 09:37:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18ff0bd01ae4ea689622bfe3ceb831c1f49bee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:bd:97:3a:94:f9:2e:1f:e2:a3:5b:97:99:
3e:d5:e4:db:4e:02:c1:23:ba:fd:86:e2:5e:35:f5:
51:e1:76:82:4b:10:21:26:fd:84:65:f5:b3:cf:77:
25:48:21:4d:9f:7b:1e:c4:6b:04:c6:9d:ff:5d:ef:
b9:6e:4b:5e:b4:58:5a:ef:dc:3f:b4:72:3d:33:f7:
36:a0:ea:9e:03:56:b0:0c:bb:cc:d8:0a:2d:0c:85:
f6:de:b7:8b:61:eb:1e:42:f2:82:79:98:c8:d3:82:
39:f6:8f:78:9c:44:b4:51:a7:f8:4f:ed:6d:e9:40:
18:bf:6b:19:34:c5:75:01:a4:a9:88:9b:f2:8c:24:
ac:0e:78:4c:f6:be:2d:59:fe:5a:c0:d8:19:53:97:
55:6f:cb:50:29:6b:fe:f3:0c:61:70:e2:df:79:eb:
ee:ae:45:bb:a8:b4:ea:be:2b:00:54:4f:9e:71:ea:
00:a5:01:21:e0:dd:e7:00:e3:a2:d4:ae:12:27:41:
52:96:c9:74:e3:08:7a:a1:16:cf:0c:eb:4e:36:58:
08:5b:5e:f9:70:e3:8d:0a:0b:92:8a:ef:56:c8:84:
f1:1d:52:e6:36:f9:72:11:0e:ca:fc:e7:92:cc:88:
4a:bb:fd:99:1e:ae:9d:92:67:1a:cd:a8:11:b9:62:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:0B:D0:1A:E4:EA:68:96:22:BF:E3:CE:B8:31:C1:F4:9B:EE:97
X509v3 Authority Key Identifier:
keyid:6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/GP8L0Brk6miWIr_jzrgxwfSb7pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/bU_HElxDUIksBN6JpnPeEYyKTpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3880::/29
Signature Algorithm: sha256WithRSAEncryption
9f:5e:f9:56:57:61:9d:a1:5c:c3:e3:0e:01:d2:2e:19:72:e5:
32:09:3d:5f:fa:f0:a7:1b:ba:f1:56:83:5a:79:5e:8a:c8:8a:
df:84:ab:7a:79:08:17:25:92:82:a8:f4:dd:ea:54:2e:4a:2b:
01:5b:67:ff:e1:6e:3a:c7:da:24:bd:96:9a:8a:27:3b:53:89:
95:cf:92:70:d2:e4:27:de:34:b1:aa:08:5e:78:46:76:e6:1c:
98:a6:5c:aa:b4:47:43:45:bd:de:93:08:9e:07:8c:84:51:95:
50:2b:d4:35:77:a1:71:21:46:07:42:02:67:31:e8:e6:57:2c:
38:4e:46:65:27:6d:0a:41:d3:8b:a3:74:b7:7d:6c:cf:77:10:
5e:ec:a5:bb:e3:b5:12:0a:bf:9a:d4:70:7b:d1:e0:6e:7c:7b:
70:09:e6:a1:d8:45:3a:44:4c:31:a8:7e:31:e6:2b:62:5c:7f:
c8:39:69:b0:00:fa:80:8d:b6:96:a2:92:ab:81:12:d6:85:60:
29:07:3a:a4:b8:53:03:b3:c1:99:31:01:28:b6:27:a7:18:6c:
70:71:69:44:6f:30:14:04:95:5e:a8:2d:9b:f9:cb:fb:82:05:
2e:f4:3f:3e:44:43:e1:a1:c5:95:7b:59:68:77:19:40:31:13:
81:29:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:34:10 2025 by rpki-client