Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/gtgQ_ekA3bJACMevsOtUHfK0VcE.roa
File: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (raw, json)
Hash identifier: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=
Subject key identifier: 82:D8:10:FD:E9:00:DD:B2:40:08:C7:AF:B0:EB:54:1D:F2:B4:55:C1
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 0194244484BD3333AC8654AD9C522EC3A095
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/gtgQ_ekA3bJACMevsOtUHfK0VcE.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58192
IP address blocks: 2a13:6fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:84:bd:33:33:ac:86:54:ad:9c:52:2e:c3:a0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82d810fde900ddb24008c7afb0eb541df2b455c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f8:1e:0c:49:4a:b8:f8:21:d4:5a:40:e1:de:
09:5b:e1:6f:cb:97:12:0a:37:82:28:e6:23:df:81:
45:df:07:d9:46:aa:7b:1b:fa:66:02:bd:80:c8:bf:
2d:22:5a:1b:81:62:00:e8:c4:7d:4b:55:13:c5:d2:
01:4f:2f:81:de:c6:ac:9c:cd:5e:00:0c:4b:9e:eb:
57:3f:ae:a3:79:ee:5d:60:0c:2c:96:4e:ae:c8:79:
69:f7:56:d5:a1:2d:61:90:63:63:77:64:e9:66:97:
3c:3f:a3:c6:5f:f6:e9:01:97:9a:7b:7e:59:f5:32:
86:bb:33:2c:de:58:86:82:ef:1a:8f:b8:94:00:d6:
9c:e8:e8:e3:35:32:4f:0c:4f:9b:79:11:e6:ee:53:
e5:e3:94:91:f6:0b:f8:11:97:1d:fc:5f:5d:e5:15:
9f:af:8a:c7:bd:36:99:71:6c:3f:f6:a3:0a:97:76:
8d:01:8a:db:b5:a3:8b:0d:3b:50:0a:6f:29:d0:70:
91:73:04:44:1a:5f:b0:59:1f:3b:fc:5c:b3:15:4d:
f3:30:e0:7f:46:c5:ba:8f:e0:2c:53:d7:dc:62:f0:
6a:0e:50:02:14:70:f8:b6:2d:56:64:26:8d:4b:a6:
16:2c:ff:20:01:76:b8:01:df:43:49:0d:1e:40:bf:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:10:FD:E9:00:DD:B2:40:08:C7:AF:B0:EB:54:1D:F2:B4:55:C1
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/gtgQ_ekA3bJACMevsOtUHfK0VcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:6fc0::/29
Signature Algorithm: sha256WithRSAEncryption
16:1a:14:9c:04:3e:a8:27:7d:1e:d5:a3:d7:7d:ab:5a:7c:af:
80:0f:91:1e:52:7f:25:06:e9:f8:e2:60:45:50:5c:d2:7b:f0:
07:d8:46:ee:6f:bc:03:a8:07:0d:8e:d4:b9:85:c3:ee:6e:ab:
26:e6:4d:16:bc:eb:82:a3:9f:13:26:24:4f:4b:0e:1c:c6:b8:
85:9d:88:46:e2:49:9a:93:1e:0c:7b:75:5e:a4:06:4b:5f:c5:
d0:8a:6b:5a:0b:41:86:ce:56:e0:da:06:55:94:7c:2f:ca:c6:
b4:d3:1d:4f:c6:9f:51:a4:7d:b0:76:ad:54:f2:5a:12:96:56:
5a:33:bd:03:b1:f6:de:78:6e:e2:c2:6b:59:b9:b5:b6:29:0d:
7e:d4:3a:4c:88:5f:53:c4:34:06:8e:7d:c0:39:da:39:6d:c3:
d7:fc:89:3d:4e:d7:da:6f:43:d9:61:71:89:80:ea:ea:2e:50:
0d:a1:b8:ba:0b:9b:74:86:1f:10:82:d0:23:fe:f5:f7:a4:bf:
6b:48:dd:d2:b9:c1:59:eb:12:cb:cf:7a:21:95:f1:01:f0:04:
30:7d:ae:96:3b:11:67:bf:1b:6b:f0:dc:4e:db:97:0b:17:c3:
2b:fa:fd:c3:5d:e8:92:dc:35:19:ec:58:ba:8d:71:e8:c6:d6:
c6:32:d4:5e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkRIS9MzOshlStnFIuw6CVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQxNDJiNWI2YTUyOThkNmI4ZmE1ODQ1ZjI5ODc4Y2Zl
YmJjNTQwHhcNMjUwMTAxMjM0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmQ4MTBmZGU5MDBkZGIyNDAwOGM3YWZiMGViNTQxZGYyYjQ1NWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvgeDElKuPgh1FpA4d4JW+Fvy5cS
CjeCKOYj34FF3wfZRqp7G/pmAr2AyL8tIlobgWIA6MR9S1UTxdIBTy+B3sasnM1e
AAxLnutXP66jee5dYAwslk6uyHlp91bVoS1hkGNjd2TpZpc8P6PGX/bpAZeae35Z
9TKGuzMs3liGgu8aj7iUANac6OjjNTJPDE+beRHm7lPl45SR9gv4EZcd/F9d5RWf
r4rHvTaZcWw/9qMKl3aNAYrbtaOLDTtQCm8p0HCRcwREGl+wWR87/FyzFU3zMOB/
RsW6j+AsU9fcYvBqDlACFHD4ti1WZCaNS6YWLP8gAXa4Ad9DSQ0eQL811QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFILYEP3pAN2yQAjHr7DrVB3ytFXBMB8GA1UdIwQY
MBaAFCttFCtbalKY1rj6WEXymHjP67xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUt
OGJlZmVlNDllZDRkLzEvZ3RnUV9la0EzYkpBQ01ldnNPdFVIZkswVmNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUtOGJlZmVlNDllZDRk
LzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNvwDAN
BgkqhkiG9w0BAQsFAAOCAQEAFhoUnAQ+qCd9HtWj132rWnyvgA+RHlJ/JQbp+OJg
RVBc0nvwB9hG7m+8A6gHDY7UuYXD7m6rJuZNFrzrgqOfEyYkT0sOHMa4hZ2IRuJJ
mpMeDHt1XqQGS1/F0IprWgtBhs5W4NoGVZR8L8rGtNMdT8afUaR9sHatVPJaEpZW
WjO9A7H23nhu4sJrWbm1tikNftQ6TIhfU8Q0Bo59wDnaOW3D1/yJPU7X2m9D2WFx
iYDq6i5QDaG4ugubdIYfEILQI/7196S/a0jd0rnBWesSy896IZXxAfAEMH2uljsR
Z78ba/DcTtuXCxfDK/r9w13oktw1GexYuo1x6MbWxjLUXg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:08 2025 by rpki-client