Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/G-4qq7MOCO95cOhM0iem9sQWYF8.roa
File: G-4qq7MOCO95cOhM0iem9sQWYF8.roa (raw, json)
Hash identifier: Tu49nbC8Z4G85mREmLDA8w9xakbjAki8MHdj7t6zCrg=
Subject key identifier: 1B:EE:2A:AB:B3:0E:08:EF:79:70:E8:4C:D2:27:A6:F6:C4:16:60:5F
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 0344CA8C
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/G-4qq7MOCO95cOhM0iem9sQWYF8.roa
Signing time: Sat 01 Jan 2022 01:55:00 +0000
ROA not before: Sat 01 Jan 2022 01:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55020
IP address blocks: 2a0f:cf40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54839948 (0x344ca8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jan 1 01:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bee2aabb30e08ef7970e84cd227a6f6c416605f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:03:d8:3b:ff:d1:0b:ed:f0:05:99:b0:57:
5e:2b:31:f6:2d:59:41:ea:1d:b5:f8:18:cd:0b:81:
96:a1:73:99:36:76:ec:a1:01:ca:8c:10:f6:ce:be:
c1:86:62:4d:cf:73:07:6c:40:68:ad:db:77:80:15:
8b:13:ca:61:e3:58:f4:92:76:c1:11:c4:35:f7:d5:
c0:fa:40:52:7d:41:24:9a:40:90:92:5c:da:1a:44:
79:25:2e:a5:c9:a3:eb:f7:91:f1:35:8c:35:5f:2d:
a7:58:6e:38:24:da:27:06:58:b4:38:c8:e9:2d:a0:
9e:14:5e:35:66:26:ed:7b:4e:66:43:63:2f:80:da:
60:ff:2c:55:e6:2f:ba:45:1d:87:e6:86:1f:91:df:
fc:51:9f:ae:89:4a:75:51:07:36:21:72:41:d9:82:
18:9c:d1:88:c7:d5:77:65:8c:28:5a:89:b7:0f:38:
10:fa:95:b7:c1:e0:19:9c:01:1c:c5:54:76:e6:a9:
c2:b7:de:57:41:44:12:6b:ba:59:9d:8c:d5:49:84:
07:4a:8d:b4:84:35:26:89:35:f2:0e:79:f4:32:fc:
8f:b4:11:88:f2:17:e7:5d:bb:f6:31:ba:73:f2:55:
b2:5c:49:b5:5e:c6:ff:85:77:8f:ab:12:5e:40:9c:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:2A:AB:B3:0E:08:EF:79:70:E8:4C:D2:27:A6:F6:C4:16:60:5F
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/G-4qq7MOCO95cOhM0iem9sQWYF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:cf40::/29
Signature Algorithm: sha256WithRSAEncryption
78:a3:0e:de:34:78:3d:12:c0:2c:49:98:e6:f4:e9:56:ce:45:
6d:8e:14:c8:a9:08:a8:12:a1:12:ad:8e:7d:3c:6e:1e:30:0f:
cf:fe:29:2c:ff:ca:e3:db:26:5c:08:ef:90:cc:3d:09:66:01:
30:c4:89:c2:5a:e9:39:87:10:f1:8b:7c:ac:af:3c:88:a9:27:
f5:d7:47:e9:5e:f5:0c:4b:4d:83:d3:61:bd:ea:b0:bd:87:36:
e2:39:33:c8:2e:46:c7:51:92:7a:d6:ca:d8:6c:cf:f8:56:5a:
6b:5a:f1:db:e2:02:e3:53:e6:b5:ee:7f:8a:46:87:12:cb:c7:
9e:f0:3a:64:59:04:58:45:41:99:92:68:90:81:47:7e:02:33:
6b:5b:c0:49:66:ef:36:5e:9a:2d:64:bb:09:27:bd:e6:26:6b:
ac:5d:53:9f:e5:03:5a:f3:78:d7:73:16:68:85:c8:8e:9b:f3:
36:50:c3:85:a2:ca:8b:97:3e:b6:58:af:d1:84:70:12:65:ef:
55:1c:b1:b6:96:3b:49:97:9e:83:d2:c3:28:24:01:f6:5b:c5:
ef:b7:59:23:61:24:3b:a0:15:12:99:30:2d:ca:e9:c4:bd:6e:
6c:7a:b2:eb:9e:9b:54:40:83:3f:54:4e:72:56:7c:31:56:f3:
e2:31:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:12 2025 by rpki-client