Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/GTiO-SupitdTmKiZ_HKcU4MJuTk.roa
File: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (raw, json)
Hash identifier: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=
Subject key identifier: 19:38:8E:F9:2B:A9:8A:D7:53:98:A8:99:FC:72:9C:53:83:09:B9:39
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 01941FFA70D41E8D530C231C124FFA5ED7D9
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/GTiO-SupitdTmKiZ_HKcU4MJuTk.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:24f0::/48 maxlen: 48
2001:67c:2500::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:70:d4:1e:8d:53:0c:23:1c:12:4f:fa:5e:d7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19388ef92ba98ad75398a899fc729c538309b939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:55:84:c5:8f:70:df:92:ae:1d:a7:20:5f:
a5:4a:61:8c:ff:ba:ab:d7:3e:e1:fd:14:59:73:27:
c4:1a:f2:ae:81:79:70:49:69:b4:98:71:43:9a:d7:
6d:01:36:63:7a:cc:d7:d0:8e:3d:be:3c:95:93:d6:
d1:af:26:47:00:25:b4:de:6f:2d:6b:1e:44:1f:14:
ae:69:29:9b:dd:ce:a0:5a:08:7c:b3:b1:ff:95:84:
4f:e8:6f:fd:06:35:38:77:ec:c5:10:d2:38:5c:e1:
75:dc:16:4f:64:f8:c4:33:b1:24:dc:60:b6:69:6b:
fa:a3:66:07:6c:6b:fb:85:09:7d:13:b6:1e:a2:7e:
9a:a0:bc:74:5a:3c:82:c6:e3:17:34:13:05:49:7b:
1a:5a:6a:08:ea:6f:74:c2:b4:59:2b:3f:92:de:e0:
d3:7c:95:1b:98:f3:80:4d:83:fe:cb:48:7d:42:8f:
8b:f9:f8:05:4f:e3:3a:63:86:97:b6:b3:83:d4:56:
38:69:88:b0:1a:b8:d9:a1:d3:f9:66:9b:a3:bf:36:
c2:9c:9b:53:61:ff:8f:6a:a5:f7:db:8b:60:f2:46:
7e:d9:52:80:a4:e3:cc:19:c5:f5:5d:82:2d:80:8c:
8a:b4:2a:a9:1f:bb:4e:c8:90:f7:a9:48:f9:f1:d9:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:8E:F9:2B:A9:8A:D7:53:98:A8:99:FC:72:9C:53:83:09:B9:39
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/GTiO-SupitdTmKiZ_HKcU4MJuTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:24f0::/48
2001:67c:2500::/45
Signature Algorithm: sha256WithRSAEncryption
38:a0:07:2b:52:e0:82:3e:25:af:39:d5:15:f3:00:a9:1b:a3:
9f:01:75:64:ef:37:c5:86:de:a1:7b:f4:50:50:ba:06:6f:63:
3b:1f:aa:5a:7c:a4:24:f4:c2:af:8d:e3:90:5e:1d:37:5c:cb:
47:45:ac:ef:86:31:65:ca:c3:36:32:b1:24:84:99:58:51:a0:
a2:29:af:f9:d6:b0:6d:a0:f6:8c:06:cb:1d:6b:16:a4:74:9b:
3d:17:65:0e:03:3d:56:35:9d:22:dd:e4:7b:5a:a5:b9:26:f9:
3c:58:d1:39:f4:4b:b9:42:bf:a4:38:b0:73:4e:5d:c3:d7:4f:
c3:76:d8:5f:99:35:fe:ae:39:41:4a:90:d6:da:f3:e6:3b:db:
c0:be:f7:0b:f2:25:7a:47:09:2a:6b:a9:dd:d8:88:a7:b6:3f:
45:b3:bb:10:df:ad:be:bb:5d:64:30:f2:74:61:b6:bf:81:6c:
55:7d:a7:b7:64:4d:53:8c:cb:71:fd:5d:b9:e1:72:14:35:6a:
c8:a3:a9:d3:cf:5a:16:d1:70:c5:3b:93:7e:eb:1f:9a:90:7d:
7a:8f:a3:8d:17:e2:eb:74:80:fb:e6:1f:55:90:47:2c:00:f3:
3c:e5:85:85:78:25:1d:93:18:bc:fe:c4:a2:a0:8d:6a:a4:40:
90:c3:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:00 2025 by rpki-client