Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/GLdUx6Mq8lnhxMZlyh36cXuArUc.roa
File: GLdUx6Mq8lnhxMZlyh36cXuArUc.roa (raw, json)
Hash identifier: /6maqJyLJCZsoNtENWrCrEfLSdwCdyxAYSQXRDjR288=
Subject key identifier: 18:B7:54:C7:A3:2A:F2:59:E1:C4:C6:65:CA:1D:FA:71:7B:80:AD:47
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D7656DE23A18FD75D4100C1E26577E
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/GLdUx6Mq8lnhxMZlyh36cXuArUc.roa
Signing time: Wed 01 Jan 2025 21:48:26 +0000
ROA not before: Wed 01 Jan 2025 21:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62874
IP address blocks: 2a00:f826:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:65:6d:e2:3a:18:fd:75:d4:10:0c:1e:26:57:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18b754c7a32af259e1c4c665ca1dfa717b80ad47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:48:37:12:f4:19:89:c1:cd:95:13:7e:1f:
27:b8:db:86:8d:a4:d6:79:e2:d0:16:91:e8:50:e2:
6a:b6:76:dc:a0:5c:b6:6e:f4:60:af:15:3c:fe:a3:
a0:d9:71:a5:9d:c3:fd:7e:eb:30:24:df:0b:85:ee:
37:88:88:25:00:8b:97:44:49:56:21:6f:f8:11:94:
b3:5a:75:0e:7e:62:24:ff:f8:3b:0e:b7:34:79:d1:
42:35:bf:12:40:ef:6d:53:f8:55:ba:2e:fc:6a:c6:
2c:16:5d:44:43:e2:63:9b:71:80:d1:9e:a7:0f:68:
ca:58:e4:e2:c9:fa:75:16:06:cb:c7:5b:c8:91:8a:
24:a9:9f:10:dc:dc:30:a1:7d:57:00:46:e3:86:97:
4d:a0:83:11:78:59:72:5c:e4:3b:d9:e8:3c:ea:d5:
da:f2:a9:85:d8:87:e1:f1:88:4e:fe:20:68:a8:a3:
56:fa:42:50:37:2a:28:5b:38:4b:f5:bb:68:21:1d:
cd:73:2b:78:94:a6:cf:73:ef:9c:b2:ad:40:d1:e2:
e8:a8:5d:6d:1d:14:10:af:7c:f7:08:a9:97:0c:bf:
65:49:55:c3:28:07:4a:a8:b2:eb:97:52:08:d4:98:
d5:f1:27:5a:20:97:7f:d5:92:30:ad:12:2b:94:0b:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B7:54:C7:A3:2A:F2:59:E1:C4:C6:65:CA:1D:FA:71:7B:80:AD:47
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/GLdUx6Mq8lnhxMZlyh36cXuArUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f826:11::/48
Signature Algorithm: sha256WithRSAEncryption
24:db:cc:4a:69:95:73:14:a9:37:35:7a:f5:20:3f:23:f6:68:
74:c9:cf:58:63:3b:a7:3a:3f:3f:13:23:03:03:b6:ac:e0:be:
14:a6:5c:a7:34:2c:5c:fd:7b:a2:b4:5f:2a:e6:e9:ec:e9:ba:
16:87:b0:05:f5:5e:92:38:6e:36:67:67:c0:2d:de:96:45:96:
83:9f:86:57:59:02:4f:2c:d5:d7:79:88:c9:61:25:4e:63:b7:
35:18:7c:c8:87:8c:b3:be:24:bb:24:83:0e:72:b8:1d:58:d9:
a8:32:c7:10:94:e7:84:f6:05:03:2d:0d:45:e3:40:08:8c:d1:
97:ba:fd:a9:ec:98:3f:38:e7:97:9c:3c:5c:bc:67:77:bb:6f:
7d:9c:a0:76:16:9c:59:ab:db:5b:df:2d:b3:91:24:87:6c:3e:
50:48:92:a6:c9:34:c7:5e:d3:66:6a:0c:42:c0:ab:b5:9a:ca:
63:9e:be:77:b7:97:6f:b5:b2:d5:59:e8:a5:0b:ae:7f:c7:7e:
85:c7:cb:f8:97:1f:17:79:9d:54:45:f5:a9:9e:7a:af:4f:41:
f9:1e:92:3a:08:e1:24:7a:26:be:68:8f:7a:91:eb:f8:83:20:
54:2a:d3:88:02:ee:a2:08:90:24:c6:b2:e8:df:4f:81:25:b6:
df:ff:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:14 2025 by rpki-client