Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/gnPA_RDY_oPthKwF9RWndEibsLg.roa
File: gnPA_RDY_oPthKwF9RWndEibsLg.roa (raw, json)
Hash identifier: 6pe7kLuL3HNlGocUazNevl+sJetnmtEmalDxC66VXvA=
Subject key identifier: 82:73:C0:FD:10:D8:FE:83:ED:84:AC:05:F5:15:A7:74:48:9B:B0:B8
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369E4630179AC0E4B68D100E6E765FB
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/gnPA_RDY_oPthKwF9RWndEibsLg.roa
Signing time: Wed 01 Jan 2025 19:48:49 +0000
ROA not before: Wed 01 Jan 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 2a0f:7803:fb4e::/48 maxlen: 48
2a0f:7803:fe50::/44 maxlen: 48
2a0f:7803:fec0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e4:63:01:79:ac:0e:4b:68:d1:00:e6:e7:65:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8273c0fd10d8fe83ed84ac05f515a774489bb0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:94:fe:f3:71:ff:5a:2e:6b:cb:47:62:2e:
0a:8d:32:2c:b1:b3:2d:e4:1d:88:af:cb:57:20:70:
65:53:cd:a6:fe:fd:19:44:ba:6b:9d:8c:44:28:0c:
d3:38:de:72:c5:dd:02:eb:c1:dd:63:f3:8f:9f:6a:
fd:ab:87:ad:1d:64:22:75:60:01:5a:50:d9:80:45:
c2:e7:be:7a:46:42:1d:27:25:28:db:ee:1d:6f:e9:
62:99:75:3a:d5:65:32:89:f7:95:aa:0c:b6:12:79:
54:49:a7:38:ce:4d:af:6b:9a:5f:73:11:a6:06:49:
b9:5d:91:9c:b9:d1:44:7e:5d:4b:c2:85:1c:c1:ae:
e3:07:aa:df:4b:0e:59:0f:66:11:00:51:af:48:54:
c9:15:d3:44:c2:ab:e7:9f:b4:13:84:f9:7c:67:25:
4b:2f:4a:a8:89:d1:12:d9:02:0b:38:a7:75:aa:6e:
87:95:62:5d:3b:43:1b:e2:5d:0b:e6:cf:06:56:eb:
82:f2:ff:f7:a1:4b:3a:b5:4f:d9:2c:b4:84:92:5b:
e1:ea:d7:fd:97:1e:85:c3:a5:1b:fb:c1:37:c2:43:
f7:f2:25:66:a2:b2:52:b1:d5:32:97:9b:f3:2e:da:
9d:02:41:00:b1:72:c9:d3:fb:6f:b7:8b:fb:a1:e9:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:73:C0:FD:10:D8:FE:83:ED:84:AC:05:F5:15:A7:74:48:9B:B0:B8
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/gnPA_RDY_oPthKwF9RWndEibsLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fb4e::/48
2a0f:7803:fe50::/44
2a0f:7803:fec0::/44
Signature Algorithm: sha256WithRSAEncryption
b6:58:a0:50:b1:48:b8:8a:e7:09:b7:b2:37:a3:62:49:7c:54:
88:6e:3a:d5:4a:99:b0:da:fa:90:b0:2d:4a:a4:0a:bd:e6:cc:
b4:19:c8:1f:62:2e:8a:3f:96:92:8d:08:40:65:42:0d:41:43:
06:f0:a3:d6:5e:49:9a:54:8d:07:f0:6b:59:93:bb:62:cb:5b:
d1:99:15:12:88:e4:1f:b5:c8:5d:6d:af:74:4b:42:9a:85:fc:
4f:78:1e:f3:c0:1c:c3:4d:d9:c4:17:4d:a3:2d:ee:46:11:29:
a2:47:ac:fa:0e:1d:14:21:62:a2:65:2c:58:2e:bc:5c:14:60:
1a:0f:c4:4a:72:be:9c:6d:9d:8e:ed:5c:bc:97:18:f9:3d:19:
56:65:df:21:d9:8e:37:4b:c3:6e:6d:8e:70:c6:ea:1c:1a:76:
eb:6c:80:89:40:72:43:c8:18:dd:31:68:5c:fe:75:53:90:0f:
21:97:3c:9f:0d:a4:99:c6:89:8e:2a:c8:2e:28:8d:f6:dd:d5:
d6:36:73:f0:eb:7e:ef:1a:fb:98:0c:6d:88:ff:97:36:18:11:
ab:2d:a8:27:96:d3:3d:92:32:22:6e:ec:a2:c6:26:e0:24:b7:
29:1e:ad:f1:b7:81:6d:6e:56:04:c2:fc:c7:e5:a0:b7:dd:57:
92:19:8e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:22 2025 by rpki-client