Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/GMAT5cnP7VsDriW3_zL3dmojRH8.roa
File: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (raw, json)
Hash identifier: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=
Subject key identifier: 18:C0:13:E5:C9:CF:ED:5B:03:AE:25:B7:FF:32:F7:76:6A:23:44:7F
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 01941F8C710EF05B888764CCFB7344509B16
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/GMAT5cnP7VsDriW3_zL3dmojRH8.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212972
IP address blocks: 2a0e:e704:43::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:71:0e:f0:5b:88:87:64:cc:fb:73:44:50:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18c013e5c9cfed5b03ae25b7ff32f7766a23447f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:bb:96:7d:9f:26:c7:e0:ed:17:c8:87:70:
c7:85:67:9d:7f:25:03:2a:17:ee:d0:97:3b:2e:e9:
2e:57:29:24:16:34:54:03:c2:ef:67:b7:f8:2a:ac:
81:05:21:38:e8:26:79:61:f9:5f:ef:f1:70:ef:ad:
33:3a:79:d4:76:25:5c:ea:b6:64:5c:88:6b:53:74:
ad:8d:13:67:3b:a6:98:e9:f0:94:ff:66:ab:f2:13:
6c:0d:08:71:b7:26:d5:fa:0e:e1:d7:73:07:cb:cc:
43:d4:92:17:91:4f:90:88:59:f3:3b:7d:b4:ac:26:
d5:da:fa:e3:d9:a2:a3:eb:2c:64:12:ca:76:77:53:
87:76:bd:98:af:61:e8:22:c6:ab:59:10:6b:b7:ec:
55:64:bc:a6:fb:46:40:ca:30:2b:40:16:cb:d7:3e:
3b:bf:21:8a:07:db:43:ce:0a:dd:ea:38:fb:99:67:
bc:90:e1:13:c0:80:61:99:51:21:2f:45:0f:09:6c:
a8:aa:74:30:c2:95:00:05:3a:b9:d7:04:20:88:11:
03:c7:7a:70:58:24:41:6e:e8:9a:04:9b:48:1a:af:
ce:5b:30:02:4b:95:6c:aa:99:78:25:7f:76:c6:93:
52:d0:11:d5:4e:b6:9d:22:8f:db:dc:63:88:33:1b:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C0:13:E5:C9:CF:ED:5B:03:AE:25:B7:FF:32:F7:76:6A:23:44:7F
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/GMAT5cnP7VsDriW3_zL3dmojRH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e704:43::/48
Signature Algorithm: sha256WithRSAEncryption
6a:f8:45:b3:19:ab:b9:67:7b:4e:9d:1e:26:72:1a:13:58:1f:
ec:16:1a:ef:90:62:f1:07:c9:00:ed:00:de:f2:0a:f6:9a:68:
bc:6a:5e:34:22:a2:b5:ad:49:b4:eb:42:ec:28:42:b9:0a:ee:
dc:41:d4:51:a4:11:97:e2:f0:ff:7d:fb:a3:38:ba:53:ce:35:
9e:59:50:e5:9e:c4:90:f7:34:d9:89:37:fb:29:1c:22:5e:0d:
05:74:37:44:74:47:de:e5:51:3d:7e:83:ef:53:f1:03:2e:9a:
8b:80:9d:fa:66:3a:5c:0f:b4:b3:9f:ca:c7:0e:17:58:e1:51:
b8:1a:3a:ee:20:35:88:11:0d:ca:3e:66:bd:1f:0f:b1:6d:24:
67:35:54:67:58:5c:75:43:2d:77:24:ea:03:e7:ad:bf:4b:69:
a2:a1:ca:37:fe:df:e1:a1:1a:fe:f7:9f:43:ca:a1:2a:a2:a9:
97:9f:63:6e:62:e8:b5:8c:4a:6f:1a:d2:02:43:7c:4e:98:fc:
dd:80:b9:67:5d:31:4e:1e:4e:61:15:36:09:ef:3b:a9:e4:c6:
04:a0:48:72:19:db:c2:9e:44:7b:e6:c7:98:34:57:42:f5:e9:
9e:2f:5a:2e:57:73:f5:e6:85:e3:c3:6d:32:22:b6:3e:3c:ce:
74:26:fe:82
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjHEO8FuIh2TM+3NEUJsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3
N2E2ZWYwHhcNMjUwMTAxMDE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGMwMTNlNWM5Y2ZlZDViMDNhZTI1YjdmZjMyZjc3NjZhMjM0NDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvii7ln2fJsfg7RfIh3DHhWedfyUD
Khfu0Jc7LukuVykkFjRUA8LvZ7f4KqyBBSE46CZ5Yflf7/Fw760zOnnUdiVc6rZk
XIhrU3StjRNnO6aY6fCU/2ar8hNsDQhxtybV+g7h13MHy8xD1JIXkU+QiFnzO320
rCbV2vrj2aKj6yxkEsp2d1OHdr2Yr2HoIsarWRBrt+xVZLym+0ZAyjArQBbL1z47
vyGKB9tDzgrd6jj7mWe8kOETwIBhmVEhL0UPCWyoqnQwwpUABTq51wQgiBEDx3pw
WCRBbuiaBJtIGq/OWzACS5Vsqpl4JX92xpNS0BHVTradIo/b3GOIMxs0lQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBjAE+XJz+1bA64lt/8y93ZqI0R/MB8GA1UdIwQY
MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt
YTk1NGQwNTM5OTRhLzEvR01BVDVjblA3VnNEcmlXM196TDNkbW9qUkg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh
LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7nBABD
MA0GCSqGSIb3DQEBCwUAA4IBAQBq+EWzGau5Z3tOnR4mchoTWB/sFhrvkGLxB8kA
7QDe8gr2mmi8al40IqK1rUm060LsKEK5Cu7cQdRRpBGX4vD/ffujOLpTzjWeWVDl
nsSQ9zTZiTf7KRwiXg0FdDdEdEfe5VE9foPvU/EDLpqLgJ36ZjpcD7Szn8rHDhdY
4VG4GjruIDWIEQ3KPma9Hw+xbSRnNVRnWFx1Qy13JOoD562/S2mioco3/t/hoRr+
959DyqEqoqmXn2NuYui1jEpvGtICQ3xOmPzdgLlnXTFOHk5hFTYJ7zup5MYEoEhy
GdvCnkR75seYNFdC9emeL1ouV3P15oXjw20yIrY+PM50Jv6C
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:45:35 2025 by rpki-client