Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/gtQV_zwRPLHuRPfREjsm-_muUpg.roa
File: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (raw, json)
Hash identifier: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=
Subject key identifier: 82:D4:15:FF:3C:11:3C:B1:EE:44:F7:D1:12:3B:26:FB:F9:AE:52:98
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 0194258E94AB8FCFFC8F357FA6152A6C700E
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/gtQV_zwRPLHuRPfREjsm-_muUpg.roa
Signing time: Thu 02 Jan 2025 05:48:08 +0000
ROA not before: Thu 02 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211722
IP address blocks: 2001:67c:2970::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:94:ab:8f:cf:fc:8f:35:7f:a6:15:2a:6c:70:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Jan 2 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82d415ff3c113cb1ee44f7d1123b26fbf9ae5298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:19:79:de:b3:56:36:b2:a4:49:f1:87:10:
ee:d8:84:36:c4:48:24:d4:55:58:22:26:fe:a3:a6:
cb:6d:52:64:87:34:8b:c1:a3:a9:fe:55:f6:9c:18:
ec:6e:19:48:35:57:9d:96:1c:33:63:f6:68:f0:03:
0b:95:ff:c3:24:b5:9e:16:67:47:24:be:31:78:78:
f6:f6:37:42:89:eb:1e:21:52:95:46:0a:f2:90:76:
58:31:8f:0e:8b:76:ee:b2:02:36:b0:a2:b5:f6:61:
8c:45:06:c8:d6:1c:95:56:1e:5a:f8:17:45:a6:eb:
81:3b:00:1b:98:eb:a1:e5:64:29:15:1e:4b:fb:20:
9b:38:1b:cc:be:34:d6:01:c4:55:53:5c:68:5e:91:
37:2f:5c:a3:ad:5e:9d:a8:94:77:cb:df:d2:a7:80:
a5:9c:ec:1a:69:ee:8e:b5:a8:dc:47:f6:e6:89:03:
93:96:54:22:a8:cb:5e:e9:02:72:71:d3:f5:45:59:
81:84:1a:16:ab:b6:be:db:b6:c0:a7:2e:4f:57:88:
bb:29:4a:48:e5:8d:e8:52:22:e8:c6:a0:e4:08:42:
04:89:09:3d:9b:84:ff:d3:25:ea:96:d1:6e:5b:09:
1f:de:43:a0:2a:a5:85:ab:1d:7f:d0:96:f4:10:b7:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:15:FF:3C:11:3C:B1:EE:44:F7:D1:12:3B:26:FB:F9:AE:52:98
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/gtQV_zwRPLHuRPfREjsm-_muUpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2970::/48
Signature Algorithm: sha256WithRSAEncryption
48:2a:19:3a:27:2c:14:f5:19:52:e8:ea:94:2a:73:63:70:71:
30:65:fa:4a:0f:b8:49:79:81:55:25:16:7b:4b:bd:a0:29:5a:
a9:7f:d8:0d:ef:ad:9d:ce:ff:5c:7d:38:1c:68:8a:c8:11:5d:
4c:0e:a2:11:e6:7e:52:b2:09:4a:44:ae:c8:b4:4a:9e:6c:b8:
83:b7:f6:3b:5f:d5:05:a9:e2:16:6a:26:ef:3a:b7:df:18:a2:
8b:7f:89:c0:02:11:73:db:35:1e:ed:d6:fc:6d:fb:ce:39:84:
00:55:36:50:74:a3:eb:f6:e0:19:56:11:40:2d:e6:8e:a7:4c:
ad:79:18:b9:c6:30:2d:bd:e4:d7:52:d4:5c:e5:5b:65:26:3a:
b0:7f:77:3f:97:87:63:4d:8c:09:f9:94:09:0a:1d:2a:69:4a:
90:9b:9d:39:90:0f:3d:4d:fd:bc:fc:cc:4e:d4:ab:21:0c:df:
73:5d:b7:ab:74:35:9f:b2:8a:b7:b0:2b:b4:89:d9:ad:c2:7f:
b7:4f:47:68:26:d7:c8:f8:d4:16:0a:04:39:b8:f8:a2:82:14:
c4:b2:98:cc:cf:87:53:79:fd:85:da:b0:92:ac:f7:ad:6a:ac:
5f:95:aa:c7:d2:2d:ec:7b:f7:2e:a2:18:d0:6d:50:77:1e:21:
e5:6b:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:47:13 2025 by rpki-client