Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/gphYNlaKSqs8MdlhG8H0chnyKOs.roa
File: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (raw, json)
Hash identifier: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=
Subject key identifier: 82:98:58:36:56:8A:4A:AB:3C:31:D9:61:1B:C1:F4:72:19:F2:28:EB
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 0194266B5B6C404E095949B9E7E559EA7798
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/gphYNlaKSqs8MdlhG8H0chnyKOs.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209437
IP address blocks: 2a0a:56c4:3::/48 maxlen: 48
2a0a:56c4:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5b:6c:40:4e:09:59:49:b9:e7:e5:59:ea:77:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82985836568a4aab3c31d9611bc1f47219f228eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:25:2e:af:7b:06:66:5d:a3:da:f7:a5:79:
c6:63:e2:19:f6:36:db:85:c4:d8:ba:ce:7e:9e:e9:
eb:e3:35:fd:ce:e3:80:29:14:95:ec:74:e0:ce:f6:
88:ef:82:b7:0f:5d:fb:11:88:4d:74:40:f0:e8:db:
3c:63:eb:c9:02:3f:5d:d7:24:da:9c:fe:f3:b9:44:
d5:67:a5:94:00:3c:e1:18:40:0f:ee:76:18:64:13:
33:68:1b:cb:5d:d6:22:66:65:13:86:03:5e:c7:94:
db:a5:82:6a:85:76:ab:55:27:82:62:18:9a:c0:52:
b2:d7:7f:da:01:38:a5:9d:aa:79:e9:62:e1:ef:f7:
b4:4b:d5:4b:50:61:40:a5:32:d6:09:f1:5e:02:df:
9d:5a:71:f4:55:9e:0d:64:c7:05:6e:9e:67:d0:9f:
63:eb:5d:3c:ca:a2:5e:ab:53:52:22:11:76:54:63:
3c:4a:52:58:04:7a:59:c8:d0:46:29:44:66:9c:07:
b5:61:d7:f5:9c:83:bc:5d:a2:89:c1:b6:d5:1b:04:
2d:d6:dc:7a:97:8f:4c:41:64:7f:4b:5f:11:da:c6:
ad:4a:20:cb:a6:87:e1:73:85:14:91:cb:9e:f3:12:
aa:f2:48:83:65:9f:8e:d3:57:43:01:89:c1:77:92:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:98:58:36:56:8A:4A:AB:3C:31:D9:61:1B:C1:F4:72:19:F2:28:EB
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/gphYNlaKSqs8MdlhG8H0chnyKOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:56c4:3::/48
2a0a:56c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
74:d4:6e:66:a4:02:fb:73:8c:c1:f0:fe:f3:1a:b2:03:4e:16:
45:f2:99:0e:ed:e5:f7:eb:7d:66:06:e3:60:bb:fc:61:b4:f8:
19:3f:33:9f:76:a1:97:b2:aa:30:87:c9:7e:1a:62:70:95:ff:
86:9f:61:86:27:b2:39:bb:bb:50:53:48:3d:9c:a8:80:ed:9c:
11:6e:10:a9:6f:b7:11:fb:aa:a6:9e:53:f8:bf:14:ea:e5:ac:
16:db:da:8c:ad:be:cf:83:ca:49:4a:69:8b:12:3a:15:93:c9:
21:f6:c4:4c:1c:66:c7:66:f0:40:a4:53:91:f0:d6:af:d4:14:
53:9c:7d:85:84:4b:ef:b2:d0:4c:1a:30:06:e5:18:35:b0:f1:
7a:c6:e7:4d:f6:55:18:0d:70:8e:4c:0b:ee:fa:9e:a4:e0:14:
ab:da:68:b9:5e:38:ab:71:a6:98:26:a7:99:88:d9:a5:b3:0e:
df:fb:1f:ae:61:c3:53:4b:62:90:93:08:66:d7:99:7c:68:ec:
4c:05:38:7d:fa:ae:c8:28:88:c3:88:29:b5:21:1a:1c:f0:ac:
ae:c1:ab:66:11:51:73:01:3c:bf:56:c4:4b:74:13:2f:d8:1b:
9d:53:78:f0:5e:bb:9f:10:88:b8:e5:62:59:f3:77:67:79:2e:
8b:e6:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:12 2025 by rpki-client