Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/Gre5ZSB662vIN47k-TvczoGKXhE.roa
File: Gre5ZSB662vIN47k-TvczoGKXhE.roa (raw, json)
Hash identifier: GLR8gwNK06g6me50Y9qI5tRxY1vNKi7qj8pdL2YxlWw=
Subject key identifier: 1A:B7:B9:65:20:7A:EB:6B:C8:37:8E:E4:F9:3B:DC:CE:81:8A:5E:11
Certificate issuer: /CN=97206b5201df70eb916669b455849647797ab679
Certificate serial: 018DC19F0A48CC51B55FD829E804E6648A99
Authority key identifier: 97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/Gre5ZSB662vIN47k-TvczoGKXhE.roa
Signing time: Mon 19 Feb 2024 13:47:21 +0000
ROA not before: Mon 19 Feb 2024 13:47:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2001:67c:df8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:9f:0a:48:cc:51:b5:5f:d8:29:e8:04:e6:64:8a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97206b5201df70eb916669b455849647797ab679
Validity
Not Before: Feb 19 13:47:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ab7b965207aeb6bc8378ee4f93bdcce818a5e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:12:4a:82:85:c8:6f:6c:cc:38:a5:7c:b5:
e4:51:1e:0e:64:24:e5:3b:50:e6:cd:c8:f5:13:8b:
41:a9:a9:d0:52:fc:10:3c:cb:36:bf:7f:5f:c0:9d:
f1:e8:5f:88:5c:10:09:cf:89:4a:6a:a4:7a:c2:68:
f9:c8:2a:84:67:4d:51:63:66:02:03:1b:bc:ac:14:
45:01:69:a4:c0:dd:b7:52:68:47:2a:a8:eb:9b:b4:
7c:0f:9e:16:50:5c:11:c9:63:7d:c5:ff:9a:23:26:
a2:4b:82:e4:80:8f:6c:7a:dc:c4:93:42:a7:15:3d:
39:60:ed:12:dd:8e:ef:5f:bf:48:75:10:44:f1:4b:
b8:15:4e:72:a9:61:29:c5:3e:c2:78:bb:46:0f:33:
27:3e:19:db:d6:0d:7e:fc:7c:07:5b:10:a5:b4:bf:
e8:04:ed:69:0e:5f:48:e2:b2:61:91:bb:2d:19:d9:
29:73:29:8b:6d:b5:9d:ec:3a:00:85:9d:22:86:8d:
2d:4a:ef:bd:27:76:3d:51:f9:31:e7:bb:6b:25:09:
30:56:d5:0c:98:ba:8c:3c:58:72:9f:4b:06:a1:3f:
be:6d:5f:cd:ea:89:01:22:d9:3a:f1:d7:c4:b4:93:
34:81:c8:94:04:67:a6:d8:f7:31:f3:33:bd:fd:e9:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:B9:65:20:7A:EB:6B:C8:37:8E:E4:F9:3B:DC:CE:81:8A:5E:11
X509v3 Authority Key Identifier:
keyid:97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/Gre5ZSB662vIN47k-TvczoGKXhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:df8::/48
Signature Algorithm: sha256WithRSAEncryption
77:37:f8:e2:66:5f:5a:d5:a6:02:91:ee:9a:ae:d4:01:ae:b4:
ef:40:21:95:45:e3:f2:2e:32:58:a7:b7:21:76:78:46:6a:d8:
d3:67:e7:5f:33:5f:1f:b8:ab:42:e6:26:ad:79:d9:66:74:02:
e5:89:c0:63:fd:cd:82:4f:f5:bf:7b:7b:b5:41:a0:19:58:e0:
c9:f2:0f:f8:07:64:e1:f0:aa:26:6d:b5:5e:b5:fc:7b:e4:39:
a0:06:73:a6:93:e4:88:51:5c:5b:30:96:cb:38:ba:1f:e9:66:
18:a4:b2:66:e4:86:76:a8:b1:95:0b:2c:a0:4d:aa:eb:bd:00:
29:a9:16:75:eb:93:2b:1f:9f:f4:b0:6b:4d:5e:45:f2:5f:33:
66:25:10:14:e1:fb:fb:8b:b9:b8:92:a9:d8:fc:0b:8c:4a:7a:
8e:29:27:58:bb:6e:67:8d:65:7e:42:76:e1:0a:5f:83:53:f8:
d2:eb:b7:27:fd:df:93:31:dd:65:16:92:9d:cd:2b:2a:f6:1a:
8a:73:0e:e1:ba:d4:ab:dd:00:57:ce:61:1c:21:97:b1:a6:cf:
54:d9:43:f8:c9:3d:f4:b6:97:5e:15:28:21:d6:a8:8c:eb:14:
75:03:af:1a:32:86:2a:a9:30:da:d3:30:88:11:d7:38:af:01:
c2:ed:c8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:22:41 2025 by rpki-client