Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/gVWKaaVVfiqLMFuvzVo4v8PiWfA.roa
File: gVWKaaVVfiqLMFuvzVo4v8PiWfA.roa (raw, json)
Hash identifier: 6ojWFJz0k0N2l8hOpfT4BOa1JkMRwNlZkVLeeexpV58=
Subject key identifier: 81:55:8A:69:A5:55:7E:2A:8B:30:5B:AF:CD:5A:38:BF:C3:E2:59:F0
Certificate issuer: /CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Certificate serial: 019367AFDFC9A99AAA3462FF55A1AFB2B736
Authority key identifier: 6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/gVWKaaVVfiqLMFuvzVo4v8PiWfA.roa
Signing time: Tue 26 Nov 2024 08:56:39 +0000
ROA not before: Tue 26 Nov 2024 08:56:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27970
IP address blocks: 2a00:12f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:af:df:c9:a9:9a:aa:34:62:ff:55:a1:af:b2:b7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Validity
Not Before: Nov 26 08:56:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81558a69a5557e2a8b305bafcd5a38bfc3e259f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:0c:64:1e:8d:55:d7:bb:ed:e9:18:b0:3c:
e3:66:77:b9:ee:3f:86:3d:6a:45:fc:06:ee:8d:36:
92:f3:d0:e4:7c:53:1f:a9:4d:30:11:72:40:46:5a:
d5:94:92:92:1a:50:88:07:16:aa:78:b3:bf:80:a8:
c4:b3:d6:df:28:0a:30:20:73:4e:02:76:c5:c3:c4:
8d:c3:5c:ef:58:65:bd:67:85:79:4e:05:1c:8f:b1:
a9:fb:99:f6:21:f3:58:7e:bb:33:aa:04:73:51:d6:
30:bd:89:a6:fe:51:75:2f:da:15:b3:75:24:f4:7a:
6d:b2:9a:43:b9:50:36:00:ab:4e:27:c3:94:ca:4f:
90:01:12:b7:26:02:8b:c7:d1:f5:ab:0a:a1:ee:25:
57:50:2e:58:47:8c:fd:f5:93:8f:34:70:96:7a:a7:
03:65:0c:b4:73:40:cb:58:ba:a8:55:b1:52:6f:af:
1c:d3:7d:ee:81:ee:7a:8a:05:05:f2:39:9f:b8:2c:
1a:39:8b:ec:5d:ad:30:f7:a2:e8:2a:3b:cd:cb:ab:
f4:34:94:5f:5c:95:a4:df:cd:a1:32:d1:a7:b1:dd:
b1:b3:43:f5:38:8c:5c:ee:e9:db:a1:58:33:c8:6c:
99:52:d4:07:97:66:60:bb:77:12:9d:ff:61:61:23:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:55:8A:69:A5:55:7E:2A:8B:30:5B:AF:CD:5A:38:BF:C3:E2:59:F0
X509v3 Authority Key Identifier:
keyid:6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/gVWKaaVVfiqLMFuvzVo4v8PiWfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:12f0::/32
Signature Algorithm: sha256WithRSAEncryption
64:0b:35:bb:e4:8c:11:28:56:85:0e:db:48:c1:57:a8:5c:e8:
b7:48:67:d7:b6:5c:b1:a1:b6:f3:77:bf:3c:f2:eb:ca:94:52:
a3:e4:08:d9:4d:40:34:9d:51:fb:1f:1c:c2:cb:2a:8e:79:18:
b3:01:2d:44:60:db:48:22:44:d9:70:ef:be:b1:c5:39:ec:72:
bf:cd:51:e1:fa:ab:2b:04:c0:9c:cc:03:e6:9c:36:68:20:c9:
fe:8b:3e:33:b9:77:d2:80:54:e2:b6:71:f5:24:16:3a:05:d5:
64:a0:bc:4b:e8:9d:26:d7:97:63:6c:16:fd:9b:b6:b1:f2:2b:
7b:9e:d7:83:94:50:f1:63:5a:f3:96:39:b3:92:dd:b0:d9:b5:
9c:5c:f7:c7:ea:9b:d4:04:ae:9e:fa:bd:b1:3f:96:2f:61:c6:
f8:15:f9:c2:3b:42:45:5f:d2:cf:b7:af:2c:e2:61:74:d9:cd:
9a:76:9c:9c:93:c2:66:72:3d:57:ff:0e:e6:a9:a5:3f:82:d4:
73:bb:6e:df:f1:9c:5e:52:35:59:3f:53:ce:90:52:57:6a:a9:
5c:12:9c:23:fc:91:80:9f:11:c2:23:e7:c5:c5:15:a5:18:6d:
f6:12:ae:68:b5:6e:0c:de:e6:4b:55:f6:bd:b8:c3:6b:fb:22:
b2:ca:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:05:51 2025 by rpki-client