Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/gnIJbKO21wF2TXA-cbS3TpE25H0.roa
File: gnIJbKO21wF2TXA-cbS3TpE25H0.roa (raw, json)
Hash identifier: T8rEc18q3DLh8PIkgNzj8jiJZUolXKdoadoIG44iVLQ=
Subject key identifier: 82:72:09:6C:A3:B6:D7:01:76:4D:70:3E:71:B4:B7:4E:91:36:E4:7D
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 019425216A31DF5B5B1B6C0923B10849713F
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/gnIJbKO21wF2TXA-cbS3TpE25H0.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214088
IP address blocks: 2001:30c0:30c0::/48 maxlen: 48
2001:30c1:30c1::/48 maxlen: 48
2001:30c2:30c2::/48 maxlen: 48
2001:30c3:30c3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6a:31:df:5b:5b:1b:6c:09:23:b1:08:49:71:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8272096ca3b6d701764d703e71b4b74e9136e47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:3f:1a:5d:ac:42:b4:8f:54:52:3c:6b:8a:
ab:6c:2a:e0:23:96:6e:af:08:ed:e0:42:9b:04:bb:
fe:41:f0:66:01:03:51:66:d2:40:1c:b6:3f:d1:10:
05:64:64:4e:53:cc:47:ac:19:cd:ef:51:c5:c8:90:
b3:a7:28:99:13:0f:89:76:03:2b:ad:f0:2f:5d:b4:
ee:a2:ac:7b:72:a7:b5:a6:34:3e:65:06:79:7e:60:
e2:fb:53:67:d0:11:bf:d6:5b:3e:fe:e7:0e:e1:88:
0a:77:69:73:f3:5b:97:f7:13:ac:f8:3a:5c:13:26:
25:d1:b2:37:ab:5d:5c:29:ac:bf:74:d5:5a:1d:90:
b1:8a:d4:d0:f7:9f:da:2a:2b:a7:fc:6b:60:fd:97:
95:a2:a5:e7:80:57:86:dc:d8:60:15:01:e7:40:57:
9e:7e:a7:ba:69:f4:c3:75:c3:61:57:5a:46:4e:fe:
e3:76:65:c8:4e:69:c4:dc:ee:0e:05:0c:53:eb:b2:
54:dc:71:ff:96:b7:e5:d8:9d:b1:b4:ea:00:f2:71:
cf:a9:a7:d8:01:97:cc:6f:ae:cd:95:0f:ea:59:e6:
67:f2:74:a4:14:8c:5b:af:c9:b8:f7:3e:38:63:52:
f4:f1:c5:04:14:c9:53:be:0e:07:8e:93:42:3f:ea:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:09:6C:A3:B6:D7:01:76:4D:70:3E:71:B4:B7:4E:91:36:E4:7D
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/gnIJbKO21wF2TXA-cbS3TpE25H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0:30c0::/48
2001:30c1:30c1::/48
2001:30c2:30c2::/48
2001:30c3:30c3::/48
Signature Algorithm: sha256WithRSAEncryption
5d:cd:15:9e:b1:d3:85:06:fb:eb:2f:d3:01:0a:45:f9:66:50:
dd:31:8d:cc:d0:79:63:09:63:c9:5f:2f:3e:60:aa:dd:85:8a:
54:39:67:e4:b4:ae:44:65:c3:24:9b:17:ca:71:dc:b7:c2:b1:
2b:7a:a6:4a:d7:fe:6d:6a:2d:c0:3c:24:e7:17:d8:a7:71:d4:
d5:33:cb:4b:99:bf:ba:22:0a:df:94:50:fe:45:91:49:dc:2c:
3b:e9:02:7e:71:02:0d:0d:8b:a9:85:40:0a:b3:09:9d:d0:86:
5c:b5:45:c7:65:97:15:86:00:a2:05:38:e8:22:2d:65:ed:96:
fd:b5:7e:92:77:de:79:bc:ff:ce:ee:58:f6:98:64:c3:2f:6e:
a3:77:d8:cc:d0:ea:11:76:6a:0f:14:13:57:47:de:ef:ec:22:
e6:6b:80:c3:fe:e5:f3:0d:0e:86:80:86:7a:23:43:e7:cf:f1:
e9:05:65:25:0a:3a:11:fe:6b:95:37:66:0e:f8:6c:65:18:29:
23:f2:78:6b:22:2f:91:94:df:42:d6:e0:0e:b7:3b:34:b9:64:
1d:a7:f4:a5:f4:e7:dd:b2:cb:47:ec:77:22:40:47:de:52:ff:
50:9b:75:5a:f5:7c:81:8f:90:cd:9e:89:05:cf:ca:80:61:c3:
aa:ae:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:27 2025 by rpki-client on console.sobornost.net