Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/Gm24Jz4FAwlPLPviHhCETg5MzmE.roa
File: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (raw, json)
Hash identifier: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=
Subject key identifier: 1A:6D:B8:27:3E:05:03:09:4F:2C:FB:E2:1E:10:84:4E:0E:4C:CE:61
Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial: 019421444346F04FEA48FC283900074FEF52
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/Gm24Jz4FAwlPLPviHhCETg5MzmE.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48233
IP address blocks: 2a06:9686::/39 maxlen: 39
2a06:9686:200::/39 maxlen: 39
2a06:9686:400::/39 maxlen: 39
2a06:9686:600::/39 maxlen: 39
2a06:9686:800::/39 maxlen: 39
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:43:46:f0:4f:ea:48:fc:28:39:00:07:4f:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a6db8273e0503094f2cfbe21e10844e0e4cce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:d7:ef:a9:c5:b0:7d:38:d3:22:bd:ee:a1:
a1:c0:ca:5f:62:09:c4:e4:75:95:6c:63:74:1f:ec:
e9:a0:64:e0:72:c1:e0:71:3e:40:2e:78:86:14:b7:
e0:bb:bc:8c:65:28:be:6a:c7:e4:81:80:c2:0a:55:
22:70:0b:09:e9:b1:88:fd:8d:6f:8e:0c:3a:bb:f1:
70:23:3f:a0:67:d2:19:cf:7d:1b:9e:e1:78:cf:be:
1a:8d:27:23:f0:0b:ec:5b:3f:b0:03:8e:25:7d:05:
60:ab:08:8f:c6:ef:23:4a:44:7e:a5:1f:3b:70:e2:
74:d5:cc:29:c3:52:50:6f:7d:dd:8b:1e:f0:99:c4:
54:be:a6:95:a8:33:c2:35:61:95:a2:6f:21:9c:52:
41:52:59:f4:e0:7c:7f:41:75:c1:ba:79:de:cc:99:
15:85:76:a1:e5:ca:64:c3:35:b1:ef:20:89:31:ee:
32:aa:1c:b0:c2:34:c9:c4:9f:a4:36:f5:d1:e4:6c:
93:e2:4d:e1:d3:29:43:9e:e7:ba:8c:f3:5c:bf:31:
46:ef:dc:57:22:ae:f5:65:84:10:c4:87:bd:b2:d9:
e2:91:37:8d:5b:3c:f0:18:8d:b6:24:8c:25:2a:05:
f9:ae:b2:d3:e5:0f:c3:db:a6:4f:d7:fd:83:c7:90:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6D:B8:27:3E:05:03:09:4F:2C:FB:E2:1E:10:84:4E:0E:4C:CE:61
X509v3 Authority Key Identifier:
keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/Gm24Jz4FAwlPLPviHhCETg5MzmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9686::-2a06:9686:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
90:86:c0:75:37:a7:64:8f:de:98:24:22:30:de:e2:8c:1e:5a:
e1:4c:e0:4c:f6:97:e3:8e:e1:42:9a:d1:de:71:6f:b6:29:48:
64:e1:ac:00:0a:a0:a5:79:ce:e1:72:38:f1:d4:ad:55:d9:d3:
c4:91:17:f9:50:a4:4d:4b:eb:e8:9b:0a:99:bc:83:5d:a9:b2:
7a:c5:bc:97:61:f8:d8:11:81:c0:13:10:c4:fe:7c:76:bc:41:
44:67:55:4a:0a:9a:61:58:1d:9d:7b:28:74:83:f5:0b:27:e6:
f6:ab:c2:b0:a8:c7:27:1d:7a:1b:de:62:03:3e:99:40:c7:59:
82:35:b4:87:4c:9e:c4:9b:20:ac:8f:3b:bd:bb:24:cc:74:ca:
42:7d:95:36:5c:40:a1:e4:51:d7:39:47:f5:48:ed:57:e9:0f:
cd:08:c6:79:b7:41:c7:21:aa:9b:e9:4a:2d:c9:30:c1:bf:62:
db:5e:8a:61:9f:7a:3d:b1:a8:9b:f2:7f:09:8e:2f:5f:a2:17:
c6:6b:48:9a:eb:33:52:46:4b:e8:1d:26:29:45:8d:29:83:64:
31:b9:9a:b8:63:be:21:96:95:3a:3b:54:fe:8d:2f:0b:eb:82:
c3:19:0b:5b:30:fc:bf:1d:3b:ab:24:4a:08:d1:72:c6:a4:8c:
fb:10:7f:fe
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZQhRENG8E/qSPwoOQAHT+9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi
OTdiYTYwHhcNMjUwMTAxMDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTZkYjgyNzNlMDUwMzA5NGYyY2ZiZTIxZTEwODQ0ZTBlNGNjZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqjX76nFsH040yK97qGhwMpfYgnE
5HWVbGN0H+zpoGTgcsHgcT5ALniGFLfgu7yMZSi+asfkgYDCClUicAsJ6bGI/Y1v
jgw6u/FwIz+gZ9IZz30bnuF4z74ajScj8AvsWz+wA44lfQVgqwiPxu8jSkR+pR87
cOJ01cwpw1JQb33dix7wmcRUvqaVqDPCNWGVom8hnFJBUln04Hx/QXXBunnezJkV
hXah5cpkwzWx7yCJMe4yqhywwjTJxJ+kNvXR5GyT4k3h0ylDnue6jPNcvzFG79xX
Iq71ZYQQxIe9stnikTeNWzzwGI22JIwlKgX5rrLT5Q/D26ZP1/2Dx5CSywIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFBptuCc+BQMJTyz74h4QhE4OTM5hMB8GA1UdIwQY
MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt
MTIwMjVjNTRmNDg0LzEvR20yNEp6NEZBd2xQTFB2aUhoQ0VUZzVNem1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0
LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARMA8DBQEqBpaG
AwYBKgaWhggwDQYJKoZIhvcNAQELBQADggEBAJCGwHU3p2SP3pgkIjDe4oweWuFM
4Ez2l+OO4UKa0d5xb7YpSGThrAAKoKV5zuFyOPHUrVXZ08SRF/lQpE1L6+ibCpm8
g12psnrFvJdh+NgRgcATEMT+fHa8QURnVUoKmmFYHZ17KHSD9Qsn5varwrCoxycd
ehveYgM+mUDHWYI1tIdMnsSbIKyPO727JMx0ykJ9lTZcQKHkUdc5R/VI7VfpD80I
xnm3QcchqpvpSi3JMMG/YtteimGfej2xqJvyfwmOL1+iF8ZrSJrrM1JGS+gdJilF
jSmDZDG5mrhjviGWlTo7VP6NLwvrgsMZC1sw/L8dO6skSgjRcsakjPsQf/4=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net