Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GBVqCGmJk82ZebqeiqYazsNdfd4.roa
File: GBVqCGmJk82ZebqeiqYazsNdfd4.roa (raw, json)
Hash identifier: nx8JR9Dxk4eGne1pWxH5+gyaKO/uTKEI6t7qogYkIhQ=
Subject key identifier: 18:15:6A:08:69:89:93:CD:99:79:BA:9E:8A:A6:1A:CE:C3:5D:7D:DE
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019735E485475F31EA63B9D1954C29B39360
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GBVqCGmJk82ZebqeiqYazsNdfd4.roa
Signing time: Tue 03 Jun 2025 13:04:18 +0000
ROA not before: Tue 03 Jun 2025 13:04:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:35e4:79c1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:e4:85:47:5f:31:ea:63:b9:d1:95:4c:29:b3:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 3 13:04:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18156a08698993cd9979ba9e8aa61acec35d7dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:b9:20:ed:7e:79:cd:d1:0a:62:f0:d1:80:
eb:86:d0:76:5c:79:fd:8e:03:44:15:99:ce:a6:c8:
ed:a1:27:ee:e6:0f:f3:8e:4e:17:b1:5e:0d:d0:28:
d1:94:71:12:be:4a:54:38:64:62:1e:65:d5:55:86:
11:d8:db:3e:e8:e3:d9:26:47:ff:ac:20:3d:67:36:
10:6c:cd:50:19:17:e6:81:89:38:e9:60:a0:c6:8f:
3a:c3:86:a8:44:6b:d0:fe:bd:0c:57:25:5f:1b:5e:
57:51:8d:72:85:72:5f:f4:a3:dc:6d:27:3f:04:4d:
2d:d7:bc:64:03:e2:a2:4c:c8:d4:b6:8c:67:16:fb:
3c:0f:0a:6f:50:ef:54:d7:ed:5d:9c:57:7f:5c:cf:
7e:c2:06:2b:c2:d8:9f:c1:5a:46:09:88:44:41:c3:
8d:51:c0:4e:8b:6f:d7:8e:60:79:6a:98:06:40:29:
0f:39:3a:18:da:fe:9b:fb:64:5b:f1:e5:c9:5a:ac:
c5:a6:3a:e1:2f:12:dd:41:b6:0c:6f:ed:00:35:0f:
5f:af:04:b4:e3:db:26:aa:09:31:5d:3f:f6:41:dd:
1c:ed:01:be:91:b3:da:28:7a:6d:b6:eb:e8:c8:3a:
8b:e7:6f:83:85:d7:5e:05:fd:57:ff:ef:c5:e5:9f:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:15:6A:08:69:89:93:CD:99:79:BA:9E:8A:A6:1A:CE:C3:5D:7D:DE
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GBVqCGmJk82ZebqeiqYazsNdfd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:35e4:79c1/128
Signature Algorithm: sha256WithRSAEncryption
ba:e3:c6:60:5d:b9:f4:c5:92:1f:d1:8a:a0:71:3a:1b:73:d5:
06:be:45:03:d7:c3:fe:d9:78:60:9c:3e:30:1d:3e:af:7d:36:
1a:1d:2e:fa:8f:10:7a:e2:06:83:4b:08:dd:24:55:76:37:56:
1a:36:ec:86:55:7f:57:87:f9:bc:50:3a:a1:93:a1:b7:ff:c8:
f7:97:8b:ba:02:c6:3f:f2:b3:bd:9c:ea:dc:de:17:1a:bf:66:
48:6f:15:76:56:44:c5:27:44:91:5e:c0:5c:58:e6:b8:70:5f:
39:63:30:8f:35:49:54:bc:d7:67:3f:b1:04:6a:d7:e0:c0:94:
e2:5f:9b:5b:db:27:cb:06:17:2c:9a:77:77:60:0b:80:4f:97:
f0:01:a8:94:0a:aa:4a:cf:aa:02:d0:27:67:cd:f7:0e:e7:d0:
d4:fc:72:64:95:a3:34:34:21:51:38:f2:13:2c:8c:5e:42:bc:
d1:6e:09:91:27:b1:69:08:c6:d8:0c:32:ac:9d:1c:fa:19:c9:
6a:08:51:a3:be:d6:4b:3d:a8:dd:57:18:ce:e4:70:63:fd:e3:
2c:20:f8:64:ce:83:87:55:f4:44:ab:f3:13:30:ce:bd:71:ce:
ca:20:0c:78:fe:a6:27:74:f0:e9:af:88:bd:17:d9:ba:7d:7f:
c9:a6:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:12:58 2025 by rpki-client