Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GQCcydEyLjtByu6ErypSqvlzoSA.roa
File: GQCcydEyLjtByu6ErypSqvlzoSA.roa (raw, json)
Hash identifier: sP1Ebt9W1p5nevpvkLFuUnCh9qnPQEhT733LVaRI98Y=
Subject key identifier: 19:00:9C:C9:D1:32:2E:3B:41:CA:EE:84:AF:2A:52:AA:F9:73:A1:20
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196B0A4C4835354963DC068BC8E5F15F783
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GQCcydEyLjtByu6ErypSqvlzoSA.roa
Signing time: Thu 08 May 2025 16:05:10 +0000
ROA not before: Thu 08 May 2025 16:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:b0a4:d10/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a4:c4:83:53:54:96:3d:c0:68:bc:8e:5f:15:f7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 8 16:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19009cc9d1322e3b41caee84af2a52aaf973a120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:9e:fa:30:dc:9d:70:6a:dd:5e:7f:10:d2:
5a:fb:d2:08:44:14:f4:de:f8:69:e4:65:32:e9:b2:
f6:1e:5d:86:36:07:d8:fd:dc:0c:83:28:e8:be:7e:
a4:13:9c:3e:52:64:cd:b6:ac:1f:c1:5a:be:e2:ef:
08:0f:52:9c:e6:b3:75:e8:1b:fb:95:63:40:84:7c:
dc:4d:91:be:2e:70:43:57:73:e2:b7:b3:f3:20:2a:
9a:18:48:b4:be:76:22:15:aa:ba:b9:f4:62:e3:83:
00:13:a4:06:7c:b8:d1:94:51:86:a1:bc:e0:c2:6b:
e0:9a:76:ef:6d:3e:9c:f9:aa:ac:ad:1f:b5:2e:71:
6b:fa:97:46:7c:6d:57:eb:41:77:21:dc:ee:52:f9:
7a:02:75:38:22:49:ad:e6:37:85:79:73:a1:fc:4e:
03:25:de:22:03:5f:29:42:21:3b:10:5b:c1:d6:8d:
22:6d:4f:70:b3:bf:67:33:b3:22:15:a5:cb:ae:83:
11:8a:43:93:9d:c6:59:ad:69:3b:10:e5:28:a2:5d:
a2:7f:de:36:2d:9e:ce:1f:2e:34:49:45:26:52:0e:
93:60:8d:c7:38:55:c8:2f:a3:09:a8:68:ef:92:f7:
ec:57:97:ba:ca:49:38:0e:f8:64:48:59:89:60:4d:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:9C:C9:D1:32:2E:3B:41:CA:EE:84:AF:2A:52:AA:F9:73:A1:20
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GQCcydEyLjtByu6ErypSqvlzoSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:b0a4:d10/128
Signature Algorithm: sha256WithRSAEncryption
98:4d:f1:44:7b:f3:18:6c:b7:5c:5d:cd:aa:5e:d3:30:77:03:
e6:e2:0f:48:01:8d:ea:31:f0:57:cf:5c:c8:8e:b0:88:b4:1b:
e3:bb:56:d7:bd:d1:22:ef:43:4d:f9:ed:7a:87:2e:ef:47:39:
6b:9e:15:b8:22:25:e4:20:7e:b0:bb:45:10:10:76:70:3b:b8:
cc:7f:4b:0d:c7:d8:de:1f:1a:52:65:9a:03:3b:cd:d2:7e:d6:
07:cc:cc:d4:76:25:19:ec:17:ec:4c:ce:bb:b0:e0:8a:f4:92:
eb:e8:ec:3b:bf:77:73:2d:25:75:a7:8f:8c:35:7d:32:41:5e:
1b:bf:e9:34:11:07:96:a1:d8:c2:30:1e:0b:0d:c6:9e:de:63:
a5:3d:9c:3b:43:c1:09:4e:8e:00:bb:5c:bf:91:5d:6a:3e:4b:
55:eb:1f:e8:c1:4b:4a:87:17:ac:64:af:8c:c1:c5:3a:33:48:
3b:3e:03:4f:dd:64:51:55:17:85:15:b5:dd:2b:b9:a8:09:fa:
e6:f2:40:7e:32:5e:95:4f:14:36:99:06:80:e1:f4:bd:13:66:
db:47:9b:5f:84:bf:a9:77:c5:6d:77:86:8c:4c:ef:d8:5f:b4:
9b:eb:66:fb:ae:7e:14:bc:37:00:4f:c0:5c:dc:89:7f:42:02:
b7:8b:5e:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:12 2025 by rpki-client