Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/giwPccgcdnyhfGSFJxLm_annsHc.roa
File: giwPccgcdnyhfGSFJxLm_annsHc.roa (raw, json)
Hash identifier: sozAfOUTdaBZWKNjccl1JTXhH4PoFV+HcbHNTkEoTcU=
Subject key identifier: 82:2C:0F:71:C8:1C:76:7C:A1:7C:64:85:27:12:E6:FD:A9:E7:B0:77
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 0194228DB9D9E89807927CAFB267CA4EEEDF
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/giwPccgcdnyhfGSFJxLm_annsHc.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20634
IP address blocks: 91.207.134.0/23 maxlen: 23
195.234.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b9:d9:e8:98:07:92:7c:af:b2:67:ca:4e:ee:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=822c0f71c81c767ca17c64852712e6fda9e7b077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:64:41:17:d8:e0:51:48:31:3e:1e:3a:2c:6b:
74:bf:f9:84:30:98:2e:af:e0:96:2b:08:08:2b:50:
31:19:29:44:a6:43:8a:9a:a1:4a:2a:4e:92:96:00:
8f:27:cf:90:0b:85:d7:d0:74:06:27:9a:5d:30:36:
18:1a:5f:73:15:f8:7e:cb:42:e6:aa:2c:83:f1:14:
22:80:50:34:c3:b5:4e:b9:77:51:b4:9f:be:de:51:
c4:f1:05:f9:25:71:74:a0:58:68:88:e1:b7:8f:be:
b0:1c:95:58:77:9b:c5:1b:ed:be:63:92:a7:ab:8a:
c8:07:b9:07:22:ad:17:78:36:74:56:10:41:7c:a1:
24:c6:ea:ab:58:e7:2f:6f:66:cf:cf:6f:4c:6a:e8:
a8:b9:2a:6b:07:63:b7:13:fc:cf:91:88:35:58:b8:
4d:cf:0b:62:92:23:cc:e8:d4:a9:2e:9f:49:30:39:
7c:3a:d5:d3:59:f9:dd:4e:28:fd:e3:20:92:80:a6:
40:eb:ef:16:21:89:be:4d:38:b8:18:d1:3c:98:92:
71:6a:40:94:cb:ca:e4:bb:9b:f3:13:69:30:2d:a7:
34:eb:8e:b7:e8:c1:44:f4:e4:0d:dd:3e:68:26:67:
36:72:8a:7b:a2:87:91:b1:6e:94:6e:9e:cf:5b:35:
7c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2C:0F:71:C8:1C:76:7C:A1:7C:64:85:27:12:E6:FD:A9:E7:B0:77
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/giwPccgcdnyhfGSFJxLm_annsHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.134.0/23
195.234.0.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:67:46:c7:d2:66:85:df:16:90:d4:8a:ad:48:cf:5a:d7:fa:
31:e0:d2:07:a1:7d:fd:39:fa:3a:5f:e6:04:50:c1:42:f2:59:
75:5b:6c:82:bf:b7:a1:93:b5:d6:b8:56:f5:2c:76:d2:12:8f:
f7:20:63:57:c8:d5:9d:25:cb:bf:6c:39:9f:66:e0:f9:f0:71:
8f:24:d7:d9:cb:77:40:ff:ee:d1:74:71:0b:44:cb:79:3c:07:
b7:41:31:78:85:95:77:23:75:39:c9:02:50:ff:6e:69:32:79:
1e:f3:18:3a:0d:33:5f:2c:05:41:c2:93:51:ce:b3:96:6d:64:
46:39:eb:59:2a:3e:03:db:f3:f4:19:7a:b3:25:0d:b1:b7:da:
bc:4a:a5:fe:85:32:a2:99:aa:f0:1b:91:aa:77:9f:8c:eb:37:
19:05:df:20:66:b9:3f:80:46:ac:d5:9b:db:1b:72:19:6c:e5:
0d:13:07:ec:2f:b4:8b:ad:b7:85:fe:6d:c1:47:73:5e:1e:e3:
8d:5e:a6:71:f5:a1:06:bf:79:cb:b0:82:f4:17:9f:aa:ab:4b:
e7:a8:77:4d:3f:71:d7:7a:8d:eb:c7:71:1c:31:17:a8:32:dd:
79:81:9e:d4:09:d9:87:08:20:2d:c8:af:d7:e6:19:1f:f9:69:
09:08:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:14 2025 by rpki-client