Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa
File: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (raw, json)
Hash identifier: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=
Subject key identifier: 81:FA:95:36:1C:C6:37:16:FB:54:31:6B:70:D2:D4:AE:D0:D7:77:9A
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521B9508925E2B9913148638C4D6BFD
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42960
IP address blocks: 91.213.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b9:50:89:25:e2:b9:91:31:48:63:8c:4d:6b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81fa95361cc63716fb54316b70d2d4aed0d7779a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:83:56:19:dd:96:9b:f4:55:af:b2:27:12:
61:37:1a:2c:4d:ca:e1:b8:d3:e1:f4:44:7e:44:48:
05:9e:41:cb:df:ca:ad:1c:02:67:8b:d1:44:b8:36:
74:76:e6:1b:a1:4d:ee:93:40:f6:c1:38:1e:e1:f1:
4a:a6:c6:e0:93:86:35:8d:11:a5:72:b4:2e:02:d4:
63:f5:4f:2e:e3:b4:4c:69:f1:1c:d9:c9:e6:a7:00:
d0:4e:93:81:52:01:b3:2f:bd:fb:73:2e:3c:f2:91:
94:89:1e:8b:a4:61:86:11:de:88:3b:57:36:c2:42:
04:50:5f:64:ba:69:7f:ce:0e:13:41:96:84:0e:10:
7d:da:60:45:03:23:d7:92:d0:40:d2:86:87:7c:0b:
e8:39:12:fe:4e:65:34:ee:01:49:7d:91:43:33:3e:
5b:7d:fc:7c:e5:03:f2:3c:3e:2c:8f:56:a2:b1:45:
18:e7:64:32:93:27:c1:88:71:2e:a9:56:31:fa:5d:
6c:21:ac:bd:af:ba:de:77:31:de:10:39:84:95:8b:
67:02:1d:fb:d3:68:9f:d1:47:43:5b:a0:9a:9d:6d:
d0:f1:74:8f:6d:fd:09:c0:7a:3f:98:ce:c9:df:73:
0a:19:f8:85:19:47:cf:61:f5:2d:f2:b2:79:6e:2d:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FA:95:36:1C:C6:37:16:FB:54:31:6B:70:D2:D4:AE:D0:D7:77:9A
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:2c:9e:58:f3:ef:8d:b9:39:42:d1:97:10:4b:96:ba:64:b8:
6c:67:27:2f:ee:63:17:82:3a:d5:87:9e:61:01:2f:f1:13:68:
0b:27:30:30:ea:c8:3f:8e:cd:5e:10:40:58:67:11:d8:66:6f:
c6:24:1c:98:4f:8f:dd:99:82:b1:70:e5:f5:87:1e:19:58:f8:
8c:86:91:42:f0:79:f7:ad:b4:b3:8b:37:ba:7e:5d:a8:1c:20:
9d:fc:0c:b0:a8:30:20:64:d5:90:71:ad:d5:d0:90:62:ac:78:
18:09:30:73:3b:a0:56:8d:2f:31:10:66:48:e1:03:b4:cf:fb:
10:5b:52:51:9e:f0:2d:1a:ff:c5:3c:d0:bd:fb:f9:9b:3e:40:
a3:0a:d6:57:f8:99:3c:94:95:34:2f:a3:02:92:19:53:11:51:
c7:3b:db:48:19:c0:d9:36:52:d3:3c:93:18:2f:7e:9a:3b:a8:
cc:2b:c4:b5:fa:84:83:ea:f5:aa:90:2f:b5:00:ab:b3:ae:b2:
29:c0:28:72:3e:fe:3f:26:33:4f:fe:b2:fc:8b:b1:1f:49:bf:
4a:b6:ce:42:ce:a4:69:61:5e:5d:0f:1e:5b:e8:fc:af:b5:38:
6a:6d:99:57:dd:79:cd:f5:8c:e7:f3:ac:fe:b0:c5:0b:79:b9:
6d:a2:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:42 2025 by rpki-client