Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GWYPtxB8TBBSQsuwwtMs1KGGll4.roa
File: GWYPtxB8TBBSQsuwwtMs1KGGll4.roa (raw, json)
Hash identifier: Qc8LqozNkByx2tI097ii70x80sDBr19R1Ta+ZsAdPPE=
Subject key identifier: 19:66:0F:B7:10:7C:4C:10:52:42:CB:B0:C2:D3:2C:D4:A1:86:96:5E
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01942445A390FBC2F34989B230016F3F40C9
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GWYPtxB8TBBSQsuwwtMs1KGGll4.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199760
IP address blocks: 91.239.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a3:90:fb:c2:f3:49:89:b2:30:01:6f:3f:40:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19660fb7107c4c105242cbb0c2d32cd4a186965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:a0:cd:7e:a9:9a:00:da:ff:82:26:4c:a3:
3d:51:de:a7:0c:34:af:ed:4d:8d:5c:47:a5:03:b9:
0c:16:f9:48:43:0f:a3:19:9f:bc:34:e6:26:a1:cd:
fd:ca:c0:37:6f:71:46:47:a2:e0:53:99:ce:28:7c:
68:95:cd:4d:7f:eb:72:83:59:62:a1:07:c7:e8:95:
3b:9d:de:2b:9d:4b:ff:2d:82:25:78:01:db:f6:ec:
59:68:64:67:eb:fd:e2:1f:f6:d3:8b:8d:65:76:3d:
49:3d:f4:e5:eb:ff:49:df:a4:68:eb:5b:6a:f0:5c:
fb:eb:04:62:f7:33:17:2d:e4:b9:c6:8f:d9:e0:fd:
e7:a5:b5:2d:20:e1:f4:ee:33:c0:72:71:22:e1:6d:
54:1a:e0:10:19:cd:9c:25:04:19:89:16:50:42:fb:
4e:49:72:fe:11:b2:c2:6c:d4:bb:c3:f3:54:e0:ed:
04:70:23:41:18:5d:63:5b:41:17:39:65:c7:5e:d7:
d8:6c:49:ff:b4:94:a9:3c:d8:9f:a8:2c:d9:88:74:
b1:da:9f:df:2a:04:af:f7:5d:b5:9a:b3:ff:fb:37:
3d:6d:47:a0:e1:db:6c:78:f6:2b:52:51:07:31:eb:
fa:2c:98:55:5d:8f:75:f1:46:f4:28:e3:f4:ec:ad:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:0F:B7:10:7C:4C:10:52:42:CB:B0:C2:D3:2C:D4:A1:86:96:5E
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/GWYPtxB8TBBSQsuwwtMs1KGGll4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5d:22:cd:32:14:ef:f6:ec:9e:40:c2:08:f1:cd:0a:d4:0f:
d3:56:52:56:f9:05:2e:6b:57:0f:d8:35:a8:9e:fc:86:23:e4:
c9:0c:f4:86:10:4d:2e:90:b0:d0:da:9f:92:ae:8d:79:88:b1:
01:96:37:31:6f:17:95:0d:ec:1c:26:f9:59:15:ba:c1:da:2a:
6c:e3:f7:7a:fd:af:c5:7a:35:3c:16:f3:56:82:5e:99:33:c9:
3b:dd:8d:33:23:6d:26:65:b5:04:46:77:4b:e7:62:af:e7:cf:
85:e1:04:d8:5d:49:95:3b:29:a9:0f:c7:3a:75:bd:b4:a2:44:
b8:82:a9:a4:ce:bd:15:ee:7c:a1:59:ad:f4:54:37:d3:00:19:
ad:d5:df:0c:02:d0:a6:49:7c:ee:89:e0:3f:bf:a5:65:9b:5a:
43:db:e8:4f:d4:f8:3d:35:b1:46:0c:3f:2d:b1:ae:79:c4:cc:
b1:35:ed:4f:61:dc:cf:ab:a9:7a:06:d4:38:f3:bc:7b:de:d9:
87:c1:80:64:ed:87:d2:26:6e:b5:6b:f1:36:8f:49:1c:a2:7d:
f6:92:8e:36:82:87:0d:79:85:fa:a8:66:c0:07:b3:68:a2:c6:
a5:c4:d7:f4:9b:ac:20:37:28:27:52:d5:33:0b:44:9e:85:f4:
00:f3:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:35 2025 by rpki-client