Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/u-G-BjNkzDN41_akwDoArPHas8I.roa
File: u-G-BjNkzDN41_akwDoArPHas8I.roa (raw, json)
Hash identifier: 3oV8r7qGwqy7avjI+jDPXV4J2Rs9RBfex18bpzCreTk=
Subject key identifier: BB:E1:BE:06:33:64:CC:33:78:D7:F6:A4:C0:3A:00:AC:F1:DA:B3:C2
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 0194221FE6F48ED7A9679F563A997CF97267
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/u-G-BjNkzDN41_akwDoArPHas8I.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 91.204.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e6:f4:8e:d7:a9:67:9f:56:3a:99:7c:f9:72:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbe1be063364cc3378d7f6a4c03a00acf1dab3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:fd:64:0b:b0:40:80:5a:3e:a7:eb:c8:cd:
db:52:bc:d8:30:25:a4:15:22:67:23:0b:87:78:e8:
0a:b7:6f:f0:48:db:08:75:6b:90:ce:ff:14:ac:1c:
ab:12:e7:8a:33:f4:9e:48:fb:09:23:78:e3:e3:61:
44:bf:b9:64:e3:eb:78:69:55:48:23:d2:b1:16:8b:
0b:8a:54:28:bb:33:0d:56:a3:56:dd:ba:d2:ad:f4:
b2:8b:0f:6f:f5:01:80:54:32:48:7a:76:d6:ce:4e:
cc:47:a6:ee:b4:24:09:36:2f:47:63:8a:5f:75:c8:
0c:eb:e6:ed:0d:5a:af:ec:c3:cc:a8:90:bc:80:6d:
be:f8:3b:d4:6d:a1:68:c2:c1:4e:fb:dd:2d:c0:82:
dd:c4:d7:3e:10:3e:04:d4:c7:0c:ea:6f:04:22:c4:
db:70:82:29:4e:53:0f:71:a0:8e:4e:9a:4d:e6:66:
51:5f:87:a9:2d:2a:d5:5a:a7:55:a4:da:e4:8d:b6:
ac:ad:17:5e:1f:7c:18:39:c2:13:86:78:a9:e6:1f:
11:ed:a4:cc:0d:14:4c:0f:61:6e:e4:c4:5c:54:15:
40:31:7c:65:85:fc:fb:79:bc:6f:ab:78:33:54:e9:
cd:ba:fd:c6:d2:5a:95:d9:f2:69:4e:f9:d1:ef:ad:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E1:BE:06:33:64:CC:33:78:D7:F6:A4:C0:3A:00:AC:F1:DA:B3:C2
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/u-G-BjNkzDN41_akwDoArPHas8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:49:ef:48:32:10:2b:47:10:eb:5d:c5:2c:c0:46:cd:27:c5:
45:f5:ce:2f:95:9b:df:f8:69:ba:66:08:80:c7:d0:fb:14:88:
71:9b:eb:99:3f:2b:02:b9:43:bd:e6:f3:c2:2b:f0:9e:6e:58:
b5:9b:6c:44:03:f3:37:91:b6:46:af:8d:f4:54:d0:9e:16:3f:
52:e9:47:7b:9d:20:f7:1e:5e:df:ce:6a:ed:3a:10:e2:fc:54:
4e:fa:7f:a8:f9:dc:d2:52:e7:7a:c0:c9:c9:a7:eb:45:dd:fb:
75:0c:84:e2:72:f7:ca:5c:55:b5:b7:55:ee:02:b6:51:9a:c4:
e0:b0:91:b1:77:b3:eb:d6:fa:97:5e:ec:48:28:01:f1:1c:2f:
0a:c6:ea:78:5c:7a:df:a4:9c:c4:3d:29:17:aa:da:7d:8f:85:
c1:c5:f2:05:60:e0:36:4d:56:d3:3e:c9:f7:61:1c:35:67:08:
cc:20:ac:b2:bb:58:2e:a5:30:7d:26:b1:ba:ad:82:2a:44:51:
aa:83:a9:39:d8:2a:9e:d5:47:72:bf:9b:95:b7:a1:2a:ef:b7:
6e:0f:1b:49:1d:be:12:cf:a6:67:b8:73:a5:5f:18:c1:e3:d1:
a4:d5:13:8e:51:d9:2f:a0:c9:d4:24:ea:71:02:6e:39:b6:3d:
77:6c:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:40 2025 by rpki-client