Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/GqJY_-YaLfVhDAO9-9FtProS6ws.roa
File: GqJY_-YaLfVhDAO9-9FtProS6ws.roa (raw, json)
Hash identifier: OZM5pFFT51z72joYWwzEXxW0xM8WMd3VRKym1LwnAf0=
Subject key identifier: 1A:A2:58:FF:E6:1A:2D:F5:61:0C:03:BD:FB:D1:6D:3E:BA:12:EB:0B
Certificate issuer: /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial: 019427476B29FC3892C7E131B4904E04366D
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/GqJY_-YaLfVhDAO9-9FtProS6ws.roa
Signing time: Thu 02 Jan 2025 13:49:39 +0000
ROA not before: Thu 02 Jan 2025 13:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51224
IP address blocks: 91.216.216.0/24 maxlen: 32
2001:67c:254::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:6b:29:fc:38:92:c7:e1:31:b4:90:4e:04:36:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Validity
Not Before: Jan 2 13:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aa258ffe61a2df5610c03bdfbd16d3eba12eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:d4:d4:af:92:89:97:78:87:4f:2e:07:d2:
93:c6:3b:66:38:dd:0a:98:b1:c2:0a:5a:c0:58:c9:
1b:ea:fa:f2:dd:07:1a:45:09:0a:79:fd:d2:a6:d2:
6a:11:cb:3e:a2:5c:13:b1:1d:c8:a0:0d:06:9e:35:
5b:2f:c5:e2:a0:76:a5:7b:e3:9b:6d:46:06:63:86:
e2:2d:30:38:6e:56:66:12:93:89:e9:f8:2c:15:ca:
77:03:94:e5:89:99:52:60:ef:90:3b:2d:1e:b1:93:
7d:36:99:dc:9c:b5:c1:f4:d3:3d:19:5f:10:00:76:
2f:09:a1:69:34:89:4f:6f:fb:43:2b:0e:80:9f:4c:
18:e9:5d:d1:30:2b:fe:59:e5:b4:4c:52:de:34:f2:
e2:4e:14:d5:b6:65:e1:f2:9e:e9:30:03:42:48:1d:
df:86:72:e6:c7:55:5a:b1:5a:15:6a:ea:8e:f3:c8:
23:96:63:ca:f6:64:3a:25:e3:31:ad:ad:44:b7:38:
36:6e:cb:71:13:85:58:b1:43:04:4a:85:c5:81:cd:
65:2c:26:d3:80:7e:f0:03:b7:45:48:0a:35:44:fe:
73:fa:18:c3:75:d9:3f:35:d4:d9:64:47:4e:03:db:
cc:8d:ee:92:1c:75:56:22:fa:56:5c:11:1e:95:34:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A2:58:FF:E6:1A:2D:F5:61:0C:03:BD:FB:D1:6D:3E:BA:12:EB:0B
X509v3 Authority Key Identifier:
keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/GqJY_-YaLfVhDAO9-9FtProS6ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.216.0/24
IPv6:
2001:67c:254::/48
Signature Algorithm: sha256WithRSAEncryption
b0:07:2a:d7:fd:ca:38:43:52:11:d7:ca:64:e6:19:03:17:86:
1a:87:ad:be:68:6e:ea:9f:c6:16:3c:9f:d8:bf:a9:c9:68:4c:
ee:a2:1c:46:80:38:b8:1d:c8:7f:c1:f7:b0:74:73:6a:67:4a:
c4:52:88:58:ba:28:a7:e7:0c:ea:ae:c6:89:d8:c0:f8:92:fd:
2d:9b:20:66:0d:ea:e4:0e:6d:f6:6c:86:d4:a0:35:61:9b:d4:
9a:d0:f8:8a:8c:40:3c:80:fd:c2:14:dc:05:ff:b6:09:65:47:
9c:47:14:f5:28:c0:18:f3:0f:03:86:21:fd:2a:86:55:48:25:
90:ad:41:23:27:42:e0:17:32:b6:ad:e3:26:03:24:92:1f:4c:
a1:e1:c5:17:53:b4:42:2b:ab:e5:af:8d:c1:43:67:d9:ee:53:
6f:c3:9a:dc:82:49:06:c6:0d:01:23:4f:f2:fc:be:a6:42:2b:
70:fc:42:08:ed:32:8e:d2:28:8f:e4:ed:d1:07:88:9f:a3:41:
9d:01:d0:2c:98:6d:dd:1c:e4:ba:2d:1b:0d:49:4c:90:46:36:
f0:de:cc:c2:35:5c:72:48:28:be:57:fd:bb:8e:71:05:4a:da:
29:d2:28:cb:c2:51:57:df:d4:81:dc:e4:db:86:12:c5:c6:94:
52:b5:9b:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQnR2sp/DiSx+ExtJBOBDZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzUxNTVkYjdmOTg1OWUwODRjMmVlOWJmOTZlODY4OTIw
OWQzZDUwHhcNMjUwMTAyMTM0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWEyNThmZmU2MWEyZGY1NjEwYzAzYmRmYmQxNmQzZWJhMTJlYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIvU1K+SiZd4h08uB9KTxjtmON0K
mLHCClrAWMkb6vry3QcaRQkKef3SptJqEcs+olwTsR3IoA0GnjVbL8XioHale+Ob
bUYGY4biLTA4blZmEpOJ6fgsFcp3A5TliZlSYO+QOy0esZN9NpncnLXB9NM9GV8Q
AHYvCaFpNIlPb/tDKw6An0wY6V3RMCv+WeW0TFLeNPLiThTVtmXh8p7pMANCSB3f
hnLmx1VasVoVauqO88gjlmPK9mQ6JeMxra1Etzg2bstxE4VYsUMESoXFgc1lLCbT
gH7wA7dFSAo1RP5z+hjDddk/NdTZZEdOA9vMje6SHHVWIvpWXBEelTSHewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBqiWP/mGi31YQwDvfvRbT66EusLMB8GA1UdIwQY
MBaAFLjFFV23+YWeCEwu6b+W6GiSCdPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1VVlhiZjVoWjRJVEM3cHY1Ym9hSklKMDlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDAxMzItZWI1YS00NmRmLWEyMjkt
YzY4YTY4ZThhMjM0LzEvR3FKWV8tWWFMZlZoREFPOS05RnRQcm9TNndzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80NDAxMzItZWI1YS00NmRmLWEyMjktYzY4YTY4ZThhMjM0
LzEvdU1VVlhiZjVoWjRJVEM3cHY1Ym9hSklKMDlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9jYMA8E
AgACMAkDBwAgAQZ8AlQwDQYJKoZIhvcNAQELBQADggEBALAHKtf9yjhDUhHXymTm
GQMXhhqHrb5obuqfxhY8n9i/qcloTO6iHEaAOLgdyH/B97B0c2pnSsRSiFi6KKfn
DOquxonYwPiS/S2bIGYN6uQObfZshtSgNWGb1JrQ+IqMQDyA/cIU3AX/tgllR5xH
FPUowBjzDwOGIf0qhlVIJZCtQSMnQuAXMrat4yYDJJIfTKHhxRdTtEIrq+WvjcFD
Z9nuU2/DmtyCSQbGDQEjT/L8vqZCK3D8QgjtMo7SKI/k7dEHiJ+jQZ0B0CyYbd0c
5LotGw1JTJBGNvDezMI1XHJIKL5X/buOcQVK2inSKMvCUVff1IHc5NuGEsXGlFK1
mwU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:28 2025 by rpki-client