Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/GCgFGIXy9ORAgY5JZtgQnYO84po.roa
File: GCgFGIXy9ORAgY5JZtgQnYO84po.roa (raw, json)
Hash identifier: uiQ3pF8ZQYiS46PnIMk3tsXyihLlgICHZ4OO1bUgWLU=
Subject key identifier: 18:28:05:18:85:F2:F4:E4:40:81:8E:49:66:D8:10:9D:83:BC:E2:9A
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 019424B3BE9956AA5A94BAA5FAE4279E1C27
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/GCgFGIXy9ORAgY5JZtgQnYO84po.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51957
IP address blocks: 91.221.156.0/23 maxlen: 23
2a00:5180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:be:99:56:aa:5a:94:ba:a5:fa:e4:27:9e:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1828051885f2f4e440818e4966d8109d83bce29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:89:00:09:eb:41:29:1b:30:6a:5e:49:c1:
a4:ff:41:03:cd:57:cd:01:f0:b7:9b:25:11:4c:62:
0c:86:bf:a8:35:bd:c1:e4:43:27:bc:1d:2b:03:6a:
7e:5b:53:7c:39:61:73:b1:44:b4:f2:ec:23:2a:ee:
53:93:95:b2:d3:0f:a3:89:6e:13:0d:91:7d:58:17:
52:7e:d5:8f:23:a3:12:8f:6e:44:65:8b:05:99:8c:
61:8c:24:76:80:64:07:a5:c8:e9:02:9e:cd:d4:2c:
f1:5c:78:65:bc:a6:42:42:7f:2b:a6:c0:72:01:5b:
03:09:87:5e:12:fc:cf:13:40:d9:6d:a0:f6:6b:38:
b8:df:e9:63:aa:bd:87:e0:42:fc:72:b8:cc:0f:42:
01:a0:a8:95:d6:26:93:7a:68:b4:db:83:d7:93:cf:
da:82:e9:08:b3:1a:1a:2c:2a:6b:d7:14:44:95:f7:
fe:c4:5d:9a:3d:28:20:88:05:f8:56:48:48:ac:3d:
a7:f2:0f:e4:2e:e2:a7:21:30:06:bf:95:cb:97:18:
45:c9:be:4b:4e:f8:95:48:db:f3:dc:be:f0:00:97:
6c:b4:8f:44:f6:e3:2a:70:43:e3:21:33:db:58:ce:
a8:60:e7:f8:0e:a4:08:b4:af:a4:28:75:36:20:9c:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:05:18:85:F2:F4:E4:40:81:8E:49:66:D8:10:9D:83:BC:E2:9A
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/GCgFGIXy9ORAgY5JZtgQnYO84po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.156.0/23
IPv6:
2a00:5180::/48
Signature Algorithm: sha256WithRSAEncryption
cc:c4:17:86:eb:23:28:fc:e8:12:71:84:f0:42:a6:d6:07:12:
17:55:2b:e3:d2:e1:5d:79:b0:09:9f:4b:3f:2b:87:fe:98:79:
a6:2a:7e:46:e1:01:b1:b4:8c:5c:08:8f:1b:ef:72:77:d5:23:
b0:7c:7a:ec:4b:2f:ed:5a:18:2a:10:14:71:ba:b8:8b:79:b1:
95:56:ca:0d:b5:d5:3f:a4:c4:b8:35:c5:03:ae:3a:b2:30:5e:
00:0b:b4:50:06:78:f9:9a:b8:67:91:12:64:dc:20:d9:44:c6:
b5:1d:69:98:fd:eb:c0:bc:3f:7e:64:58:b2:1d:8b:c1:50:6e:
aa:d3:bf:c2:18:f5:08:56:9c:cd:88:3d:35:27:27:dd:8e:52:
b0:06:53:65:18:8f:2f:58:3c:aa:49:d2:2a:6c:eb:d5:de:b3:
38:25:f1:6b:d0:36:de:44:ac:09:ea:69:d5:2c:50:fd:96:49:
5f:09:ed:3d:cf:62:7e:f1:ed:3f:6d:67:93:a8:ba:7e:63:05:
cf:29:b8:7f:56:4d:a4:40:1b:ea:4c:f7:dd:9b:c9:e4:4f:ff:
21:49:cd:c6:39:0d:12:f8:0d:9a:7c:90:b6:22:b0:30:21:75:
cc:fc:30:81:5b:c4:b2:19:78:2d:a6:c5:8a:7e:1e:fd:3e:5d:
72:16:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:38 2025 by rpki-client