Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/IKlMOdkuHyBNZAexC-GSK-hjGW0.roa
File: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (raw, json)
Hash identifier: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=
Subject key identifier: 20:A9:4C:39:D9:2E:1F:20:4D:64:07:B1:0B:E1:92:2B:E8:63:19:6D
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 019421B213B031993FAC25F002DFE4173651
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/IKlMOdkuHyBNZAexC-GSK-hjGW0.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42481
IP address blocks: 91.192.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:13:b0:31:99:3f:ac:25:f0:02:df:e4:17:36:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20a94c39d92e1f204d6407b10be1922be863196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:00:b8:88:af:2c:1e:39:85:82:4b:51:05:
b2:8e:7b:93:e3:e7:a9:77:df:bb:5f:bd:f8:ba:29:
39:12:00:f0:1d:6e:6d:aa:6a:c5:7e:66:1a:b8:fb:
a9:b7:ae:ec:fa:77:71:44:fb:30:0e:db:3e:58:00:
47:fb:ca:31:78:4b:49:04:57:a4:e0:b7:2d:2c:ed:
6b:ad:bc:39:b4:f9:b2:8f:6b:a7:af:a5:19:3a:ef:
00:04:98:39:1f:f3:75:8c:89:0c:ed:0e:5f:49:fe:
5a:0c:56:ef:5b:ac:fa:da:17:32:79:86:c8:0f:f6:
48:c6:fd:4a:45:a3:16:41:47:db:7f:bd:af:42:1f:
86:fd:9e:51:6f:4a:36:9e:78:59:65:58:0d:6a:0e:
6d:c4:fb:21:81:15:61:54:b0:a2:8f:87:61:e3:31:
0c:1f:67:83:87:2f:09:c2:d9:6a:1e:44:c8:b3:13:
b8:16:2c:06:58:a2:9d:44:70:23:98:b9:0b:78:63:
17:ab:34:dd:dd:73:31:a7:a2:92:41:5b:3d:83:b4:
f8:3c:26:00:67:53:0c:6f:87:32:11:df:e7:99:80:
0f:8b:87:91:70:10:75:59:7f:e1:a1:32:70:50:56:
35:ff:91:ae:c7:0d:7e:08:ed:ca:0c:ce:63:98:96:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:4C:39:D9:2E:1F:20:4D:64:07:B1:0B:E1:92:2B:E8:63:19:6D
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/IKlMOdkuHyBNZAexC-GSK-hjGW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.148.0/22
Signature Algorithm: sha256WithRSAEncryption
55:66:76:81:80:50:37:b2:dc:52:ef:a0:c2:6b:77:84:6a:d9:
e2:b1:bc:41:f2:6e:01:09:39:67:74:c2:5c:7d:16:4b:b8:eb:
3f:27:a1:93:3a:71:d6:50:0d:b7:e6:30:44:47:d6:ee:10:8e:
c8:be:bc:f6:1d:52:3b:6f:74:2e:15:e8:3e:d7:6e:1e:00:c3:
30:ca:8c:58:f8:4e:50:4e:9c:1c:dc:c6:36:cc:13:26:b5:7f:
c3:2f:c5:0c:c0:c6:5c:d3:3f:6a:f0:e8:6d:bf:b7:f8:f0:ef:
00:c2:af:19:ae:16:5b:31:f0:f9:d2:f8:68:1a:64:7e:c0:ef:
1a:c9:d4:6d:31:b1:00:3b:b3:e2:b9:7e:a9:e4:d0:2b:2a:61:
57:84:23:d5:01:83:d1:90:6d:2c:60:9f:f8:f2:3f:78:54:db:
81:c3:a7:91:13:8c:78:77:6d:78:41:b2:d2:c2:a6:19:74:75:
c9:7c:b2:0d:4d:bc:b4:08:29:10:f3:21:2d:13:6f:38:6c:ee:
41:cb:d9:fd:4e:3d:d0:2f:a1:e2:4e:4b:bd:f5:ef:db:58:37:
92:9a:6b:1a:dd:4e:f1:8c:7d:ae:b3:db:60:91:b0:40:b3:0a:
65:ec:3c:91:56:b3:74:1f:4c:bd:90:cb:0f:48:f6:77:4a:96:
d8:1b:e4:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhshOwMZk/rCXwAt/kFzZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhN2I5YThjZDgxOWY0YTkyMDMzNGQ3ZTcyZWMyMzQwODcw
ZDc3NDkwHhcNMjUwMTAxMTE0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGE5NGMzOWQ5MmUxZjIwNGQ2NDA3YjEwYmUxOTIyYmU4NjMxOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBwAuIivLB45hYJLUQWyjnuT4+ep
d9+7X734uik5EgDwHW5tqmrFfmYauPupt67s+ndxRPswDts+WABH+8oxeEtJBFek
4LctLO1rrbw5tPmyj2unr6UZOu8ABJg5H/N1jIkM7Q5fSf5aDFbvW6z62hcyeYbI
D/ZIxv1KRaMWQUfbf72vQh+G/Z5Rb0o2nnhZZVgNag5txPshgRVhVLCij4dh4zEM
H2eDhy8JwtlqHkTIsxO4FiwGWKKdRHAjmLkLeGMXqzTd3XMxp6KSQVs9g7T4PCYA
Z1MMb4cyEd/nmYAPi4eRcBB1WX/hoTJwUFY1/5Guxw1+CO3KDM5jmJbpXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCpTDnZLh8gTWQHsQvhkivoYxltMB8GA1UdIwQY
MBaAFJp7mozYGfSpIDNNfnLsI0CHDXdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYt
MjFmYWYxNDRjYjYyLzEvSUtsTU9ka3VIeUJOWkFleEMtR1NLLWhqR1cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYtMjFmYWYxNDRjYjYy
LzEvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8CUMA0G
CSqGSIb3DQEBCwUAA4IBAQBVZnaBgFA3stxS76DCa3eEatnisbxB8m4BCTlndMJc
fRZLuOs/J6GTOnHWUA235jBER9buEI7Ivrz2HVI7b3QuFeg+124eAMMwyoxY+E5Q
Tpwc3MY2zBMmtX/DL8UMwMZc0z9q8Ohtv7f48O8Awq8ZrhZbMfD50vhoGmR+wO8a
ydRtMbEAO7PiuX6p5NArKmFXhCPVAYPRkG0sYJ/48j94VNuBw6eRE4x4d214QbLS
wqYZdHXJfLINTby0CCkQ8yEtE284bO5By9n9Tj3QL6HiTku99e/bWDeSmmsa3U7x
jH2us9tgkbBAswpl7DyRVrN0H0y9kMsPSPZ3SpbYG+QB
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:54 2025 by rpki-client