Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/GGIWecpIopyHoGkyMoac3XO9YI4.roa
File: GGIWecpIopyHoGkyMoac3XO9YI4.roa (raw, json)
Hash identifier: 9Tukemon/VB7WwBPqptslNoQ4E03a3N7Hs7ZGYVz5y8=
Subject key identifier: 18:62:16:79:CA:48:A2:9C:87:A0:69:32:32:86:9C:DD:73:BD:60:8E
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 019425FDC2CC848F1024A2A17F3B4EB08E0B
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/GGIWecpIopyHoGkyMoac3XO9YI4.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 91.207.61.0/24 maxlen: 24
91.217.90.0/24 maxlen: 24
193.203.48.0/24 maxlen: 24
193.203.49.0/24 maxlen: 24
2a13:f580:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c2:cc:84:8f:10:24:a2:a1:7f:3b:4e:b0:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18621679ca48a29c87a0693232869cdd73bd608e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:9a:e9:e5:2d:9c:b9:f2:84:ff:61:38:23:
f8:5c:49:d7:60:0c:63:f4:37:f9:f0:82:36:e5:6f:
6e:12:3c:ad:37:01:85:ed:1a:76:78:c6:af:ce:1a:
94:2a:04:98:10:19:77:a1:d2:83:3f:34:44:ee:84:
32:6a:8b:e4:59:62:c5:e5:ad:02:1d:6d:0e:de:d2:
14:4d:86:04:62:d9:b1:fd:65:36:86:a0:62:ae:34:
4a:81:61:d3:c3:8e:d7:e3:fc:b2:d5:f1:79:05:b8:
94:42:8b:62:df:0d:87:82:ee:3d:cd:39:62:b9:b3:
8a:01:06:b5:57:a5:ee:a0:c2:80:e6:3d:49:8d:b6:
49:96:57:2b:73:bc:e6:10:46:09:de:a2:73:b2:41:
7d:6d:6e:ee:5b:6a:b2:03:a4:5e:06:07:dd:3c:6e:
f7:d7:a5:9a:7d:e5:41:99:30:25:49:30:5c:08:c8:
e4:a2:52:70:ee:b3:82:bd:bb:8f:44:21:29:aa:63:
3b:34:d5:41:6f:eb:2c:5a:3c:85:6b:56:c1:44:43:
29:d4:dd:db:2a:8d:86:15:ad:95:9a:d5:01:a6:ef:
b4:ad:e5:bf:a9:6c:7e:5b:05:14:30:25:77:77:d2:
f5:a1:04:21:f6:23:83:14:f6:99:9d:f9:29:10:93:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:62:16:79:CA:48:A2:9C:87:A0:69:32:32:86:9C:DD:73:BD:60:8E
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/GGIWecpIopyHoGkyMoac3XO9YI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.61.0/24
91.217.90.0/24
193.203.48.0/23
IPv6:
2a13:f580:3::/48
Signature Algorithm: sha256WithRSAEncryption
6e:8c:4d:a3:7b:62:c7:eb:c4:4e:9e:22:df:60:df:78:51:38:
6f:1a:70:9e:cb:75:93:46:93:f0:60:1c:e6:d5:9f:91:c6:4e:
35:88:d0:88:3e:40:c5:0f:47:dc:93:72:22:49:1f:bf:05:69:
02:10:ec:74:22:76:0f:05:1b:f2:ff:49:eb:74:01:b2:d3:d3:
cb:cc:96:ab:72:fa:2d:a4:2f:6f:d3:62:96:80:12:80:6e:dc:
84:e5:3b:3e:30:2d:89:ba:1c:f4:cc:2c:a1:ba:4f:65:32:e1:
98:71:7a:38:0e:32:d8:bf:fb:07:b1:6e:b3:de:94:ab:6a:62:
11:d2:5d:8f:fd:e6:67:46:d4:bd:14:ac:41:05:c8:50:5a:99:
cc:77:df:44:82:b7:b3:66:e5:91:bd:ed:9c:82:40:7c:22:aa:
1d:05:f6:c9:53:32:fb:46:08:c5:2a:a3:82:3c:2f:da:c9:13:
1c:5b:72:02:34:86:0a:41:82:8a:9d:36:95:36:ba:a7:9d:e6:
fc:da:8d:08:24:d4:c4:63:3f:fc:cf:94:97:ba:9e:80:3b:45:
4b:8e:9c:38:f8:d9:ea:1e:4b:37:e4:13:5d:9f:9d:30:6f:89:
f1:b8:a1:ea:5d:a8:23:28:5e:ed:7c:a7:55:72:15:12:bf:a2:
33:35:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:54 2025 by rpki-client