Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa
File: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (raw, json)
Hash identifier: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=
Subject key identifier: 82:96:F8:FB:53:DA:F2:38:5E:5F:64:A1:06:A9:83:63:53:B3:FE:E1
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0194221FC86D3C0721197B6DCD28118A7704
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49504
IP address blocks: 91.217.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c8:6d:3c:07:21:19:7b:6d:cd:28:11:8a:77:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8296f8fb53daf2385e5f64a106a9836353b3fee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:cf:5b:bc:05:6d:cb:08:52:4a:7f:a2:6a:
5b:64:ba:45:b1:55:b6:35:8f:40:58:df:38:f8:a4:
e3:43:1a:85:cb:57:4b:4d:21:74:22:4c:f3:73:1f:
c5:22:6d:c1:a2:ba:66:34:b3:36:8c:2e:57:a8:9c:
19:5e:42:2f:c0:6b:3b:eb:71:3b:c4:d4:07:22:67:
09:d6:b1:e1:c8:99:a2:b0:7f:4b:1f:7c:f4:9f:69:
13:4b:cd:6f:0c:34:95:d9:aa:af:31:db:9d:70:64:
fd:0e:02:9f:de:e9:e6:7e:b4:b1:68:e2:9d:40:96:
d0:f8:74:ba:10:f7:c8:ac:96:52:f4:0c:2f:5c:9e:
3c:04:f9:56:16:91:25:dd:bc:c7:0f:58:3c:78:4e:
9c:99:ff:53:92:eb:fa:29:4b:08:aa:07:97:f0:0c:
26:14:3c:f4:45:6b:fc:a1:e8:45:30:d4:e8:8b:5e:
88:98:b3:91:63:eb:d5:c3:4c:9a:9e:73:d2:6c:80:
dd:7c:90:55:94:c1:b6:d6:b5:5a:84:b4:6c:6f:94:
da:ce:f3:c3:6a:e4:ac:9a:7f:44:da:c0:1f:e3:cd:
a7:35:0e:f1:61:97:74:0d:9a:26:f3:91:f0:a5:33:
e4:50:0f:79:21:df:f9:52:ae:61:16:82:7a:13:a0:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:F8:FB:53:DA:F2:38:5E:5F:64:A1:06:A9:83:63:53:B3:FE:E1
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b8:c0:b3:79:0b:f3:77:6d:7f:d9:e9:89:dd:11:1e:20:de:
c7:c0:ee:59:89:7f:5d:5a:3e:89:4d:39:29:3c:8e:37:14:7c:
c8:23:f2:f1:67:bf:42:44:18:5d:9f:82:44:c7:a0:86:47:66:
63:81:1a:4b:be:57:68:8a:b4:ef:46:1c:43:4d:bf:c4:34:40:
dc:21:10:97:01:64:4c:3c:a5:d3:fc:b1:e3:11:f7:c6:19:7b:
bf:3f:36:f1:b8:12:4e:f6:e9:24:35:81:c8:b1:76:e2:41:71:
ef:23:1f:95:6c:04:6b:c2:16:25:7e:9a:e9:9a:e5:e3:81:5f:
29:a9:5e:4d:6a:fd:6e:04:75:22:25:b9:77:4f:75:61:4e:1b:
ff:a4:01:01:55:3d:1b:c6:34:ec:b4:b5:4a:d6:42:b6:0c:25:
b6:f4:e6:14:c0:df:e8:fc:e3:a6:6a:9d:32:b7:ba:d2:97:28:
97:a1:24:5b:7c:04:17:13:9f:de:ab:8b:6a:44:77:58:75:46:
cd:a1:c1:bc:2b:e8:e9:5a:ce:a5:18:98:c5:d8:08:ee:6d:b3:
2e:97:ab:a7:8f:ae:69:bd:39:da:d8:9a:cd:83:5a:4b:27:f0:
01:71:38:bd:ff:07:fb:3d:2b:fc:7a:eb:1b:22:35:d0:40:94:
4d:51:14:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:33 2025 by rpki-client