Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/gSrU_DupezLqC39GrVm4eq6fGZs.roa
File: gSrU_DupezLqC39GrVm4eq6fGZs.roa (raw, json)
Hash identifier: 854sQvYc+qTkeTgy2fICg6rsh3kmndtNbdRd5AO8L5c=
Subject key identifier: 81:2A:D4:FC:3B:A9:7B:32:EA:0B:7F:46:AD:59:B8:7A:AE:9F:19:9B
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 018801D227169B666C3FCE6E7B2AA25ADD6C
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/gSrU_DupezLqC39GrVm4eq6fGZs.roa
Signing time: Tue 09 May 2023 18:42:09 +0000
ROA not before: Tue 09 May 2023 18:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.220.249.0/24 maxlen: 24
152.89.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:d2:27:16:9b:66:6c:3f:ce:6e:7b:2a:a2:5a:dd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: May 9 18:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=812ad4fc3ba97b32ea0b7f46ad59b87aae9f199b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:74:c7:2e:01:d2:f5:78:96:9e:ce:5a:30:
41:33:7a:b0:a0:73:20:99:ae:13:38:70:97:d3:12:
d4:61:8c:4e:ca:5a:72:93:ef:4f:74:20:30:bd:41:
04:07:d7:3c:cc:cb:f8:2d:13:b9:2a:8a:ea:ba:11:
28:8b:52:31:27:6e:a0:0b:11:cf:ac:52:2c:bf:db:
a7:48:2b:b8:0c:2b:4e:de:47:93:70:9c:67:b6:7e:
7a:83:69:e9:d9:ee:0e:40:8a:fe:d0:05:31:a7:10:
22:04:f5:32:92:fd:63:9a:b4:c1:6f:63:0b:68:1d:
e6:82:38:d4:95:2e:d2:34:61:62:06:97:8c:8b:08:
5b:9d:44:e1:67:d6:66:5d:b7:c3:63:eb:43:2b:83:
9e:6f:a0:8d:42:10:9c:96:4b:71:0f:b1:b1:c1:b2:
d6:b5:9a:12:7b:98:52:5c:b8:74:8c:de:5c:46:b4:
d4:bc:6c:28:25:d1:01:f0:88:fd:f2:3f:53:10:f0:
fa:8f:18:a2:0e:ba:a5:7f:3b:c7:99:73:9a:73:20:
b2:34:f2:d1:ba:70:7c:dc:d1:95:af:d1:71:73:cd:
ab:73:8a:fc:4b:64:30:7d:00:7b:ee:4b:84:99:cd:
6c:2b:1a:d0:23:5e:2a:52:02:40:5e:a8:7e:ac:ea:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2A:D4:FC:3B:A9:7B:32:EA:0B:7F:46:AD:59:B8:7A:AE:9F:19:9B
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/gSrU_DupezLqC39GrVm4eq6fGZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.249.0/24
152.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b1:2b:33:a6:5b:24:a2:b7:8a:b4:50:a0:25:83:64:57:8e:
eb:73:10:82:e1:a6:e1:0b:d9:7b:a5:69:7e:f6:92:2a:27:27:
1c:6a:0a:b8:cd:1b:b7:5f:4c:a1:73:e3:1e:33:9a:15:5c:62:
c0:58:95:51:6e:a0:f8:36:ae:0d:84:be:5f:ab:12:eb:b5:11:
16:9a:eb:ff:ab:d5:e7:95:71:d5:e3:47:4d:e4:76:33:e3:cd:
d4:bd:1a:6b:d9:7e:0b:b3:bd:b2:1c:96:b7:84:5f:d4:91:35:
2b:dc:ad:3e:1a:75:b1:0c:d0:aa:ef:46:ca:07:df:3b:bc:e5:
07:77:bf:50:db:21:fa:99:e1:be:0b:90:8e:19:ca:fb:55:91:
0e:a7:b5:d6:eb:c8:28:ef:3b:75:49:e4:d4:b5:b9:1b:a3:3d:
51:04:49:ff:31:27:5a:48:c5:3a:7b:7c:ad:1b:1f:f6:8e:f2:
4e:e1:33:2f:77:f8:0d:6a:d8:3c:15:f7:d4:5b:17:46:f4:19:
1c:70:bb:47:52:7f:61:48:59:16:50:2f:a3:d1:49:16:e2:c8:
7a:c8:ce:76:59:67:5c:86:1c:b3:04:3e:b2:87:f0:86:6b:ee:
21:20:ec:f3:9e:11:e0:17:9d:5e:ed:5d:c8:4b:b6:7b:a0:69:
d1:98:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:47:55 2025 by rpki-client