Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gDccJCyvv-XSleOWBZa0j1v0ILc.roa
File: gDccJCyvv-XSleOWBZa0j1v0ILc.roa (raw, json)
Hash identifier: CO5e5TItEhwMis3LPrh0yYWspCPoVfBb8vdm/rXIFt8=
Subject key identifier: 80:37:1C:24:2C:AF:BF:E5:D2:95:E3:96:05:96:B4:8F:5B:F4:20:B7
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521BFB3996F9BC026271F58579F4F28
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gDccJCyvv-XSleOWBZa0j1v0ILc.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215539
IP address blocks: 91.213.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bf:b3:99:6f:9b:c0:26:27:1f:58:57:9f:4f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80371c242cafbfe5d295e3960596b48f5bf420b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:b2:6b:2a:b7:7e:26:60:84:42:76:84:8f:
f2:dd:cb:0d:71:2e:38:aa:d6:16:bd:c6:03:a4:68:
18:9f:ed:e1:01:e3:2e:da:7a:50:1e:e1:d1:6c:c7:
ef:8f:56:9f:dd:0a:9b:b1:74:cc:6f:93:a1:6d:c1:
b1:d2:14:f6:47:0b:96:dc:41:cc:4e:4c:dd:4d:a0:
b0:8f:2e:b2:f1:c6:09:a0:7c:f1:52:01:fa:57:d6:
62:6b:12:d3:25:9b:e1:c8:56:b2:e7:b5:a7:a7:16:
b1:b6:38:13:cb:7a:0f:a2:a8:bd:c1:5e:55:bc:96:
fc:df:ee:b2:2c:69:fe:06:b1:42:d5:a8:cc:d2:1c:
4a:86:09:0c:07:61:a7:4f:59:c1:e5:58:79:b7:30:
9f:00:2e:af:e1:69:04:7a:e2:ee:bb:15:2b:9b:a7:
cd:15:2b:e3:06:9c:8f:e4:4d:0a:f4:25:75:ff:ec:
e5:de:50:1b:9d:fd:b6:b5:0f:d1:38:59:15:8f:cd:
8f:50:4d:81:a3:53:7e:30:ec:1c:42:d6:3a:5b:5a:
e8:ab:84:63:8b:76:1e:fe:25:c3:37:36:9e:40:ea:
bb:d9:cd:4f:72:e3:89:ad:76:0b:7d:ec:6a:d2:db:
f2:96:62:55:5e:a3:a3:67:10:fd:0a:f2:c9:17:7e:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:1C:24:2C:AF:BF:E5:D2:95:E3:96:05:96:B4:8F:5B:F4:20:B7
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gDccJCyvv-XSleOWBZa0j1v0ILc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.189.0/24
Signature Algorithm: sha256WithRSAEncryption
62:55:11:51:31:57:58:6e:ef:be:b7:b4:22:d5:de:49:75:64:
9b:d8:57:83:3b:e2:45:f1:8d:8e:ef:96:0d:89:9f:02:b3:a2:
7e:0c:d1:91:e9:a4:9d:1c:9d:6a:8e:c3:86:73:b1:cc:f8:8b:
2d:34:03:48:67:8c:9a:3e:2d:fd:65:b7:1d:99:19:d8:c1:ed:
fc:f9:d1:81:04:b4:ca:5e:cd:c5:86:4c:6f:27:ef:e9:b3:86:
fc:10:21:cb:5d:66:4e:d3:82:65:7d:bd:d4:0c:f2:63:65:32:
a2:d6:69:b3:e7:3d:71:d0:db:fd:14:44:20:4d:3a:f7:4c:db:
45:21:7a:86:2b:32:ef:e1:f3:bb:be:fa:54:fb:51:51:0b:bc:
14:20:b6:7e:45:7e:25:ee:3a:c8:19:b1:f0:31:e8:02:26:17:
b1:21:88:52:07:6a:8b:c8:03:6c:00:67:1f:b1:58:ca:0a:b7:
d8:ca:bc:42:e7:de:a7:d3:87:3c:00:a5:5b:e5:d2:8f:d2:31:
db:46:44:63:52:7e:00:0e:a7:e2:8e:be:e1:86:2b:82:87:2c:
f7:ff:90:55:b2:d5:df:95:b7:93:89:d1:0b:1b:1b:e6:fa:5d:
79:e9:84:09:0d:2f:1f:c6:97:62:e3:97:83:59:41:ea:47:3a:
0f:eb:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:53 2025 by rpki-client