Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/gJZeDk4rmX44E5axtXtFWO80NO0.roa
File: gJZeDk4rmX44E5axtXtFWO80NO0.roa (raw, json)
Hash identifier: pUiSGUoY8i4KMd2N+BSEOVvNbEKEOnmR+nGAVe0LW6E=
Subject key identifier: 80:96:5E:0E:4E:2B:99:7E:38:13:96:B1:B5:7B:45:58:EF:34:34:ED
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 019427B635BF8019E72E662E6A8B8C9465BF
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/gJZeDk4rmX44E5axtXtFWO80NO0.roa
Signing time: Thu 02 Jan 2025 15:50:40 +0000
ROA not before: Thu 02 Jan 2025 15:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57967
IP address blocks: 91.237.90.0/24 maxlen: 24
2001:67c:2794::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:35:bf:80:19:e7:2e:66:2e:6a:8b:8c:94:65:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 2 15:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80965e0e4e2b997e381396b1b57b4558ef3434ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:94:4a:25:95:1e:93:81:28:44:66:51:f2:
63:c1:a4:c8:55:8f:3f:f5:70:7d:11:a5:d4:de:ad:
98:0f:d1:03:73:14:ef:e0:6c:f0:01:d3:e5:75:44:
5a:50:83:e6:49:ce:5e:7c:fd:6e:2a:be:96:b3:6b:
4d:92:ee:de:c1:88:10:4e:2b:08:c3:94:14:49:ef:
35:a1:d4:d2:c9:a6:75:34:c8:b0:50:49:5e:94:94:
99:72:66:09:a6:8b:f5:ea:6c:ca:3e:8b:0f:9b:94:
c7:3f:23:6e:d1:62:c2:d5:be:5c:c2:60:fe:4c:44:
05:70:c0:31:17:c4:62:9c:5a:0c:61:ed:53:75:63:
1e:9b:3c:76:81:7e:67:db:7c:02:5e:b1:0a:7a:0e:
cd:c9:0e:2b:ff:b4:cf:53:d5:77:97:09:6b:e1:6a:
35:0f:2c:e9:0e:20:49:e7:30:a8:e6:65:b3:15:d6:
05:d9:85:e0:c4:ae:a9:af:2a:b8:d6:ca:87:61:3c:
5d:11:02:a7:c5:c7:c3:0d:05:0a:5a:8f:4e:00:4c:
93:95:a0:1e:16:91:30:84:30:f4:16:4c:17:8f:a2:
89:39:8d:d0:89:dc:df:c1:86:5a:0c:6f:f6:02:df:
d8:e4:54:9e:25:9b:b4:ba:ae:f7:c4:b9:ae:ef:4c:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:5E:0E:4E:2B:99:7E:38:13:96:B1:B5:7B:45:58:EF:34:34:ED
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/gJZeDk4rmX44E5axtXtFWO80NO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.90.0/24
IPv6:
2001:67c:2794::/48
Signature Algorithm: sha256WithRSAEncryption
16:bb:6b:ff:69:f7:54:27:92:f8:66:36:6d:e8:fd:3b:fb:59:
bf:56:f5:02:99:47:46:eb:13:41:8c:41:42:a6:78:b0:c5:55:
25:77:c4:cc:f0:5d:16:8f:b9:77:a2:2e:4a:05:04:e6:ae:5c:
8b:9a:df:44:c2:46:4d:99:55:88:4d:a6:78:ad:f5:ff:bc:a5:
e4:e0:6e:ac:83:b1:e7:ce:4c:29:ef:ed:2e:5f:92:8a:9c:91:
cd:dc:14:f2:fb:6b:69:ae:4d:cd:28:07:48:af:78:fc:00:21:
69:df:96:0a:d5:44:08:91:c2:85:7a:72:69:b0:53:48:47:71:
51:1b:a8:d9:ea:ab:7e:c0:0f:98:63:18:1b:bf:59:f3:f4:61:
05:61:a4:cd:16:a8:4b:82:f1:1f:07:04:3c:ab:36:56:d8:98:
33:fe:23:a1:bc:d0:20:22:fb:19:34:5c:1a:d5:c7:bf:ea:7f:
8f:f1:7c:7c:ad:66:5e:31:16:3e:bb:90:b4:db:2f:a9:2e:50:
03:b8:bc:a5:e6:07:6c:85:cb:d8:3b:a0:2f:f1:f8:0f:42:01:
41:b8:93:a8:39:65:14:7e:85:d7:0d:30:2e:3f:6f:f0:ac:a9:
10:d5:47:28:b5:6e:f3:7b:4e:89:06:27:db:34:36:d3:f6:c0:
af:b0:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:07 2025 by rpki-client