Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/_GYD1AJUDNposAkJpRDfG9xq6dk.roa
File: _GYD1AJUDNposAkJpRDfG9xq6dk.roa (raw, json)
Hash identifier: afY5Qh0XccEeUiEofkFyRBQd+JnAG3mTgUzmW0se7YQ=
Subject key identifier: FC:66:03:D4:02:54:0C:DA:68:B0:09:09:A5:10:DF:1B:DC:6A:E9:D9
Certificate issuer: /CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6
Certificate serial: 019426D990A3F990D73E301F790040A72ECA
Authority key identifier: 5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/_GYD1AJUDNposAkJpRDfG9xq6dk.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44640
IP address blocks: 91.202.44.0/22 maxlen: 24
185.56.116.0/22 maxlen: 24
2a04:c340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:90:a3:f9:90:d7:3e:30:1f:79:00:40:a7:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc6603d402540cda68b00909a510df1bdc6ae9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:63:8a:62:60:a0:4e:f8:31:62:06:02:18:
51:70:5b:38:15:3a:83:50:72:45:86:8a:fd:f5:7c:
f2:d5:85:a9:cc:65:7e:b2:cd:fa:af:4b:2a:ae:9d:
42:2b:6b:58:ec:4e:fc:3f:7a:f5:df:ae:36:ee:09:
c9:06:2b:e6:ce:ba:7e:da:9a:de:e1:45:cd:ad:fe:
b6:f0:f0:e3:ff:b4:4e:0e:67:8f:0d:65:bf:50:94:
8a:95:a0:90:d3:6f:61:7c:44:b1:03:53:35:35:be:
28:1a:b8:d9:96:7f:af:0b:b0:3e:00:11:12:05:b1:
a8:a3:16:8d:d8:87:de:60:9f:17:0c:75:00:20:99:
41:ac:af:44:3a:75:61:03:66:c1:8b:e0:fb:28:26:
29:b6:5a:48:ff:4e:5b:15:66:c1:6e:3c:92:85:88:
ee:e3:48:a7:b4:96:e5:f1:d5:ef:e0:f7:99:21:ff:
12:19:38:e7:5b:36:96:69:b0:38:c1:5b:72:1b:81:
9a:f3:6c:ec:2c:84:6e:bd:6c:97:49:a4:2d:92:e1:
41:2a:94:6c:7c:c2:45:ce:48:78:07:cd:bb:45:31:
4b:cd:a1:30:5f:43:ad:12:9b:de:b0:c4:d6:c4:75:
c7:3b:2e:9f:c8:50:dd:b0:76:ad:6e:4c:0f:31:3a:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:03:D4:02:54:0C:DA:68:B0:09:09:A5:10:DF:1B:DC:6A:E9:D9
X509v3 Authority Key Identifier:
keyid:5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/_GYD1AJUDNposAkJpRDfG9xq6dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.44.0/22
185.56.116.0/22
IPv6:
2a04:c340::/29
Signature Algorithm: sha256WithRSAEncryption
5b:69:b9:30:7a:0e:a2:5b:95:0c:f2:76:88:0f:1d:f9:e6:83:
bf:6b:e6:28:f2:cf:77:e5:cb:77:10:d4:e0:b9:61:e6:f4:cf:
f9:c0:b4:b2:19:e1:f6:c2:a3:58:58:1b:2f:d8:3f:cf:8b:ac:
9b:3e:fd:9d:5a:62:57:54:a1:ce:5d:97:b2:2b:f9:29:e5:f8:
c1:21:f2:4f:83:64:fd:7b:3b:62:b5:5a:5a:24:b7:16:c6:fb:
4e:c0:05:ff:a7:d0:30:cf:2e:d8:95:72:e7:18:3d:9d:e1:a6:
16:92:f1:73:ea:43:08:73:8f:34:3e:f6:5b:7c:ff:1d:c2:d7:
f2:87:d9:2e:99:97:80:0c:63:37:53:fd:d8:41:48:12:71:ac:
42:ea:f8:22:6f:01:ec:c8:54:54:68:81:30:41:15:46:a9:f7:
92:62:27:56:d7:19:30:55:3d:0c:1a:ca:fb:ae:8e:76:ef:08:
b1:21:55:85:45:0d:a6:25:37:0e:3f:ed:ae:8c:16:2e:e2:f8:
46:a2:a4:83:aa:db:a6:16:fd:ab:02:35:e3:b2:03:f5:d8:7a:
14:b2:45:87:60:49:ce:ae:a3:f3:ac:1b:98:76:48:d1:ec:3c:
99:fe:f7:35:ca:63:7f:69:31:46:d9:a8:ef:cf:d0:a6:b4:f2:
7a:46:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:25 2025 by rpki-client