Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/aGUQW-NVaHMBg-4QWkhklY8KGK0.roa
File: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (raw, json)
Hash identifier: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=
Subject key identifier: 68:65:10:5B:E3:55:68:73:01:83:EE:10:5A:48:64:95:8F:0A:18:AD
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 019422202472770BE2DC0849351009E3EC8B
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/aGUQW-NVaHMBg-4QWkhklY8KGK0.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56332
IP address blocks: 91.220.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:24:72:77:0b:e2:dc:08:49:35:10:09:e3:ec:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6865105be35568730183ee105a4864958f0a18ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c2:3e:40:57:8e:af:6e:cc:1a:6b:9e:06:47:
83:51:ad:da:e7:7b:74:36:61:e3:ad:30:0b:ec:f8:
9f:f3:b2:84:6d:75:2f:af:60:28:d9:63:01:82:5d:
24:a6:6f:17:79:5f:05:fb:51:fb:46:12:ea:5c:3c:
2a:7a:3d:a5:ec:de:02:dd:67:07:bd:0d:91:07:d4:
db:2a:1e:6c:10:4c:08:18:ef:4e:0d:1d:6b:5c:93:
81:26:0c:37:9c:0a:92:9c:77:f6:a2:14:3e:f0:76:
b2:8e:f2:2e:80:48:22:b7:4a:06:52:49:8a:89:eb:
57:65:da:d1:2a:c2:d0:b9:e7:da:7a:ae:79:2e:e6:
28:4e:bc:4e:36:fa:97:da:fa:9f:75:e5:f8:5b:9a:
06:7e:20:aa:4d:1e:7f:51:8f:6c:5a:68:bc:2e:84:
0c:e3:57:5c:72:d1:e3:70:9f:93:c8:74:90:05:98:
9d:a4:79:65:ab:35:12:94:d2:64:b9:8c:6e:30:66:
c9:0d:99:e5:fc:33:b6:2d:d8:66:c9:33:30:9f:23:
35:42:83:3c:dc:54:4e:d8:a9:82:ca:fb:c5:18:fd:
e1:8a:34:bf:1c:00:df:bd:7b:5a:08:73:7c:32:3a:
1c:4d:d1:ab:97:17:cf:c4:b3:89:61:f3:78:ab:7f:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:65:10:5B:E3:55:68:73:01:83:EE:10:5A:48:64:95:8F:0A:18:AD
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/aGUQW-NVaHMBg-4QWkhklY8KGK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:45:aa:09:4d:c1:fe:e1:22:ab:8d:0c:3a:71:6d:90:a0:6a:
66:3a:47:ef:f9:76:33:6c:68:e6:31:5e:78:63:da:75:94:c6:
c8:f2:8d:16:3a:10:a5:58:b9:89:ed:68:0e:3a:70:12:8f:65:
60:d4:59:ba:3a:af:31:98:25:a6:d6:09:97:6d:7f:9f:b2:b6:
66:57:7f:3b:b3:50:a8:cd:1e:25:8d:ec:2f:e2:e7:86:c6:6e:
70:c0:47:cc:5d:d5:67:5b:88:05:e7:4f:88:b8:ff:3a:2a:79:
88:e9:e5:58:d7:19:e9:61:bc:5e:ad:c8:a2:49:6f:bd:27:42:
7b:61:a1:cf:2f:94:13:61:7a:ec:65:e5:8f:df:3c:0b:62:8b:
63:00:a2:2a:0e:21:ce:3d:0a:8a:9b:d0:df:10:4f:c8:0d:75:
8f:8a:ea:92:74:75:fb:48:0e:56:ec:9e:b3:64:61:c5:62:10:
89:e6:48:b7:0d:32:00:f9:df:4f:97:d3:f3:01:0d:9d:6d:8b:
16:f0:d2:04:65:d7:44:be:b0:78:94:ce:ea:1e:7c:99:68:f4:
05:0e:eb:9e:70:06:c0:ce:40:86:5b:4e:a8:15:5a:44:2a:7e:
30:78:9c:56:34:18:47:0e:6a:35:f7:1a:b1:41:1c:95:52:8f:
e2:b0:50:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:25 2025 by rpki-client