Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/57b7e1-8a91-4a00-a022-6d345ebc144e/1/GnrQND6dA1uK4vtoFfgWsrBbqeQ.roa
File: GnrQND6dA1uK4vtoFfgWsrBbqeQ.roa (raw, json)
Hash identifier: 9ApTS+CdVAOMezh5NfOlz+9ReauTOp34x+8EqyANJ2g=
Subject key identifier: 1A:7A:D0:34:3E:9D:03:5B:8A:E2:FB:68:15:F8:16:B2:B0:5B:A9:E4
Certificate issuer: /CN=05ab27bb08417e5e90ae3b4cbbfffbd6cbf040b6
Certificate serial: 0BF8735D
Authority key identifier: 05:AB:27:BB:08:41:7E:5E:90:AE:3B:4C:BB:FF:FB:D6:CB:F0:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BasnuwhBfl6QrjtMu__71svwQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/57b7e1-8a91-4a00-a022-6d345ebc144e/1/GnrQND6dA1uK4vtoFfgWsrBbqeQ.roa
Signing time: Sat 01 Jan 2022 12:54:25 +0000
ROA not before: Sat 01 Jan 2022 12:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201953
IP address blocks: 91.212.25.0/24 maxlen: 24
2001:67c:5c8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200831837 (0xbf8735d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ab27bb08417e5e90ae3b4cbbfffbd6cbf040b6
Validity
Not Before: Jan 1 12:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a7ad0343e9d035b8ae2fb6815f816b2b05ba9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:2f:a1:e6:f9:25:56:78:62:87:92:c4:9e:
e2:7e:2b:52:b4:40:62:10:70:6d:1b:65:39:03:ef:
69:da:dc:75:11:ff:8c:68:8c:c3:fc:9b:5d:66:ee:
f0:7f:a2:13:69:58:2b:01:9e:57:cf:a5:82:ff:24:
82:32:00:28:2a:a9:73:78:e1:a1:bb:33:b8:ac:38:
9c:dc:24:bd:ed:50:89:6a:40:ec:89:23:e7:f1:de:
91:fc:e7:42:f0:ad:3c:64:29:40:9a:ff:6e:17:82:
49:6c:fe:f4:a2:15:ab:58:ef:0c:c6:04:73:f9:35:
c9:0e:c3:a3:c6:44:75:f5:bf:92:da:d5:55:8f:6c:
44:b9:98:eb:c9:84:41:bd:49:17:99:cc:4b:e5:32:
4c:d8:f3:71:10:59:f2:e2:e5:a4:6d:b3:17:55:ca:
34:c2:52:29:41:b7:51:e1:1f:c3:cd:4d:37:1c:d4:
4a:ad:6a:70:77:96:93:49:27:40:60:db:55:a1:4c:
99:44:b5:cc:68:1f:d3:e4:a1:a1:95:40:27:46:f1:
51:3f:bc:3f:81:3a:1c:f9:d3:e7:72:7f:5e:49:7c:
99:08:fc:6f:47:d2:e4:a8:3b:f9:41:68:0b:f5:1d:
d9:ff:20:1d:23:da:26:11:ab:9c:ae:a6:cf:eb:e8:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:D0:34:3E:9D:03:5B:8A:E2:FB:68:15:F8:16:B2:B0:5B:A9:E4
X509v3 Authority Key Identifier:
keyid:05:AB:27:BB:08:41:7E:5E:90:AE:3B:4C:BB:FF:FB:D6:CB:F0:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BasnuwhBfl6QrjtMu__71svwQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/57b7e1-8a91-4a00-a022-6d345ebc144e/1/GnrQND6dA1uK4vtoFfgWsrBbqeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/57b7e1-8a91-4a00-a022-6d345ebc144e/1/BasnuwhBfl6QrjtMu__71svwQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.25.0/24
IPv6:
2001:67c:5c8::/48
Signature Algorithm: sha256WithRSAEncryption
91:f9:ee:ef:37:e9:d0:72:00:83:e2:fe:85:2c:06:d6:6f:07:
e3:c8:8d:17:3f:2e:6f:43:5f:5a:02:82:fe:78:e7:08:ca:f3:
dc:6e:99:a2:a3:40:e6:4d:43:a0:01:da:a0:00:11:dc:24:01:
e8:47:35:34:15:66:d2:cb:0c:0a:3b:46:a6:fb:d6:87:db:4f:
54:bd:8f:ca:d4:6f:3c:f5:ba:69:c3:d5:08:0d:18:70:6c:b2:
8e:14:d0:34:10:09:c8:02:fc:01:da:06:68:be:ea:f7:64:26:
14:5f:95:c5:0a:3d:32:00:cd:92:f1:43:d3:48:ad:7a:be:83:
ba:08:96:fd:c7:0b:7e:37:6d:95:a6:fc:7d:de:57:81:5c:44:
d3:3c:48:79:9f:0f:b7:52:3f:56:34:5f:d8:ab:94:ff:92:e9:
73:42:04:ae:86:c7:c0:6e:a8:3b:d3:67:b0:06:de:da:8a:ef:
8e:21:21:b4:10:77:53:40:ea:42:ce:13:8c:7a:81:2d:3d:5d:
c9:f2:eb:94:6a:52:4d:8c:94:40:a3:35:2f:5b:cd:95:c3:3b:
a5:12:05:82:19:d5:07:28:f9:0a:50:e2:8f:7b:38:1a:98:68:
12:61:32:74:fd:90:17:7b:18:fc:f8:b5:7d:25:08:6e:41:0c:
18:87:29:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEC/hzXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NWFiMjdiYjA4NDE3ZTVlOTBhZTNiNGNiYmZmZmJkNmNiZjA0MGI2MB4XDTIyMDEw
MTEyNTQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWE3YWQwMzQzZTlk
MDM1YjhhZTJmYjY4MTVmODE2YjJiMDViYTllNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALFfL6Hm+SVWeGKHksSe4n4rUrRAYhBwbRtlOQPvadrcdRH/
jGiMw/ybXWbu8H+iE2lYKwGeV8+lgv8kgjIAKCqpc3jhobszuKw4nNwkve1QiWpA
7Ikj5/HekfznQvCtPGQpQJr/bheCSWz+9KIVq1jvDMYEc/k1yQ7Do8ZEdfW/ktrV
VY9sRLmY68mEQb1JF5nMS+UyTNjzcRBZ8uLlpG2zF1XKNMJSKUG3UeEfw81NNxzU
Sq1qcHeWk0knQGDbVaFMmUS1zGgf0+ShoZVAJ0bxUT+8P4E6HPnT53J/Xkl8mQj8
b0fS5Kg7+UFoC/Ud2f8gHSPaJhGrnK6mz+vo+RsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQaetA0Pp0DW4ri+2gV+BaysFup5DAfBgNVHSMEGDAWgBQFqye7CEF+XpCu
O0y7//vWy/BAtjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Jhc251d2hCZmw2UXJqdE11X183MXN2d1FMWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGMvNTdiN2UxLThhOTEtNGEwMC1hMDIyLTZkMzQ1ZWJjMTQ0ZS8x
L0duclFORDZkQTF1SzR2dG9GZmdXc3JCYnFlUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMv
NTdiN2UxLThhOTEtNGEwMC1hMDIyLTZkMzQ1ZWJjMTQ0ZS8xL0Jhc251d2hCZmw2
UXJqdE11X183MXN2d1FMWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFvUGTAPBAIAAjAJAwcAIAEGfAXI
MA0GCSqGSIb3DQEBCwUAA4IBAQCR+e7vN+nQcgCD4v6FLAbWbwfjyI0XPy5vQ19a
AoL+eOcIyvPcbpmio0DmTUOgAdqgABHcJAHoRzU0FWbSywwKO0am+9aH209UvY/K
1G889bppw9UIDRhwbLKOFNA0EAnIAvwB2gZovur3ZCYUX5XFCj0yAM2S8UPTSK16
voO6CJb9xwt+N22Vpvx93leBXETTPEh5nw+3Uj9WNF/Yq5T/kulzQgSuhsfAbqg7
02ewBt7aiu+OISG0EHdTQOpCzhOMeoEtPV3J8uuUalJNjJRAozUvW82VwzulEgWC
GdUHKPkKUOKPezgamGgSYTJ0/ZAXexj8+LV9JQhuQQwYhyk6
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:20 2025 by rpki-client