Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/gWauuati_t4mDyHK5P6-vGRw5tI.roa
File: gWauuati_t4mDyHK5P6-vGRw5tI.roa (raw, json)
Hash identifier: 8Gg051rcVEVxLbKS4zWCYakDmEwjk+i+o+ush3e3CSQ=
Subject key identifier: 81:66:AE:B9:AB:62:FE:DE:26:0F:21:CA:E4:FE:BE:BC:64:70:E6:D2
Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial: 01942143FB4A772B8FB5AA07EC84BC0B99C4
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/gWauuati_t4mDyHK5P6-vGRw5tI.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203584
IP address blocks: 91.206.86.0/24 maxlen: 24
91.206.87.0/24 maxlen: 24
193.58.216.0/24 maxlen: 24
193.58.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fb:4a:77:2b:8f:b5:aa:07:ec:84:bc:0b:99:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8166aeb9ab62fede260f21cae4febebc6470e6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:73:a1:39:f0:57:60:85:c9:26:e8:01:3e:
35:86:61:ad:3c:6d:3d:79:cd:1f:ff:4c:c4:43:26:
f1:3d:5b:1d:da:f0:6a:26:b7:6b:bc:cf:aa:88:78:
70:54:c0:b7:18:3c:1b:38:ec:68:c8:91:7f:b6:4d:
cf:97:a9:b8:4c:41:8a:50:8e:c3:4e:9d:b3:68:84:
c0:b1:b8:eb:b1:59:45:e4:9f:ad:ae:d7:33:5f:c1:
15:57:5f:bd:57:6b:62:2a:0b:07:c8:91:1f:e9:37:
f4:32:f3:3c:3c:28:76:14:9a:7d:f1:b5:fe:b4:13:
b2:37:7d:fe:77:d7:41:ff:0c:b1:18:49:34:2c:ce:
bb:a0:44:ba:82:9d:5c:2a:61:4f:d8:9f:ad:8f:79:
eb:27:99:c1:29:ec:48:e5:88:40:63:5b:c2:62:b7:
a6:51:f4:b2:d1:56:f5:41:c4:f6:4f:86:8b:e6:c2:
da:55:62:d1:a3:bc:8f:19:b6:d4:d1:cf:fc:eb:64:
e1:88:b5:51:8d:9e:2c:09:30:5c:e5:b2:01:7b:d0:
d2:2c:21:93:39:2e:41:07:02:4c:b1:73:4d:2e:a2:
cb:78:ec:9a:60:ff:81:25:98:55:08:b1:80:18:a8:
79:5d:e9:2d:bc:13:a4:3c:fc:46:45:7e:99:a8:ce:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:66:AE:B9:AB:62:FE:DE:26:0F:21:CA:E4:FE:BE:BC:64:70:E6:D2
X509v3 Authority Key Identifier:
keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/gWauuati_t4mDyHK5P6-vGRw5tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.86.0/23
193.58.216.0/23
Signature Algorithm: sha256WithRSAEncryption
56:ae:41:28:f0:c4:1b:e0:68:bd:37:26:0c:ae:3a:4a:d7:e0:
9e:17:a4:c6:45:45:36:4b:53:b9:cc:b7:50:a2:27:b4:25:19:
db:e8:9b:dd:93:92:65:ea:bd:02:7d:53:c4:06:4c:d8:d5:b7:
5f:a1:39:f4:10:ab:41:ab:f2:41:04:20:b9:16:84:06:1d:32:
96:e9:6b:4b:9d:a4:79:ac:45:93:ee:ed:00:e2:ff:14:9b:df:
73:75:e9:db:66:50:37:d0:91:38:29:7f:b4:c4:b7:80:41:a8:
da:8b:f1:1b:3e:91:ba:43:83:0c:7e:4b:23:50:d8:40:63:e5:
bc:a1:da:36:b8:76:61:90:78:04:61:2c:b8:bf:ef:5e:d4:e0:
86:6a:6f:55:4b:39:90:70:7a:0b:b9:14:07:bc:4d:aa:f8:8e:
f4:b3:19:83:57:55:3f:fb:a6:1a:3b:9b:17:4b:de:f3:8f:c5:
40:23:46:79:e8:0f:ae:2c:90:b3:97:be:4b:81:1f:25:0b:cc:
f6:b8:e3:cc:d8:f8:54:cb:67:36:92:ed:56:71:13:69:25:d1:
7d:b4:4b:c0:60:55:7f:c5:27:e5:da:cc:dc:ed:4c:c1:fe:f1:
7d:e0:35:63:0f:1d:6b:9d:dd:f0:f3:03:f6:07:29:65:8b:21:
82:57:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:03:24 2025 by rpki-client