Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa
File: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (raw, json)
Hash identifier: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=
Subject key identifier: 1A:FE:04:9D:16:FC:F0:C6:39:69:52:C4:63:5E:FF:39:9D:16:97:4F
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 019425FDB52A529A1837A32191158D2B7B04
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41536
IP address blocks: 91.198.59.0/24 maxlen: 24
193.222.57.0/24 maxlen: 24
195.14.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b5:2a:52:9a:18:37:a3:21:91:15:8d:2b:7b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1afe049d16fcf0c6396952c4635eff399d16974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:c3:78:b4:d7:8b:e2:8a:53:cd:be:ca:4d:
24:a3:db:ad:45:ec:db:db:50:99:de:19:6e:43:e2:
cd:a0:d9:4e:c2:c1:f6:06:fe:77:96:d1:b1:c5:fe:
c9:06:a8:2d:0e:45:78:4d:17:8c:35:12:fc:ea:7c:
a9:23:06:c5:e3:ec:ad:d0:39:cb:b3:47:1c:24:fa:
4f:03:ee:74:b1:6b:f0:31:aa:2e:cc:c2:c7:5a:e7:
08:88:eb:a8:96:ba:95:62:23:61:8d:cd:46:a8:ce:
fe:92:df:fd:89:56:ba:5e:19:23:9a:8a:13:a2:ac:
b2:26:ec:43:26:be:e1:6b:d8:0a:98:e1:30:77:16:
ae:11:44:29:86:4c:c8:29:19:79:96:ce:b4:ef:3e:
b5:1f:1a:ce:7f:cd:ec:d4:92:d7:c2:53:9e:0d:8a:
5d:58:df:0e:ef:83:9d:e0:fe:dd:6d:88:d3:77:fe:
7c:b0:1f:ab:1e:35:69:4b:60:f7:18:5d:34:1d:9e:
e9:07:4a:42:87:09:b5:c9:d3:fe:e5:ad:c7:52:da:
fb:28:7b:e1:4c:63:ee:ba:bf:74:8d:22:aa:fc:97:
30:ac:fc:2b:07:5d:bf:c2:7c:eb:5b:52:06:fc:21:
75:f2:80:f7:e8:e1:1c:01:8a:e8:20:4f:c4:3b:ad:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:04:9D:16:FC:F0:C6:39:69:52:C4:63:5E:FF:39:9D:16:97:4F
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.59.0/24
193.222.57.0/24
195.14.6.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a0:41:c9:28:87:b6:18:d1:6f:b8:4a:64:0c:02:0b:8e:34:
0a:c7:c7:ed:e5:c8:22:50:33:37:3b:1f:2e:e9:6f:57:70:b5:
10:98:22:97:57:47:b0:b9:99:de:b4:a9:c3:ff:72:e7:a6:42:
13:8f:90:ce:5d:8f:73:9a:13:a6:70:cc:41:2f:fd:d6:1c:50:
59:d0:dd:f9:99:41:6b:7a:f2:09:60:80:a7:6f:1f:67:5b:ea:
25:ef:c1:df:97:8e:3c:a4:af:98:10:bc:78:17:e2:b9:81:ae:
88:c6:bf:e5:f0:74:42:20:37:b1:49:78:02:f1:04:79:f0:87:
63:2c:a4:d3:f0:4e:4f:78:3a:49:ba:e9:a6:6e:eb:f2:e7:e4:
f1:f2:eb:a4:d8:85:b3:75:bb:af:e4:4c:94:31:62:02:1d:0d:
ca:73:1a:5d:7c:84:96:14:4c:b5:8b:4c:55:2c:d0:3a:44:05:
2e:12:d3:6c:42:f4:99:b4:e1:bc:1e:1c:ec:09:5c:08:1e:38:
17:12:82:c0:b8:e6:ce:8c:55:93:70:0b:10:db:d6:7f:5a:4c:
8b:2b:d5:2b:19:40:9f:4c:11:b8:a2:f0:3d:28:0e:9a:df:c7:
7b:42:7f:fc:22:0f:9b:85:6f:33:22:99:6f:f3:d1:e8:d1:51:
9f:be:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:49 2025 by rpki-client