Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/GmmTJrDnl5l4oNm96pmFHnUTmtw.roa
File: GmmTJrDnl5l4oNm96pmFHnUTmtw.roa (raw, json)
Hash identifier: pwolnRd5ZwHSnC/gP9Agf6nFawzcw4azMTiVm2n1TBU=
Subject key identifier: 1A:69:93:26:B0:E7:97:99:78:A0:D9:BD:EA:99:85:1E:75:13:9A:DC
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 019428272ACBC4945814063C69C84CCB3390
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/GmmTJrDnl5l4oNm96pmFHnUTmtw.roa
Signing time: Thu 02 Jan 2025 17:54:02 +0000
ROA not before: Thu 02 Jan 2025 17:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49644
IP address blocks: 91.213.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:2a:cb:c4:94:58:14:06:3c:69:c8:4c:cb:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jan 2 17:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a699326b0e7979978a0d9bdea99851e75139adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:1d:ed:8b:24:c8:7c:a2:28:0a:86:45:ce:
b3:80:87:68:6d:8d:e2:43:d2:3d:63:19:41:d9:77:
bf:8c:a4:99:1a:c6:c1:34:af:eb:80:c9:db:be:e7:
7c:8f:94:99:99:d1:3b:e3:8a:b2:cb:5d:6b:3f:c3:
9e:29:db:1e:83:b5:0b:57:3e:ad:bc:d7:9b:9f:21:
e8:40:72:dd:ec:b3:2f:c4:ab:23:c1:0d:1b:9c:80:
ba:0e:a9:fe:e7:b7:e1:60:37:dc:a9:c1:10:eb:9b:
2c:e4:d1:a0:03:0d:64:db:e9:e1:16:a4:5b:8c:88:
4c:c8:65:e0:84:16:39:d5:d4:38:0a:63:3d:44:87:
0c:83:6c:93:1a:45:db:59:4a:c6:9f:ec:62:81:12:
ee:12:c8:26:36:e7:f5:25:5b:6b:b0:0d:31:fb:9f:
50:36:cb:21:c2:c9:fb:2a:9c:35:36:4b:8b:89:c0:
e5:cc:48:05:4d:78:50:fb:1c:ec:47:bd:e5:f2:7e:
c0:a2:e7:11:37:18:5f:ec:79:fc:0e:23:52:13:a5:
26:16:f3:e1:68:c0:e1:33:3a:3b:72:23:e7:b5:5e:
0e:b0:f6:f8:17:a6:94:5f:e2:a1:d7:4f:ee:e4:09:
9e:5b:84:84:91:0d:38:d2:e0:c9:20:e0:51:2c:17:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:93:26:B0:E7:97:99:78:A0:D9:BD:EA:99:85:1E:75:13:9A:DC
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/GmmTJrDnl5l4oNm96pmFHnUTmtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.51.0/24
Signature Algorithm: sha256WithRSAEncryption
93:84:44:3d:16:f3:90:91:f8:ae:ec:1c:e5:cc:a9:b3:d4:9a:
06:3e:8a:56:24:ef:08:ac:51:b8:9f:c5:ca:fa:80:cf:34:ee:
f8:52:2e:1d:36:8e:2b:3e:d6:70:0c:36:53:8b:1f:ae:94:64:
ed:b7:3c:bb:40:a5:4e:2a:81:ca:e0:fa:b9:10:42:84:b5:9e:
62:bc:a2:72:73:a7:90:36:b6:e8:63:22:33:2d:ee:73:f9:b3:
fc:3d:b4:86:0c:d3:5c:97:52:ea:a5:c2:2e:8b:54:a2:73:ed:
7e:bc:e3:c7:d3:a1:78:df:20:3b:9e:3c:cb:7c:7b:78:d9:7f:
11:49:ae:c0:70:2a:1c:62:20:05:b8:52:26:cc:b3:38:98:b5:
1b:86:8b:b0:88:6a:eb:4d:87:f3:e2:65:b5:3f:a1:cf:87:d4:
10:ce:69:f9:d2:43:bd:fe:e9:09:78:5a:b5:0f:87:dc:09:55:
bf:c6:ee:d7:1a:7b:92:b0:fc:12:8a:52:f4:ce:ec:fa:69:be:
80:11:08:b3:18:5a:a5:08:5e:cf:0b:00:d0:1d:72:51:ee:9e:
3f:84:69:95:17:7b:c2:d4:81:77:30:07:c6:05:d2:2b:be:71:
8e:36:3b:c5:4f:fc:92:35:1c:13:29:c3:9f:34:68:f7:32:41:
6a:a7:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:18 2025 by rpki-client