Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/gZkzIGBCOcCNiXUZazqSYQeGbpg.roa
File: gZkzIGBCOcCNiXUZazqSYQeGbpg.roa (raw, json)
Hash identifier: SNGs7fhDLTyLRk6mGoAtMtemcP7ESy0f3pn7nCib2+w=
Subject key identifier: 81:99:33:20:60:42:39:C0:8D:89:75:19:6B:3A:92:61:07:86:6E:98
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 019427B4F5444B4DE8674FCAE161373D68F2
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/gZkzIGBCOcCNiXUZazqSYQeGbpg.roa
Signing time: Thu 02 Jan 2025 15:49:18 +0000
ROA not before: Thu 02 Jan 2025 15:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206948
IP address blocks: 91.226.78.0/24 maxlen: 24
91.226.160.0/24 maxlen: 24
91.226.184.0/24 maxlen: 24
185.216.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:f5:44:4b:4d:e8:67:4f:ca:e1:61:37:3d:68:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Jan 2 15:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81993320604239c08d8975196b3a926107866e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:df:61:fb:65:52:dd:e3:97:e9:ce:09:78:
01:07:18:ea:13:35:8e:81:08:de:3a:8c:e3:a3:b7:
ce:9b:f5:4f:b5:02:12:7b:51:33:a7:5a:53:71:fe:
27:d7:2c:bb:5e:db:a7:2b:fb:e4:bf:1e:29:89:33:
e9:bf:d7:32:72:af:30:85:fc:86:e8:cf:4e:b5:89:
c3:e7:1b:ae:51:ea:97:d9:a7:99:0d:81:0a:7a:8b:
56:ab:b5:6b:d9:36:12:63:83:9c:9c:bf:3a:5b:62:
82:b6:3e:de:1f:02:d0:f7:6d:5a:06:4d:2f:7c:23:
af:a9:1a:8f:f0:ad:d7:58:fb:57:f5:16:9b:49:cd:
0c:0e:4f:f5:03:f4:67:77:52:b8:56:12:88:4e:78:
57:e3:37:07:d8:c4:f3:65:96:d8:df:97:c7:aa:39:
a1:63:fa:87:7a:e9:50:0a:cc:ff:3a:36:c6:17:30:
ca:5f:94:a5:cf:ce:88:bf:d6:0b:cb:8e:3d:c2:c9:
2d:b1:12:21:db:8f:99:14:2c:1a:99:6e:04:5c:00:
7b:d4:ff:87:a4:fb:b0:99:2c:29:fc:25:64:6b:98:
b3:1e:83:43:52:9a:67:01:58:94:2d:af:44:4c:cb:
7f:92:3f:bd:b3:7e:57:1b:b9:48:a1:b8:0f:ac:c8:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:33:20:60:42:39:C0:8D:89:75:19:6B:3A:92:61:07:86:6E:98
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/gZkzIGBCOcCNiXUZazqSYQeGbpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.78.0/24
91.226.160.0/24
91.226.184.0/24
185.216.182.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:63:20:36:0e:eb:eb:3c:15:92:d0:61:27:d4:af:4e:09:2f:
4e:78:4e:5b:57:5f:54:62:18:9a:ad:44:72:3e:50:df:d1:42:
08:47:00:2c:c5:d3:99:b9:d0:e1:6a:8a:6c:76:d5:b4:a2:58:
99:99:a5:ee:b5:ba:96:d3:fd:e7:71:ea:9a:bd:e3:b0:46:6b:
e4:10:13:35:56:7c:9b:f7:b7:76:46:32:34:69:91:c2:80:b1:
91:30:3d:25:12:44:7e:d7:4f:8c:7c:0c:40:e4:4b:38:6a:5d:
21:b8:78:d8:ba:2e:04:c7:68:64:3d:e8:bd:71:69:09:80:fb:
02:89:df:0f:c2:78:65:55:7b:45:f2:3f:69:9e:f6:88:88:24:
df:0e:69:7b:8d:45:2a:78:87:0d:9b:26:41:8f:2d:25:6d:88:
3e:6b:b2:58:11:45:03:3f:66:16:37:d3:d0:37:7f:ee:40:79:
0c:57:78:c1:9a:9d:79:d3:89:c1:86:07:8a:99:ab:3b:75:75:
45:1c:d5:89:72:17:26:8e:06:4f:f6:4f:a4:ea:5d:ab:fa:5d:
89:b5:58:87:6b:8e:64:38:e9:03:f3:30:cd:c1:0d:fc:d1:31:
50:32:ee:f9:3d:d2:e8:18:97:ac:25:80:5a:a0:04:e0:4a:e3:
72:3b:eb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:00 2025 by rpki-client