Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/GDngKunQly0rXAZJTM9K6ouZldE.roa
File: GDngKunQly0rXAZJTM9K6ouZldE.roa (raw, json)
Hash identifier: srWtclzCrCIl56nGBNOU8VqqYjtRTWRgnKIo2g1oYz4=
Subject key identifier: 18:39:E0:2A:E9:D0:97:2D:2B:5C:06:49:4C:CF:4A:EA:8B:99:95:D1
Certificate issuer: /CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Certificate serial: 019428235CD16E2D80BE486AB10073464698
Authority key identifier: 90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/GDngKunQly0rXAZJTM9K6ouZldE.roa
Signing time: Thu 02 Jan 2025 17:49:53 +0000
ROA not before: Thu 02 Jan 2025 17:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210367
IP address blocks: 89.187.198.0/24 maxlen: 24
195.234.49.0/24 maxlen: 24
2a12:840:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5c:d1:6e:2d:80:be:48:6a:b1:00:73:46:46:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Validity
Not Before: Jan 2 17:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1839e02ae9d0972d2b5c06494ccf4aea8b9995d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:87:35:0c:ef:22:f4:f9:5c:ee:7a:2a:71:
87:eb:4f:a4:a6:76:35:12:b2:09:6d:51:4b:9e:8e:
d7:be:12:22:5a:da:4c:7b:38:dc:1f:70:64:09:6b:
a5:48:8a:96:b5:b6:83:f9:14:9b:5d:90:ac:34:31:
d7:38:ec:35:be:04:b2:6e:f0:4e:48:f5:5a:67:08:
dc:e3:e2:94:d3:c4:6e:88:6d:66:73:f1:10:c2:f0:
1b:42:96:9a:8e:95:cb:9c:bc:03:69:f7:47:2d:3e:
54:97:62:4b:90:ab:73:01:59:f1:f0:da:76:75:83:
12:c1:f2:66:57:24:25:e1:15:24:47:c0:ad:64:1d:
b3:78:a2:c1:3c:09:a9:50:82:ee:c1:b9:25:13:65:
4b:58:95:c4:c2:98:df:00:56:61:b4:15:fa:e4:75:
7a:57:b6:0f:b9:d9:f8:23:f6:0e:e3:15:6c:46:c0:
45:1b:82:c8:0c:e3:72:8d:e2:18:fa:57:c2:56:86:
48:03:ff:41:40:07:0c:3b:6f:8e:e0:91:c0:c6:43:
5a:e5:e5:66:a4:ef:8d:3f:ad:c8:88:40:3a:77:31:
d6:76:ef:d4:90:09:c8:f1:cf:b6:f4:da:66:c3:5e:
c5:0b:bd:61:16:9c:72:9c:4e:75:c1:5a:1a:54:a6:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:E0:2A:E9:D0:97:2D:2B:5C:06:49:4C:CF:4A:EA:8B:99:95:D1
X509v3 Authority Key Identifier:
keyid:90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/GDngKunQly0rXAZJTM9K6ouZldE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.198.0/24
195.234.49.0/24
IPv6:
2a12:840:1::/48
Signature Algorithm: sha256WithRSAEncryption
89:d8:a1:aa:7b:90:ea:a0:00:0f:20:b5:8b:65:76:df:13:ac:
e6:f4:bf:1a:91:5e:ef:a8:a9:be:f6:87:aa:96:a6:fb:25:30:
1a:52:18:23:af:1c:b1:64:e1:70:67:81:e8:e6:42:fe:07:8e:
9c:d4:42:96:69:29:ab:3c:95:97:29:56:43:23:2b:5f:99:c1:
31:4d:85:7f:96:e3:f5:45:05:01:02:42:dc:51:f0:fd:e5:a9:
31:f8:ef:71:ed:be:02:06:f8:e0:66:e2:35:74:f2:7c:ff:b8:
45:40:25:f4:4c:b5:28:ef:69:84:60:0d:f2:c4:f4:75:64:32:
5d:7b:23:be:5e:4b:f2:7e:7c:3d:e8:ad:98:3f:72:d7:63:f4:
5f:10:d4:70:ea:82:af:8d:29:a3:c6:30:43:ba:27:25:f9:42:
63:af:52:d1:37:c1:be:8e:0e:c4:9e:dd:81:40:40:c5:b6:a6:
01:a4:8d:24:42:13:f7:2b:5f:5d:fa:46:7c:8c:f3:5b:5c:d6:
87:2b:29:e0:3d:51:71:6e:dd:e9:92:cf:10:cc:fa:85:13:a7:
7b:15:88:3b:e8:39:02:3a:0d:8f:80:47:97:4e:69:8f:3d:db:
36:41:0d:88:44:7a:14:61:21:d6:79:5d:b9:21:44:4b:94:80:
77:d7:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:10 2025 by rpki-client