Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/GJHaatQheZf97nB24x4JgSqBMf0.roa
File: GJHaatQheZf97nB24x4JgSqBMf0.roa (raw, json)
Hash identifier: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=
Subject key identifier: 18:91:DA:6A:D4:21:79:97:FD:EE:70:76:E3:1E:09:81:2A:81:31:FD
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 019425FD05B6D5C035A92CFEF10EDD8FDBC3
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/GJHaatQheZf97nB24x4JgSqBMf0.roa
Signing time: Thu 02 Jan 2025 07:48:46 +0000
ROA not before: Thu 02 Jan 2025 07:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 91.218.176.0/22 maxlen: 24
91.232.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:05:b6:d5:c0:35:a9:2c:fe:f1:0e:dd:8f:db:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 2 07:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1891da6ad4217997fdee7076e31e09812a8131fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:ac:b0:a2:04:c4:d2:9b:32:a6:4c:46:1e:
90:e8:0a:e3:04:52:97:aa:ed:e7:20:55:36:d1:50:
ec:0a:73:0f:b6:e2:db:3a:e7:ea:f6:46:9e:a4:b5:
fe:3d:9d:9d:d2:6d:15:53:7f:42:03:da:75:6a:91:
fd:7e:08:6f:47:b0:cc:3f:a0:86:6c:c2:bf:c7:35:
11:cb:b2:0f:5a:37:a7:0d:93:77:7d:12:b5:03:ce:
49:71:71:d5:4e:e5:e9:17:aa:66:42:cf:01:d7:5d:
f6:e3:4b:e0:37:92:f2:51:cf:12:78:61:25:5a:d9:
10:db:95:e3:3b:7e:d6:8c:29:2d:df:31:0c:25:09:
99:da:cd:7d:67:3a:b6:78:3a:99:36:7a:7b:16:5f:
25:51:d8:50:62:19:d2:f8:6a:31:d1:d1:b9:61:51:
29:ac:37:bb:f8:22:d7:c7:12:5c:85:bc:25:19:e7:
c4:34:17:ce:8a:2a:ac:3b:32:23:eb:fe:a2:e9:f3:
2a:e2:04:80:0d:d4:bf:7e:db:67:d5:5f:c2:9c:b7:
ea:d5:b5:fa:41:a3:41:61:7e:8a:32:88:93:8d:9c:
f3:16:a9:9e:41:b0:1a:77:b2:64:db:05:5c:7c:6a:
e4:ab:69:c9:0b:24:e3:dc:bc:a8:26:46:51:c5:ea:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:91:DA:6A:D4:21:79:97:FD:EE:70:76:E3:1E:09:81:2A:81:31:FD
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/GJHaatQheZf97nB24x4JgSqBMf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.176.0/22
91.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
56:a5:63:25:da:b7:19:9a:81:44:1e:09:01:08:78:20:12:c2:
d0:7e:05:ab:d9:2d:4b:a9:f4:af:7c:a1:b2:78:55:a8:46:a0:
36:69:ec:d0:b9:24:d6:7d:ac:17:35:9e:89:88:e9:cc:aa:20:
d4:ce:3d:e7:8b:39:28:b2:d4:31:f3:b3:cb:91:3b:1e:d5:3b:
e3:db:f7:a9:72:7b:36:6e:15:d2:13:13:f7:22:ca:10:15:35:
d3:93:ce:e4:bc:66:00:08:5b:52:bd:a6:6b:61:92:22:9b:ae:
37:d9:da:90:eb:06:03:3e:ae:8c:be:85:5c:53:97:8f:7e:51:
82:90:65:66:4e:5c:fb:f1:86:96:38:ad:43:ea:6b:79:6f:ae:
f7:76:f1:e3:73:6d:13:fa:c0:d2:84:01:d8:de:01:d9:6d:17:
56:c7:e1:bc:83:24:10:8a:1f:84:35:97:13:2c:7e:a2:ab:4e:
56:f5:59:3e:08:be:8e:1b:ae:e0:b0:19:1b:76:77:6c:c3:d4:
30:65:10:e3:f0:34:ee:c1:ef:d6:0c:28:f4:de:fb:dc:3a:70:
c2:bf:9e:55:71:e1:84:6b:1a:3e:eb:20:1c:b8:ef:c4:4c:55:
a6:bb:eb:af:76:15:ac:3c:5d:c3:d0:bd:14:c6:3c:f9:e9:f2:
77:c1:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:33 2025 by rpki-client