Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/gAJowYToxXMF7RF5vvsMOYJumzQ.roa
File: gAJowYToxXMF7RF5vvsMOYJumzQ.roa (raw, json)
Hash identifier: YtzVb80baHUBbI1OM11pUhHuNDyKujzR+uDb+twlqdI=
Subject key identifier: 80:02:68:C1:84:E8:C5:73:05:ED:11:79:BE:FB:0C:39:82:6E:9B:34
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 019425FBFB0AB60F8EE8F414BE918C00BE34
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/gAJowYToxXMF7RF5vvsMOYJumzQ.roa
Signing time: Thu 02 Jan 2025 07:47:38 +0000
ROA not before: Thu 02 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56368
IP address blocks: 91.198.196.0/24 maxlen: 24
2a0f:8840::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:fb:0a:b6:0f:8e:e8:f4:14:be:91:8c:00:be:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Jan 2 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=800268c184e8c57305ed1179befb0c39826e9b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:2a:52:7d:50:1c:0f:f4:09:a8:77:6c:27:
61:8f:f6:b1:07:82:a7:46:56:dd:37:ba:c1:65:a0:
18:76:12:bb:15:ce:32:12:8a:00:5d:27:fa:1b:81:
71:a2:cc:a2:d1:40:5f:d3:3e:55:dc:70:e2:45:a2:
e9:cd:19:9d:13:ca:ad:f8:a5:92:a9:69:f7:d0:13:
a6:79:45:8a:df:b1:3e:c0:1e:4f:31:ab:71:bf:de:
c8:28:3e:e6:ed:46:df:fa:e4:37:1e:7d:bd:95:6a:
b4:2f:c0:60:55:37:f9:60:04:ca:46:87:9b:80:03:
f6:e7:90:21:f7:83:38:80:95:f6:8d:03:f6:a4:28:
18:f2:05:dc:ae:b3:a4:01:4a:bb:6b:05:ab:85:c1:
60:bf:2f:91:16:91:2f:10:36:22:ad:e8:cc:e3:b7:
fe:f8:85:2e:97:9f:b5:27:91:70:45:8e:7e:cb:0e:
e0:e0:1e:c8:80:35:89:40:b8:1b:71:c8:a3:67:27:
8c:dc:cd:52:46:6d:48:92:6d:46:ef:61:0c:be:f2:
fd:30:be:c8:37:db:9e:d8:8e:3b:6d:78:f3:96:dd:
30:aa:ed:e4:f1:a7:d0:35:1e:3d:f4:87:da:96:2f:
90:32:12:18:bc:5f:58:30:7c:2b:44:4c:2f:0b:8d:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:68:C1:84:E8:C5:73:05:ED:11:79:BE:FB:0C:39:82:6E:9B:34
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/gAJowYToxXMF7RF5vvsMOYJumzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.196.0/24
IPv6:
2a0f:8840::/29
Signature Algorithm: sha256WithRSAEncryption
76:8c:45:e3:ac:d6:b3:ce:9a:ae:7f:df:ff:7d:a8:5c:98:e7:
e7:41:72:6b:a1:a5:59:59:a6:2f:09:62:a4:09:27:41:b2:80:
bd:da:60:97:41:5a:60:60:87:d9:61:66:b3:7b:a0:16:c6:a0:
19:e5:61:2c:d9:e8:cd:fe:8e:39:95:90:f3:3d:5c:dd:da:1f:
16:2f:71:0e:04:58:a0:6d:8c:4c:e1:7b:d4:71:39:a3:4a:e0:
aa:21:6a:43:01:39:b7:3e:bc:cd:5b:c8:bd:ca:f2:65:80:63:
e4:bb:9f:fd:35:09:73:50:1f:87:6d:07:19:52:84:ea:1b:33:
96:60:70:27:15:ed:71:aa:48:29:9d:32:6e:24:39:c8:50:6d:
8c:25:82:af:e3:87:a9:ab:f2:ed:5c:50:8f:b2:6e:f5:a6:c3:
ae:13:84:b8:35:f4:1c:95:6c:d4:65:f8:62:b1:94:b4:72:ad:
eb:10:f3:19:e4:66:e1:07:20:0d:bc:c3:0e:cc:1a:0a:8b:fc:
b3:fa:41:3f:dc:81:17:35:0e:ba:e6:a7:97:f8:b2:b6:0b:4d:
df:d3:90:4a:7e:52:30:ee:c2:f9:0a:ff:bf:0d:88:2e:09:b8:
21:3c:a7:d3:95:3d:0d:c6:e7:56:c9:17:dc:ae:12:dd:a3:3e:
66:86:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:53 2025 by rpki-client