Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa
File: GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa (raw, json)
Hash identifier: CFopZ6dmtVSvrmIdzz/ovM49rlPrGJS+jY6gLGQSqVo=
Subject key identifier: 18:D4:7B:7E:8E:B3:61:46:74:69:9E:B5:87:DC:7F:04:5F:25:95:50
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 019422203C754DBF77F580517B72EC8CD13F
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21334
IP address blocks: 91.220.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3c:75:4d:bf:77:f5:80:51:7b:72:ec:8c:d1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18d47b7e8eb3614674699eb587dc7f045f259550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4f:79:92:0d:30:9c:2d:1b:be:59:aa:fe:02:
c8:27:56:a4:a4:f1:e6:d6:43:e5:c5:b5:55:c3:02:
cc:63:39:08:b6:1c:51:17:22:51:8d:c4:9d:44:db:
28:30:69:72:73:a6:d6:81:be:28:4d:44:2c:34:97:
17:89:56:8b:ef:42:59:3e:02:21:16:7f:b9:c1:30:
48:cc:76:ac:3c:c1:94:01:5a:66:de:1d:7d:75:ed:
1f:c4:99:0b:20:9b:c6:e9:8b:79:c6:6e:e1:c3:b6:
42:6a:e3:28:96:77:14:0c:be:84:69:37:fd:09:0e:
e0:2d:5a:bb:58:ef:2e:9f:37:c0:75:f8:ec:40:d1:
c0:05:db:ee:25:d1:0f:aa:c8:01:d2:3e:c9:8b:10:
a4:05:12:05:5d:44:be:f0:35:0f:65:51:21:2c:ad:
f4:a8:ca:dd:ef:77:6d:7a:8e:97:01:11:28:da:ef:
72:5f:4f:78:01:fc:ee:4c:ef:2a:0c:f4:1c:c2:a7:
48:33:16:d7:b1:61:76:29:43:28:06:ca:a1:d7:f7:
4b:f0:f4:d2:9a:e2:34:4e:fc:57:bc:66:e1:53:08:
04:53:49:bd:a3:72:ef:12:d6:24:1c:67:da:ec:57:
31:1e:d0:13:ce:6d:72:15:46:a9:78:a9:1d:32:e9:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D4:7B:7E:8E:B3:61:46:74:69:9E:B5:87:DC:7F:04:5F:25:95:50
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3c:d0:f1:ba:aa:6a:04:44:4c:17:bd:f5:68:07:63:d3:f0:
db:8e:a1:f5:5e:1c:5d:e8:e4:29:bd:33:3f:15:01:f5:79:5c:
d9:db:4a:ce:e3:a8:cd:dc:df:78:64:d4:5e:84:41:d0:01:4b:
83:84:24:e5:55:58:2a:74:f4:3c:6e:23:23:fd:85:a9:00:64:
e4:a4:e6:6a:47:d7:2d:13:b6:d0:08:c9:79:86:a2:74:4b:7e:
b8:bc:99:bf:5c:e5:d8:08:58:b4:c9:15:af:7a:fe:38:1e:e1:
c6:97:16:77:c8:01:ae:89:31:bd:fd:3a:01:8d:61:ad:e8:69:
87:e4:7e:08:af:76:26:1c:25:2b:34:22:bd:70:3e:a2:be:0b:
9c:53:b3:76:46:5b:a1:92:6b:4c:27:0b:1f:14:ed:c9:89:5a:
f6:8c:aa:dc:f4:36:4b:6e:7e:f7:e8:e0:8c:d9:b3:c5:ca:b5:
c8:02:40:46:37:3c:3f:81:8c:21:83:16:72:b8:07:02:65:e1:
f6:b0:96:a3:4f:8a:b3:e9:e0:be:c5:86:bb:55:ea:f7:03:49:
2f:ed:03:19:53:66:cc:ce:74:2b:ea:6a:3f:80:e8:88:c1:c0:
3f:4c:08:d4:d8:bc:e9:6e:9b:29:7d:4e:b4:0b:3a:27:4f:6e:
ca:e3:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:31:58 2025 by rpki-client