Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/GymugnGNz9hZBNfCgZiljFXWNI4.roa
File: GymugnGNz9hZBNfCgZiljFXWNI4.roa (raw, json)
Hash identifier: UzztjdFS5VrTYMjssd7r9V+uU0SvLYHrn/O32cjxd5g=
Subject key identifier: 1B:29:AE:82:71:8D:CF:D8:59:04:D7:C2:81:98:A5:8C:55:D6:34:8E
Certificate issuer: /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial: 019426D96F1708F62758DE4AC1EE9C3BE687
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/GymugnGNz9hZBNfCgZiljFXWNI4.roa
Signing time: Thu 02 Jan 2025 11:49:31 +0000
ROA not before: Thu 02 Jan 2025 11:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51380
IP address blocks: 91.218.192.0/23 maxlen: 23
91.218.192.0/24 maxlen: 24
91.218.193.0/24 maxlen: 24
195.20.4.0/23 maxlen: 23
195.20.4.0/24 maxlen: 24
195.20.5.0/24 maxlen: 24
195.20.6.0/24 maxlen: 24
195.20.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6f:17:08:f6:27:58:de:4a:c1:ee:9c:3b:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Validity
Not Before: Jan 2 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b29ae82718dcfd85904d7c28198a58c55d6348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5b:d2:c8:6d:eb:ff:c8:09:53:5f:86:b7:60:
f5:d6:be:c1:23:4c:6b:8d:c8:cd:97:4a:a3:33:23:
a6:af:04:a2:f6:31:c9:11:20:64:24:7a:88:0f:e1:
1c:f6:f2:be:80:ab:4e:05:4b:a5:a0:bd:36:a9:4f:
52:fb:f8:ab:e3:31:b0:f8:8b:ea:63:2d:eb:39:96:
70:40:f1:70:f1:96:6b:39:a3:23:2a:67:20:3b:0a:
6f:a5:9d:2d:ea:cc:57:35:eb:91:5a:4f:9b:cd:d0:
69:e8:41:f0:1f:dc:dd:11:24:88:c5:34:5d:b7:0c:
72:fd:38:63:45:79:8d:f7:67:82:45:fb:71:2d:dc:
ba:e9:d8:18:6e:97:4f:a4:9b:aa:73:99:a1:fc:de:
08:3e:0a:9b:2e:93:8a:fc:a0:d9:a5:03:11:62:86:
09:88:cd:a9:32:6b:34:d8:65:3d:b5:7c:90:2f:b7:
84:fb:c9:06:6d:f8:ff:6b:5c:df:58:1f:75:c8:54:
5d:0b:d1:18:a0:a2:f6:c2:4e:9c:1c:4c:88:f2:f8:
ca:17:58:6b:2c:c0:b4:76:49:87:46:a8:15:66:67:
4a:14:ac:25:f8:b8:72:cb:d9:22:36:b1:25:0c:1d:
33:c1:bb:95:85:5b:60:48:e8:df:1e:a5:c4:fb:42:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:29:AE:82:71:8D:CF:D8:59:04:D7:C2:81:98:A5:8C:55:D6:34:8E
X509v3 Authority Key Identifier:
keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/GymugnGNz9hZBNfCgZiljFXWNI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.192.0/23
195.20.4.0/22
Signature Algorithm: sha256WithRSAEncryption
62:c8:d6:32:d6:7e:c2:e3:fc:1a:be:3e:95:1c:51:bc:8f:19:
13:46:81:b8:fd:cf:5c:b5:20:2b:6e:64:15:0e:a0:f9:0c:fe:
73:1d:4d:c2:47:d9:22:60:59:0a:de:29:e9:e7:64:80:79:d0:
d5:61:a3:b7:20:a1:73:46:29:07:58:21:bb:0c:b5:1d:bd:ab:
14:23:bd:2d:2c:10:77:d0:d6:88:18:24:71:e3:43:0e:2f:90:
a6:e0:d9:b1:38:b7:90:e1:59:27:cc:e2:19:e0:47:76:96:3f:
c3:ad:3b:fe:d6:5c:37:64:d7:9c:29:8b:68:24:ef:cd:93:12:
ec:3e:0a:cc:6e:3c:68:ef:47:e5:d5:b3:02:e7:e6:8f:d4:fb:
da:b4:fa:20:c9:76:dc:91:75:1c:30:bc:9b:68:45:2d:0b:cc:
f3:ed:b6:81:bc:ec:82:9a:20:33:d8:b0:9d:03:79:9a:71:41:
4a:54:45:34:71:0f:e2:02:d4:f1:4b:32:71:84:2e:bf:59:62:
f0:3a:2c:46:62:5f:bd:c3:48:3d:db:1e:82:0f:78:4e:b8:35:
4d:d9:5f:16:80:93:9b:1b:a0:20:24:29:8c:30:b6:62:c0:f3:
5d:47:24:d9:27:fb:10:16:2e:60:4e:ab:27:fc:a2:2b:42:b1:
b4:32:87:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2W8XCPYnWN5Kwe6cO+aHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmQ2YzJiZGY2MWUyM2VhZmUyM2RkZTAxNmRiOGIzZTE1
OTVmNzYwHhcNMjUwMTAyMTE0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjI5YWU4MjcxOGRjZmQ4NTkwNGQ3YzI4MTk4YTU4YzU1ZDYzNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31vSyG3r/8gJU1+Gt2D11r7BI0xr
jcjNl0qjMyOmrwSi9jHJESBkJHqID+Ec9vK+gKtOBUuloL02qU9S+/ir4zGw+Ivq
Yy3rOZZwQPFw8ZZrOaMjKmcgOwpvpZ0t6sxXNeuRWk+bzdBp6EHwH9zdESSIxTRd
twxy/ThjRXmN92eCRftxLdy66dgYbpdPpJuqc5mh/N4IPgqbLpOK/KDZpQMRYoYJ
iM2pMms02GU9tXyQL7eE+8kGbfj/a1zfWB91yFRdC9EYoKL2wk6cHEyI8vjKF1hr
LMC0dkmHRqgVZmdKFKwl+Lhyy9kiNrElDB0zwbuVhVtgSOjfHqXE+0JKswIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBsproJxjc/YWQTXwoGYpYxV1jSOMB8GA1UdIwQY
MBaAFGK9bCvfYeI+r+I93gFtuLPhWV92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzct
YjgyYjBlZDJkMzIzLzEvR3ltdWduR056OWhaQk5mQ2daaWxqRlhXTkk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzctYjgyYjBlZDJkMzIz
LzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW9rAAwQC
wxQEMA0GCSqGSIb3DQEBCwUAA4IBAQBiyNYy1n7C4/wavj6VHFG8jxkTRoG4/c9c
tSArbmQVDqD5DP5zHU3CR9kiYFkK3inp52SAedDVYaO3IKFzRikHWCG7DLUdvasU
I70tLBB30NaIGCRx40MOL5Cm4NmxOLeQ4VknzOIZ4Ed2lj/DrTv+1lw3ZNecKYto
JO/NkxLsPgrMbjxo70fl1bMC5+aP1PvatPogyXbckXUcMLybaEUtC8zz7baBvOyC
miAz2LCdA3macUFKVEU0cQ/iAtTxSzJxhC6/WWLwOixGYl+9w0g92x6CD3hOuDVN
2V8WgJObG6AgJCmMMLZiwPNdRyTZJ/sQFi5gTqsn/KIrQrG0Moc0
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:11 2025 by rpki-client