Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/gKbl_ApJpltlQyfFare3nEvnPsU.roa
File: gKbl_ApJpltlQyfFare3nEvnPsU.roa (raw, json)
Hash identifier: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=
Subject key identifier: 80:A6:E5:FC:0A:49:A6:5B:65:43:27:C5:6A:B7:B7:9C:4B:E7:3E:C5
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 0194236A22F7C129CA881303B8AD48E25418
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/gKbl_ApJpltlQyfFare3nEvnPsU.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211914
IP address blocks: 94.158.208.0/21 maxlen: 21
94.158.209.0/24 maxlen: 24
94.158.210.0/24 maxlen: 24
94.158.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:22:f7:c1:29:ca:88:13:03:b8:ad:48:e2:54:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80a6e5fc0a49a65b654327c56ab7b79c4be73ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:e9:df:bc:17:7d:9b:ba:69:11:bd:a7:4b:
11:83:9b:13:48:e7:43:30:9c:b2:62:8b:9b:57:21:
8c:4f:47:91:36:c0:ed:bc:ef:a2:53:e0:52:5a:13:
92:77:93:a8:38:61:0b:c5:8d:4b:c9:c9:66:f1:c6:
09:b5:bd:a1:32:10:be:9a:a5:66:ea:0e:21:14:f8:
85:b0:76:e0:55:41:ec:31:ef:ea:90:bc:88:b0:fb:
69:3f:73:e7:59:19:8b:22:f6:8a:c4:9b:78:d9:c0:
4e:1c:98:b4:53:08:ec:20:b6:34:53:37:26:37:8e:
7d:9b:cc:f8:e3:76:a0:83:a2:3e:7d:b9:8f:7f:ef:
09:36:85:04:63:7e:4d:55:35:bd:65:c1:34:fc:f5:
a1:88:9b:3a:e7:3f:53:21:6d:9c:6e:6e:75:ad:f8:
5c:d7:24:48:df:2d:26:0e:0e:84:2d:44:8b:b9:c0:
93:0e:f1:6b:a7:1d:be:c5:36:59:ab:8e:c7:b7:74:
89:b2:8b:f1:dd:24:77:ea:34:fc:ec:fc:c5:99:31:
2b:3c:a4:05:cb:af:e0:64:bf:f3:ec:40:e7:6e:66:
43:72:c6:98:1c:48:57:be:e0:14:d5:0a:59:c4:64:
bc:56:b6:bb:73:63:40:5e:ae:93:30:68:03:93:bb:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A6:E5:FC:0A:49:A6:5B:65:43:27:C5:6A:B7:B7:9C:4B:E7:3E:C5
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/gKbl_ApJpltlQyfFare3nEvnPsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.208.0/21
Signature Algorithm: sha256WithRSAEncryption
92:1c:4d:db:78:fa:c5:e1:bb:15:93:6d:0f:6f:95:76:1c:97:
76:4d:a0:49:6d:92:45:ca:88:1f:b8:83:90:e0:57:1c:26:7a:
a2:43:5a:d5:a6:2a:64:34:0a:64:13:63:d9:f6:2e:9e:8b:7f:
7a:0e:da:79:eb:29:70:9d:d8:2d:ff:b6:88:b0:21:29:74:86:
16:c6:3d:dc:47:49:44:f6:de:b8:95:f9:37:5d:eb:ad:40:9b:
3a:d7:59:b7:98:78:0d:f8:46:ed:fb:35:f7:d0:22:33:eb:64:
12:71:de:65:68:18:cf:0f:61:3a:29:26:a6:0b:d7:1c:d6:0b:
3c:f7:94:c7:a0:a2:41:8e:50:cf:ee:56:50:f8:22:49:fa:fe:
87:52:32:47:5c:4e:34:e5:88:e7:9c:33:93:cb:a2:3e:86:14:
a7:b5:cc:a5:8b:8e:d6:ff:ed:fa:cc:ea:f9:e3:e0:fd:c1:3b:
39:47:b2:b2:85:d2:e5:7c:bf:03:72:dc:4c:46:fd:2a:9f:94:
98:63:62:e0:99:30:b3:63:9e:c6:ac:5c:88:03:f1:53:33:ec:
5a:2c:05:13:ab:36:0d:8a:f6:0a:1f:57:42:d4:81:f8:fe:f7:
43:9e:4a:4e:f8:cd:2f:f5:d1:03:04:6a:d9:42:a9:cb:ed:bf:
29:08:8d:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaiL3wSnKiBMDuK1I4lQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5
NGQxMzQwHhcNMjUwMTAxMTk0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGE2ZTVmYzBhNDlhNjViNjU0MzI3YzU2YWI3Yjc5YzRiZTczZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY7p37wXfZu6aRG9p0sRg5sTSOdD
MJyyYoubVyGMT0eRNsDtvO+iU+BSWhOSd5OoOGELxY1Lyclm8cYJtb2hMhC+mqVm
6g4hFPiFsHbgVUHsMe/qkLyIsPtpP3PnWRmLIvaKxJt42cBOHJi0UwjsILY0Uzcm
N459m8z443agg6I+fbmPf+8JNoUEY35NVTW9ZcE0/PWhiJs65z9TIW2cbm51rfhc
1yRI3y0mDg6ELUSLucCTDvFrpx2+xTZZq47Ht3SJsovx3SR36jT87PzFmTErPKQF
y6/gZL/z7EDnbmZDcsaYHEhXvuAU1QpZxGS8Vra7c2NAXq6TMGgDk7voxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFICm5fwKSaZbZUMnxWq3t5xL5z7FMB8GA1UdIwQY
MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt
ZTNjNTViYjc3MjhlLzEvZ0tibF9BcEpwbHRsUXlmRmFyZTNuRXZuUHNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl
LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXp7QMA0G
CSqGSIb3DQEBCwUAA4IBAQCSHE3bePrF4bsVk20Pb5V2HJd2TaBJbZJFyogfuIOQ
4FccJnqiQ1rVpipkNApkE2PZ9i6ei396Dtp56ylwndgt/7aIsCEpdIYWxj3cR0lE
9t64lfk3XeutQJs611m3mHgN+Ebt+zX30CIz62QScd5laBjPD2E6KSamC9cc1gs8
95THoKJBjlDP7lZQ+CJJ+v6HUjJHXE405YjnnDOTy6I+hhSntcyli47W/+36zOr5
4+D9wTs5R7KyhdLlfL8DctxMRv0qn5SYY2LgmTCzY57GrFyIA/FTM+xaLAUTqzYN
ivYKH1dC1IH4/vdDnkpO+M0v9dEDBGrZQqnL7b8pCI3P
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net