Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/gzdyy5qInnSa0M6b956pVUzgC-k.roa
File: gzdyy5qInnSa0M6b956pVUzgC-k.roa (raw, json)
Hash identifier: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=
Subject key identifier: 83:37:72:CB:9A:88:9E:74:9A:D0:CE:9B:F7:9E:A9:55:4C:E0:0B:E9
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 0194228D4330D7B856E09DA0192949A73C9D
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/gzdyy5qInnSa0M6b956pVUzgC-k.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47505
IP address blocks: 91.206.78.0/23 maxlen: 23
193.142.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:43:30:d7:b8:56:e0:9d:a0:19:29:49:a7:3c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=833772cb9a889e749ad0ce9bf79ea9554ce00be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a6:8f:34:32:81:32:99:99:12:75:9e:ec:27:
68:08:91:a8:d6:88:b8:f2:dc:bf:d1:62:4d:3d:80:
19:3c:80:65:25:62:48:41:3b:ea:a6:38:cd:b1:b2:
e8:aa:00:92:45:cd:92:a8:f5:62:dd:ca:4b:50:fc:
bd:1f:14:88:77:05:90:08:41:78:46:86:2a:62:f5:
03:db:9a:a2:39:39:ca:0d:53:5d:c1:0e:15:c4:94:
f7:39:fc:fe:8e:18:fb:c6:19:01:61:df:5d:6c:95:
9c:38:06:d7:ce:6b:53:51:34:83:5f:8f:15:ce:38:
ec:09:5d:d5:5a:b8:a3:63:af:12:65:29:de:d0:ac:
c3:c9:f8:63:73:e1:75:07:07:35:90:28:05:40:41:
d2:76:fe:ec:ba:e0:22:65:a6:bb:9b:dd:17:13:ae:
1d:45:6d:a4:b1:33:49:10:c7:84:55:18:1f:74:ec:
72:28:b7:23:a6:a3:30:95:88:f7:8f:cf:17:02:53:
92:47:09:6b:fd:bd:c7:37:cf:f9:6c:77:01:52:30:
80:5f:39:d0:30:59:b9:9b:72:c0:e5:59:ad:8c:8a:
79:1f:d2:43:97:d5:ed:c1:04:fb:1c:e4:4e:6c:fd:
d7:bd:72:75:43:2e:f0:67:c8:f5:00:45:fa:e7:dc:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:72:CB:9A:88:9E:74:9A:D0:CE:9B:F7:9E:A9:55:4C:E0:0B:E9
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/gzdyy5qInnSa0M6b956pVUzgC-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.78.0/23
193.142.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cf:8b:0a:39:c4:73:aa:32:6d:a1:c0:91:7a:22:8c:66:c4:
0b:83:2a:2d:eb:bc:fd:80:32:31:d9:47:c3:8b:db:dd:b7:28:
10:47:a0:fb:69:9f:a8:05:3a:0c:cc:91:ac:d3:e1:42:68:98:
98:7c:9c:1c:41:7c:58:81:22:79:46:37:e6:5f:b3:08:a3:12:
d7:aa:fb:bb:fc:98:fc:2b:3b:0a:07:15:50:a1:cc:64:57:6b:
8c:31:8f:97:2d:b7:d1:70:f2:56:d2:83:35:41:de:2c:91:6c:
22:18:5b:bf:ec:e4:89:35:cc:1a:ac:b4:c0:53:d2:87:53:53:
31:b4:9d:42:85:c7:4a:8c:29:28:a9:7d:4b:2e:40:c9:43:38:
fe:32:57:70:05:0c:d7:70:68:35:2c:2a:3d:20:35:cd:41:15:
11:b1:69:24:16:0a:4b:93:58:55:cd:7f:94:be:f5:24:ec:c3:
f9:94:03:4c:88:76:7d:8e:8d:69:21:24:51:41:93:3b:fc:52:
7c:34:34:ec:f8:64:98:2f:c8:23:a8:49:8a:ae:7e:9a:20:28:
1f:4f:45:ea:f0:0b:02:ec:d9:35:a2:f6:8d:88:b0:45:01:07:
c1:cb:28:98:53:18:9f:5b:04:42:eb:77:b0:cc:82:26:df:62:
1e:ca:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net