Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/gbK6DHiZq7AYAmJhGhegTd1JJGM.roa
File: gbK6DHiZq7AYAmJhGhegTd1JJGM.roa (raw, json)
Hash identifier: 3ZhInyD7W5kRDFPCm7P1BZAvCR0mhPTykPk/poLoSao=
Subject key identifier: 81:B2:BA:0C:78:99:AB:B0:18:02:62:61:1A:17:A0:4D:DD:49:24:63
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 0194258E2346F7E1C5066FFE42488209B06C
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/gbK6DHiZq7AYAmJhGhegTd1JJGM.roa
Signing time: Thu 02 Jan 2025 05:47:39 +0000
ROA not before: Thu 02 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61418
IP address blocks: 91.216.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:23:46:f7:e1:c5:06:6f:fe:42:48:82:09:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Jan 2 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81b2ba0c7899abb0180262611a17a04ddd492463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:cf:31:bf:64:db:69:73:17:65:f2:b0:f8:
a7:39:11:44:fe:75:77:0e:ec:9b:b7:63:64:24:c8:
71:2b:2e:3c:67:b7:a0:3f:c6:31:91:22:a9:75:3c:
f5:39:45:04:3d:4f:90:7e:c6:48:34:00:fb:7b:6a:
6f:e7:77:fe:ce:cb:43:6d:0f:20:df:99:ec:5d:43:
b0:b8:37:30:8e:88:b1:e4:28:99:0a:31:51:34:51:
9a:2d:9e:20:67:91:47:72:03:d8:57:b6:5b:52:72:
ad:a5:1e:94:23:1c:b7:9e:8d:02:b2:bd:2a:a7:2b:
d2:e7:9b:b2:e1:e9:40:20:95:9a:1e:fb:46:17:6a:
c6:98:38:32:ef:18:76:d6:96:e8:bf:ca:31:fb:27:
ce:71:5b:fb:24:c6:2c:98:49:31:a2:64:d8:3a:27:
eb:fd:4c:85:f0:05:e3:e4:da:f8:75:a6:d4:be:ab:
b3:f7:cc:97:dc:1b:e2:6b:7c:68:74:cf:a7:09:d3:
6f:d9:76:00:95:e9:ef:c2:76:7d:a3:c4:0d:a6:69:
45:a2:9b:ae:30:9b:d2:8d:5b:dc:f1:ef:25:8f:54:
17:ae:42:2f:ff:3e:b5:03:99:82:e9:8a:e9:ad:9e:
ea:e6:b3:e2:0c:f2:6f:a6:0a:ad:cb:d2:6b:3a:a4:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B2:BA:0C:78:99:AB:B0:18:02:62:61:1A:17:A0:4D:DD:49:24:63
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/gbK6DHiZq7AYAmJhGhegTd1JJGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.201.0/24
Signature Algorithm: sha256WithRSAEncryption
29:97:e4:ed:ac:2f:e0:bb:f1:19:24:30:c8:6f:82:38:7e:a1:
27:2f:ba:ab:5a:99:b9:07:20:e6:61:99:24:36:c0:76:7d:0f:
48:2e:ca:ec:fb:39:c6:fa:91:38:5c:5f:cb:9c:20:66:fb:c4:
b8:42:2e:c4:9a:c3:9f:89:ea:af:eb:1a:37:da:5d:e3:96:be:
a5:2b:bc:70:74:e3:9a:0d:81:bb:d9:04:07:a3:16:72:71:4b:
5f:09:15:24:44:f2:cf:0b:a1:d2:94:7a:97:e3:a9:56:9f:dd:
c5:18:9c:fd:dc:91:79:bc:08:a4:79:0f:60:29:2a:71:dc:70:
56:59:28:53:50:df:e2:3f:9c:5f:40:03:d3:f1:c9:0b:17:09:
79:5e:6e:68:8b:04:db:d0:2e:53:04:09:90:3a:8d:93:31:1d:
e9:66:e7:00:3c:76:51:f6:01:b4:88:d6:36:b4:2b:22:c5:35:
e3:d3:c2:56:9c:d6:8b:c4:b2:d3:be:02:ef:46:ae:5f:87:5c:
1b:2f:7b:b9:e6:23:b7:77:4c:bb:d7:2b:be:1b:61:0a:9c:bc:
e9:4a:eb:11:ec:23:83:99:7d:cb:2d:00:25:1d:b0:6e:c1:53:
60:a9:63:af:e4:28:13:31:62:ee:99:cf:e2:94:fa:b7:42:ab:
60:42:2a:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljiNG9+HFBm/+QkiCCbBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjc3YTIzOTY2NGQyNDViZWNmNDIxNGRkZTE1OTIzMDQy
YTE0MmYwHhcNMjUwMTAyMDU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWIyYmEwYzc4OTlhYmIwMTgwMjYyNjExYTE3YTA0ZGRkNDkyNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurHPMb9k22lzF2XysPinORFE/nV3
Duybt2NkJMhxKy48Z7egP8YxkSKpdTz1OUUEPU+QfsZINAD7e2pv53f+zstDbQ8g
35nsXUOwuDcwjoix5CiZCjFRNFGaLZ4gZ5FHcgPYV7ZbUnKtpR6UIxy3no0Csr0q
pyvS55uy4elAIJWaHvtGF2rGmDgy7xh21pbov8ox+yfOcVv7JMYsmEkxomTYOifr
/UyF8AXj5Nr4dabUvquz98yX3Bvia3xodM+nCdNv2XYAlenvwnZ9o8QNpmlFopuu
MJvSjVvc8e8lj1QXrkIv/z61A5mC6YrprZ7q5rPiDPJvpgqty9JrOqTBFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIGyugx4mauwGAJiYRoXoE3dSSRjMB8GA1UdIwQY
MBaAFNMneiOWZNJFvs9CFN3hWSMEKhQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMt
YzM3M2Y0NTNhMjQ1LzEvZ2JLNkRIaVpxN0FZQW1KaEdoZWdUZDFKSkdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMtYzM3M2Y0NTNhMjQ1
LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jJMA0G
CSqGSIb3DQEBCwUAA4IBAQApl+TtrC/gu/EZJDDIb4I4fqEnL7qrWpm5ByDmYZkk
NsB2fQ9ILsrs+znG+pE4XF/LnCBm+8S4Qi7EmsOfieqv6xo32l3jlr6lK7xwdOOa
DYG72QQHoxZycUtfCRUkRPLPC6HSlHqX46lWn93FGJz93JF5vAikeQ9gKSpx3HBW
WShTUN/iP5xfQAPT8ckLFwl5Xm5oiwTb0C5TBAmQOo2TMR3pZucAPHZR9gG0iNY2
tCsixTXj08JWnNaLxLLTvgLvRq5fh1wbL3u55iO3d0y71yu+G2EKnLzpSusR7COD
mX3LLQAlHbBuwVNgqWOv5CgTMWLumc/ilPq3QqtgQiop
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net