Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ggnUuCiiw5KDxP7VC2MuE-m18jg.roa
File: ggnUuCiiw5KDxP7VC2MuE-m18jg.roa (raw, json)
Hash identifier: hCPwze5ka3HW9b6kkZEr86kyUHzmDg3+6W3Ek9YCVgo=
Subject key identifier: 82:09:D4:B8:28:A2:C3:92:83:C4:FE:D5:0B:63:2E:13:E9:B5:F2:38
Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial: 0195EB95109CD44CA22083C76578F5537AF9
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ggnUuCiiw5KDxP7VC2MuE-m18jg.roa
Signing time: Mon 31 Mar 2025 09:42:49 +0000
ROA not before: Mon 31 Mar 2025 09:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42318
IP address blocks: 2.57.244.0/22 maxlen: 22
83.223.0.0/19 maxlen: 19
2a05:5580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:95:10:9c:d4:4c:a2:20:83:c7:65:78:f5:53:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Validity
Not Before: Mar 31 09:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8209d4b828a2c39283c4fed50b632e13e9b5f238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:8d:74:49:75:ad:e8:20:d5:54:20:99:4c:
1d:71:24:2c:fa:4b:e7:13:4d:e4:74:5d:8e:9d:a6:
0c:f4:14:3d:47:e8:ab:e3:59:70:30:95:98:b5:00:
88:3c:4b:1e:04:5f:3f:6d:12:5b:8b:7e:90:8d:9f:
9e:d4:43:29:1b:3c:dd:d3:2c:56:f5:9d:db:0a:00:
2f:ea:cf:cb:34:c2:73:77:d0:25:b0:26:e2:e9:22:
06:1d:31:2d:df:4f:20:3e:99:2a:5c:4c:82:61:07:
3b:6e:d0:60:93:d5:9a:11:b2:3d:de:26:db:1a:b0:
53:84:15:cd:aa:32:f3:87:68:86:8b:f7:ea:61:b5:
14:22:5d:5c:ab:68:cf:69:00:9d:24:c4:9f:a1:e6:
1b:ba:e1:85:53:c6:4f:76:58:2e:22:d3:d3:a3:bb:
cd:89:57:90:17:98:a9:d7:da:a1:f5:5f:ca:6f:78:
b0:58:d3:17:c0:a3:c0:11:83:33:24:56:b5:a1:df:
c0:84:ab:fa:9a:f1:b1:d9:c3:09:3c:4a:a2:67:61:
c4:57:46:0a:38:ea:92:54:b8:e9:39:2d:08:8f:e3:
bf:27:f3:db:ee:d3:61:72:50:b8:17:db:7d:03:58:
f0:98:bb:f7:99:8a:8f:4e:ec:1e:60:34:03:29:08:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:D4:B8:28:A2:C3:92:83:C4:FE:D5:0B:63:2E:13:E9:B5:F2:38
X509v3 Authority Key Identifier:
keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ggnUuCiiw5KDxP7VC2MuE-m18jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.244.0/22
83.223.0.0/19
IPv6:
2a05:5580::/29
Signature Algorithm: sha256WithRSAEncryption
39:8c:68:7c:f5:84:4d:c8:fa:6c:88:82:a9:1b:68:73:e5:1e:
44:43:4b:b2:78:5d:11:56:50:c9:53:dd:dc:f3:7c:e3:7d:c7:
18:cb:47:95:ba:71:00:cf:41:78:38:ae:b5:3b:53:5b:a5:be:
37:91:f3:d7:4b:56:5b:2e:f2:9b:66:04:89:8f:fb:03:9e:2f:
8f:a9:8e:8f:e1:5a:a2:98:52:c1:2d:79:e1:3f:42:9c:4b:03:
52:da:fe:7b:83:36:f5:0c:9f:24:9a:8f:7a:06:86:58:c0:d9:
82:f3:cc:70:19:5d:3e:c2:f9:fb:90:55:ad:c7:3f:4c:6f:b5:
fc:56:82:65:72:1a:ef:86:76:2e:c6:a2:59:5e:f5:86:76:54:
39:28:2f:e3:21:52:10:23:65:e9:6e:65:35:4d:5f:b0:2a:7c:
c6:d9:74:cf:cc:62:eb:6b:ba:e5:a1:a9:3d:8e:73:1b:24:56:
ba:c8:87:cc:9e:86:50:63:04:92:ca:f4:02:e6:29:38:56:39:
59:14:50:6e:b5:98:63:5a:c7:b8:51:23:b7:91:4a:97:cc:1e:
34:bd:59:fd:e0:14:69:57:f1:01:c9:4f:0b:5d:63:96:2f:61:
01:2a:93:c0:28:a1:d6:bc:b4:f2:c2:68:4e:26:d8:c2:46:91:
d5:fa:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net