Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa
File: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (raw, json)
Hash identifier: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=
Subject key identifier: 19:64:62:F3:32:BD:DF:1F:2F:37:B7:EE:0C:77:06:B3:84:31:83:1D
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 0194F4B83D3DA11AA1E91163C5EA3F63F137
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa
Signing time: Tue 11 Feb 2025 11:15:02 +0000
ROA not before: Tue 11 Feb 2025 11:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48866
IP address blocks: 91.223.178.0/24 maxlen: 24
192.231.26.0/24 maxlen: 24
193.218.186.0/24 maxlen: 24
195.191.40.0/24 maxlen: 24
195.191.41.0/24 maxlen: 24
195.211.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:b8:3d:3d:a1:1a:a1:e9:11:63:c5:ea:3f:63:f1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Feb 11 11:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=196462f332bddf1f2f37b7ee0c7706b38431831d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:bd:92:de:93:16:d7:c1:a4:e0:54:d1:9a:
d0:67:3a:f4:d3:25:d6:72:86:41:45:10:23:e0:cb:
95:51:0a:91:14:df:b9:88:a1:fe:c0:8e:0a:55:37:
82:9f:0e:9b:9c:53:dc:fc:70:24:07:20:a1:08:00:
fd:6d:ce:7c:66:95:53:84:f7:25:e1:43:23:f6:ce:
1b:1f:86:56:c8:c8:2f:2b:4d:69:fe:78:30:33:69:
2e:a2:7b:57:38:8c:87:f4:f2:54:32:0e:f7:aa:fe:
ce:85:e2:a9:4d:84:5c:bb:11:7d:c2:92:0d:d4:5b:
62:ee:3e:e9:8a:f3:55:3e:d0:d9:4f:ab:62:a1:19:
d7:84:39:aa:25:0f:ea:f6:63:11:bc:38:a4:e5:f4:
31:34:f2:59:3e:a7:f5:7d:dd:0e:48:74:9f:9a:42:
67:b0:db:a2:72:ce:ef:03:e7:05:95:04:2a:fb:e6:
50:12:b6:18:ef:87:6f:f0:4a:8c:12:02:1c:ed:c1:
25:af:64:2d:6d:15:7a:46:fb:0d:b5:5d:df:09:21:
db:29:fd:63:ad:de:93:97:44:d6:5a:ba:18:ac:b4:
6b:d9:7c:9a:2b:1d:b0:b6:e2:f3:28:bf:20:8e:9a:
c9:27:f0:a4:de:85:9d:16:94:12:cd:2a:4f:17:33:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:62:F3:32:BD:DF:1F:2F:37:B7:EE:0C:77:06:B3:84:31:83:1D
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.178.0/24
192.231.26.0/24
193.218.186.0/24
195.191.40.0/23
195.211.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d7:a9:89:64:4a:c2:da:fa:14:73:9f:31:f9:54:75:23:5a:
b5:3b:cb:2b:e5:d5:c6:3b:d8:d6:cb:66:6b:4e:c7:73:43:3d:
47:76:77:67:95:84:14:5b:ec:03:8f:ed:32:9a:8e:51:f1:43:
95:cf:e4:44:57:b6:08:da:f8:02:a0:11:d4:48:4b:7b:d4:f8:
0b:cf:9d:6a:29:06:6e:5f:7a:f2:50:de:79:bf:f3:3f:ca:97:
4e:99:05:ec:56:9f:f0:94:4a:2f:2a:02:56:ed:39:00:67:c9:
52:74:a7:de:43:83:13:81:95:1a:11:6c:ca:85:de:cf:b2:9a:
ef:33:78:82:1b:82:57:0e:e1:3d:57:dd:fc:ef:2d:4f:71:39:
24:2b:93:11:e3:6c:fb:06:88:c9:be:88:b5:6d:75:30:a5:f0:
57:b9:d9:08:35:a8:ea:18:12:07:3b:20:29:f1:d2:c5:a6:87:
ca:69:74:ac:56:5e:fa:3a:86:56:42:e6:99:40:a6:db:f9:13:
ba:1a:3b:91:9d:61:ec:e1:fe:9c:51:fe:78:da:19:91:67:92:
91:b3:e1:0d:a0:ea:99:f9:cd:23:e7:cd:d9:e1:a2:b8:fa:ba:
48:e3:28:05:ca:7a:e9:2f:b7:8d:7e:d8:53:9f:a0:52:c8:d1:
e3:ee:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:57 2025 by rpki-client on console.sobornost.net