Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa
File: gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa (raw, json)
Hash identifier: Gfi8XtFBl7a2jBdHmK+GtPDHztaG0pAxvqWau8U6T/Y=
Subject key identifier: 81:21:8A:15:ED:69:9F:7F:F9:13:84:3B:61:15:B7:85:5F:45:F9:D8
Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b
Certificate serial: 0195AE29CC7BA753D8F797261CB4866471F5
Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa
Signing time: Wed 19 Mar 2025 11:28:49 +0000
ROA not before: Wed 19 Mar 2025 11:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49092
IP address blocks: 91.212.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:29:cc:7b:a7:53:d8:f7:97:26:1c:b4:86:64:71:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b
Validity
Not Before: Mar 19 11:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81218a15ed699f7ff913843b6115b7855f45f9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:81:53:68:08:08:07:94:87:20:02:bd:c6:
20:de:f7:18:36:bc:ef:d1:bb:44:34:43:0b:0b:a8:
e7:a5:82:38:f7:3c:68:db:a2:f7:8c:35:b0:9a:3e:
09:21:f0:42:63:37:48:6f:eb:38:f8:6a:57:e5:2a:
e0:9a:0b:ab:b7:0f:4a:63:40:eb:f6:65:99:8b:4f:
fd:25:00:d0:46:ad:97:36:f2:b2:64:27:78:d6:35:
60:44:3a:bd:23:50:0a:6b:2e:db:95:f3:a7:10:52:
fb:30:b0:4e:a6:73:ef:c4:3e:e9:0a:56:0e:01:bd:
63:a3:e2:4a:3c:1f:ff:23:0d:ef:2e:cb:ba:22:44:
ce:06:e9:f0:34:91:6b:03:60:65:d1:64:ba:36:a8:
96:a6:1d:69:60:4a:4d:fe:76:f4:e6:62:93:cc:d0:
99:4f:d0:c1:f4:2e:9e:9c:a1:fc:bc:91:fb:35:fe:
e9:d3:e7:eb:6d:92:e4:86:92:07:52:37:11:de:4a:
1a:5b:71:dc:dc:01:8e:da:61:da:4f:52:b3:a6:23:
b6:fc:bc:3e:2e:66:47:cf:69:3a:fa:3b:27:54:77:
bd:0f:da:73:d4:29:8e:e2:60:71:d0:7a:2e:da:9d:
af:83:80:f7:e1:de:26:66:0e:03:83:73:01:e0:f7:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:8A:15:ED:69:9F:7F:F9:13:84:3B:61:15:B7:85:5F:45:F9:D8
X509v3 Authority Key Identifier:
keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ba:44:00:77:25:46:e8:e2:9c:8a:90:d3:0e:b4:06:41:22:
ce:f0:6b:17:60:a9:0d:e4:88:cb:e6:94:e2:08:75:63:cc:bf:
be:8a:e3:50:38:15:65:97:f5:da:15:a3:90:cb:b6:c2:b4:2a:
9c:b0:96:03:3d:1f:6d:73:c8:55:7f:46:bd:a6:b3:8a:c5:a3:
43:bf:ce:0a:f1:68:d1:0e:0f:2b:d6:d4:ce:6a:4d:8f:13:f4:
86:d0:8e:7f:49:90:c1:05:2c:85:94:cc:96:2d:3a:44:40:5e:
71:5d:5a:1a:f3:78:11:7e:9c:c3:1d:0b:19:bf:36:e9:9b:39:
73:96:05:9b:64:5e:d4:a4:8b:21:dd:5f:bb:96:99:bf:5f:fd:
29:c7:7b:b6:72:68:a6:b4:26:1d:5b:43:61:ad:36:c0:c0:67:
93:6a:b5:13:ed:5d:d4:bc:27:76:07:87:19:b1:1d:cb:ef:19:
aa:4b:5c:c8:67:7f:17:f7:62:ca:51:59:70:a0:eb:d8:e2:91:
45:b6:35:77:5d:30:14:d4:8b:89:a3:5a:a3:24:00:19:5b:48:
7f:f4:2e:45:a7:a5:3c:2f:5d:68:42:a6:8c:f5:c0:1f:9f:2d:
b9:2f:2e:70:be:7b:89:74:e3:30:52:ad:57:68:a1:97:de:17:
65:92:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net