Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/GjZcMPnnWLAWUbueJpZLum_6yco.roa
File: GjZcMPnnWLAWUbueJpZLum_6yco.roa (raw, json)
Hash identifier: QC/R8yUBWDtL877O+Vkb9/nVKmiVoqoTqbF/881t2Ok=
Subject key identifier: 1A:36:5C:30:F9:E7:58:B0:16:51:BB:9E:26:96:4B:BA:6F:FA:C9:CA
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018968E246715F61350183D22D201206D8DA
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/GjZcMPnnWLAWUbueJpZLum_6yco.roa
Signing time: Tue 18 Jul 2023 12:03:26 +0000
ROA not before: Tue 18 Jul 2023 12:03:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 194.233.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:e2:46:71:5f:61:35:01:83:d2:2d:20:12:06:d8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 18 12:03:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a365c30f9e758b01651bb9e26964bba6ffac9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:e3:f5:89:c9:77:41:d5:f6:db:c5:86:ab:
b9:ef:dc:d8:37:18:7d:e4:c1:b8:76:3b:59:f7:95:
1c:85:53:b6:f1:6e:73:9d:d1:f6:a6:44:19:60:09:
19:b0:14:3c:c5:3b:91:4b:1b:4a:73:ae:d0:9c:54:
14:e0:a4:db:a5:fa:2d:ae:1e:b0:30:b1:53:3e:06:
0b:be:ed:7c:50:94:b6:6c:59:3d:2d:89:98:2d:aa:
f8:4b:90:85:e4:60:99:97:77:3e:78:20:00:fe:e8:
41:27:f5:11:d5:44:3e:3a:39:aa:7e:fc:7e:14:fb:
c9:4c:f5:5b:d6:bd:22:f7:57:03:39:db:5d:88:6e:
e7:16:92:8d:ac:ca:a0:fc:05:dc:40:7b:c2:3f:1b:
a3:f4:dc:7e:fe:f0:da:78:8f:ee:fa:9d:d0:f4:a9:
75:0d:59:9c:fd:68:af:61:25:7a:e5:c2:6d:5d:3d:
d5:82:7b:82:4f:08:c0:00:fc:c6:61:c5:6b:05:cf:
e4:4d:ff:ad:f4:4b:d5:31:f7:9e:16:01:6d:64:e6:
b1:6e:7b:60:c9:eb:d2:94:3b:bc:7d:2f:a3:64:ee:
0f:80:fb:15:fe:76:96:90:4d:e9:e5:1a:14:23:ca:
fb:09:9d:29:4c:aa:62:34:bd:f2:24:1b:55:67:37:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:5C:30:F9:E7:58:B0:16:51:BB:9E:26:96:4B:BA:6F:FA:C9:CA
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/GjZcMPnnWLAWUbueJpZLum_6yco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7f:49:9c:86:7f:d7:b3:54:b7:57:b1:8d:29:bc:64:f7:7b:
a7:95:27:85:1a:63:9b:82:72:30:ce:a2:91:1e:3c:bb:59:70:
5f:24:aa:5d:7b:30:3d:bb:b3:12:b5:a1:93:c4:1a:b0:ca:cf:
4a:3e:33:0d:35:64:b9:f8:ea:b0:bd:f6:8b:9d:c4:aa:7a:21:
c3:c8:26:b8:39:ec:01:3b:5c:63:10:85:9b:83:b1:c2:f1:32:
69:eb:67:c1:26:9e:a5:65:7e:0c:e3:2f:ea:cf:1f:31:dc:cd:
26:01:be:70:70:69:33:2f:15:80:04:31:3a:95:d1:2e:b1:80:
fc:bc:09:ce:79:52:f3:46:4b:8f:f7:5c:25:15:37:b9:19:98:
c2:2d:49:b8:27:3e:f3:4e:e9:47:f3:9f:e2:10:52:c4:82:d8:
f8:3f:45:e3:b1:52:4e:c3:5f:8d:24:a8:46:81:4f:f2:96:5b:
91:84:e4:a4:2e:0a:4c:f2:0c:2c:40:19:f4:53:67:a4:d6:f2:
1b:88:83:d0:30:a5:df:e0:61:60:3a:37:98:f1:3d:fc:ce:2d:
9e:ff:75:47:e7:34:14:4c:bf:3c:24:85:29:5c:70:37:d9:f4:
93:45:e2:bf:60:c3:76:d4:2b:55:31:4f:de:83:2b:bd:e2:6a:
e1:70:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:17 2025 by rpki-client