Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/gBOxSaBTb1ETQN6gQ6cmzfNAP0o.roa
File: gBOxSaBTb1ETQN6gQ6cmzfNAP0o.roa (raw, json)
Hash identifier: jGootbCGxd+XQy8LgFQhRQymB93B6Sc1D3fI1rACeqQ=
Subject key identifier: 80:13:B1:49:A0:53:6F:51:13:40:DE:A0:43:A7:26:CD:F3:40:3F:4A
Certificate issuer: /CN=0b862688087112727edd0ddbbeac36783a3b7d2a
Certificate serial: 018359B05019D2AC75CC9D8F2A3D95CA68CB
Authority key identifier: 0B:86:26:88:08:71:12:72:7E:DD:0D:DB:BE:AC:36:78:3A:3B:7D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/gBOxSaBTb1ETQN6gQ6cmzfNAP0o.roa
Signing time: Tue 20 Sep 2022 06:57:50 +0000
ROA not before: Tue 20 Sep 2022 06:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206291
IP address blocks: 185.188.44.0/22 maxlen: 22
2a0b:b780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:59:b0:50:19:d2:ac:75:cc:9d:8f:2a:3d:95:ca:68:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b862688087112727edd0ddbbeac36783a3b7d2a
Validity
Not Before: Sep 20 06:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8013b149a0536f511340dea043a726cdf3403f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:00:6a:71:80:15:6f:be:f0:40:27:59:5c:
51:52:1c:66:76:41:b1:ab:75:38:97:ad:e6:1c:51:
e2:ea:99:05:3b:23:bb:96:8c:c3:0d:54:83:55:fd:
a3:b8:ac:a7:5c:c3:6e:46:fa:32:70:06:e4:bd:1d:
9c:a7:74:05:29:1a:c3:e0:32:20:fa:37:87:b1:81:
ae:c4:0b:b5:0a:26:7e:87:49:a9:5b:7e:b2:a9:7d:
7d:46:89:bb:e0:d1:e0:bc:85:c2:56:e0:3c:68:ab:
c5:de:ae:49:3e:c1:0b:7e:ca:1b:07:8a:0d:2b:eb:
08:fc:91:49:06:6a:b4:5b:fb:16:9e:1a:07:24:b0:
df:cb:ad:69:d4:b9:e1:78:62:d7:23:e2:81:28:44:
7a:0a:36:c3:ef:dd:cd:31:9b:cc:99:72:9c:17:93:
e3:85:a8:16:db:9d:bb:b0:6c:77:85:8a:65:cc:be:
64:bf:5a:cf:98:da:21:91:3b:a2:ca:8b:28:0d:3c:
36:0a:9a:e8:d3:d3:55:b1:2e:b7:5a:30:d9:fc:0f:
7f:b5:06:ba:4b:4c:3f:23:6f:73:e7:dd:7d:be:24:
a1:38:b1:73:eb:ae:1e:ba:56:6e:f3:c9:ee:e6:fe:
a7:2a:56:f5:40:5e:5d:97:d4:0d:03:2b:a4:67:01:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:13:B1:49:A0:53:6F:51:13:40:DE:A0:43:A7:26:CD:F3:40:3F:4A
X509v3 Authority Key Identifier:
keyid:0B:86:26:88:08:71:12:72:7E:DD:0D:DB:BE:AC:36:78:3A:3B:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/gBOxSaBTb1ETQN6gQ6cmzfNAP0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.44.0/22
IPv6:
2a0b:b780::/29
Signature Algorithm: sha256WithRSAEncryption
91:ac:55:8e:ed:19:56:6f:a1:94:d7:03:a0:7a:41:05:fd:6a:
c4:bf:38:5f:59:74:22:83:d5:c4:5b:8b:86:2b:46:d7:2b:73:
39:5f:6d:bc:f9:6f:a5:24:9c:de:37:03:b1:94:97:a7:00:dc:
87:6c:ee:ea:0a:ec:c0:3b:37:2a:74:8f:09:8c:ce:51:1c:e1:
86:27:9e:0c:df:a8:0d:24:9e:e3:88:24:92:01:cc:e0:d6:fe:
56:88:84:ed:6e:66:b1:9c:f2:b1:0c:a1:65:12:6c:2f:04:b9:
01:4d:e7:38:10:5c:fd:c7:9c:9c:30:9c:54:02:13:bf:f3:07:
c4:97:34:19:0a:bb:fd:93:48:74:fd:02:22:a8:e0:ed:ce:29:
28:bb:c5:34:36:6d:07:b8:08:dc:9b:24:01:f8:01:31:f1:fd:
e6:92:a5:09:98:f6:ad:7b:0b:3e:71:09:a7:f9:dd:d7:7b:1e:
f0:da:32:62:94:9b:39:b0:32:a7:c7:81:bd:d8:32:92:85:ee:
eb:36:4a:e2:f1:1f:57:34:03:86:7b:81:22:43:4c:46:aa:ce:
1f:83:8f:f4:7b:f4:d8:33:b2:9a:a0:67:dc:2f:90:f5:50:45:
35:e8:c7:22:36:0e:d2:a7:80:7e:5b:aa:c8:a8:a1:c7:bd:7f:
4d:1b:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:49 2024 by rpki-client on console-ams.rpki-client.org