Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/GuqTmxU3MnLTy2lANpXAWJqR3g4.roa
File: GuqTmxU3MnLTy2lANpXAWJqR3g4.roa (raw, json)
Hash identifier: myiH7+MveXnSpIZlOVOFV8tL+qNMzxh95J7KYunCTKA=
Subject key identifier: 1A:EA:93:9B:15:37:32:72:D3:CB:69:40:36:95:C0:58:9A:91:DE:0E
Certificate issuer: /CN=ba4118a5581913706a1cde2d713737c70628818f
Certificate serial: 018572E8369D2CE0322045A447939EDA46C8
Authority key identifier: BA:41:18:A5:58:19:13:70:6A:1C:DE:2D:71:37:37:C7:06:28:81:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukEYpVgZE3BqHN4tcTc3xwYogY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/GuqTmxU3MnLTy2lANpXAWJqR3g4.roa
Signing time: Mon 02 Jan 2023 14:34:58 +0000
ROA not before: Mon 02 Jan 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48347
IP address blocks: 195.85.231.0/24 maxlen: 24
195.47.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:36:9d:2c:e0:32:20:45:a4:47:93:9e:da:46:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4118a5581913706a1cde2d713737c70628818f
Validity
Not Before: Jan 2 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aea939b15373272d3cb69403695c0589a91de0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:1d:62:9c:34:6d:7b:61:35:c8:90:41:f7:
6b:94:df:47:e3:69:6d:66:1f:ec:dc:99:64:d2:55:
46:f4:c6:9d:51:5c:9d:be:90:a7:af:d8:30:99:10:
57:bf:c9:23:10:c7:1c:15:bc:df:0c:67:0b:03:11:
81:29:60:65:27:2d:74:c0:9c:8b:43:60:88:d6:83:
ef:48:0c:8a:42:9b:df:f2:24:b6:ae:b1:90:dd:91:
28:96:6f:d2:81:b8:92:20:c1:d6:9d:c2:ec:d4:0d:
f5:65:01:7c:64:1b:9a:8f:01:06:ce:68:ed:1f:71:
a7:3e:2e:29:a3:67:68:67:82:df:4b:95:04:da:b1:
68:6c:41:4a:66:90:b7:26:fb:43:d9:74:db:02:a6:
96:1d:86:b3:82:88:20:4c:bc:e5:13:24:53:68:8b:
c9:af:fe:83:7f:f2:e4:d0:6c:e1:4d:05:71:19:15:
06:16:f4:25:ee:ef:a0:2c:d4:29:32:5d:b1:84:ae:
45:b3:b8:e8:ce:01:7e:41:af:a0:45:70:e0:2b:1f:
a9:80:90:4f:aa:c0:8a:5c:6f:05:7b:c0:49:2b:02:
94:6e:cd:d4:a0:aa:15:4e:81:34:50:58:ae:de:d5:
f2:a2:6e:f8:69:c1:95:a5:f5:ec:15:6f:54:21:98:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EA:93:9B:15:37:32:72:D3:CB:69:40:36:95:C0:58:9A:91:DE:0E
X509v3 Authority Key Identifier:
keyid:BA:41:18:A5:58:19:13:70:6A:1C:DE:2D:71:37:37:C7:06:28:81:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukEYpVgZE3BqHN4tcTc3xwYogY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/GuqTmxU3MnLTy2lANpXAWJqR3g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/ukEYpVgZE3BqHN4tcTc3xwYogY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.196.0/24
195.85.231.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4a:36:e9:b0:2d:c6:ec:a3:60:47:23:1d:bf:b0:31:e2:45:
16:a0:0a:06:7e:29:01:06:94:73:1e:5c:7d:36:2f:cc:7a:3f:
ed:2c:dc:53:01:96:06:1f:cc:0c:bf:45:0b:64:d6:3e:0e:c1:
1e:86:64:54:d2:d7:f9:6d:33:5d:83:36:84:5e:fb:15:4f:13:
e8:ac:52:d0:5c:37:cd:03:32:23:a8:08:ec:e2:ca:87:37:7b:
13:8b:c2:be:79:82:99:d6:db:1c:66:10:4e:6a:86:34:2d:8f:
63:e1:ee:db:80:f7:64:61:11:f5:a6:c1:f3:64:87:2e:f3:97:
0e:8c:dd:dd:66:70:01:8e:02:9c:f8:e7:4d:34:f0:93:26:cf:
b0:fe:67:ea:19:11:83:bb:0b:5e:90:e1:72:4e:65:78:19:dc:
ed:79:71:ec:55:af:53:4e:bc:97:fa:df:d3:8d:1b:1a:97:2f:
c0:85:c3:54:bc:19:9c:aa:3d:9a:72:4b:53:3b:72:3e:50:2d:
c5:ae:f7:af:af:ae:4c:19:0d:77:e7:4b:e9:10:9d:6a:37:a3:
7c:7a:f0:fc:ea:b9:b6:a8:97:12:19:7e:60:81:37:ea:f7:04:
68:59:6e:38:e4:8b:bb:59:d7:f0:a3:b5:94:d0:a7:67:82:3a:
3d:4c:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:45 2024 by rpki-client on console-ams.rpki-client.org