Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/gbXKmzWQrDa0AprwvuCq_InzMUc.roa
File: gbXKmzWQrDa0AprwvuCq_InzMUc.roa (raw, json)
Hash identifier: jKhx2B5j81pEfb4tKDTo2LXg+UIRTUOj0pmp+HixxCg=
Subject key identifier: 81:B5:CA:9B:35:90:AC:36:B4:02:9A:F0:BE:E0:AA:FC:89:F3:31:47
Certificate issuer: /CN=ba4118a5581913706a1cde2d713737c70628818f
Certificate serial: 2A24B7
Authority key identifier: BA:41:18:A5:58:19:13:70:6A:1C:DE:2D:71:37:37:C7:06:28:81:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukEYpVgZE3BqHN4tcTc3xwYogY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/gbXKmzWQrDa0AprwvuCq_InzMUc.roa
Signing time: Sat 01 Jan 2022 00:52:03 +0000
ROA not before: Sat 01 Jan 2022 00:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48347
IP address blocks: 195.85.231.0/24 maxlen: 24
195.47.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2761911 (0x2a24b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4118a5581913706a1cde2d713737c70628818f
Validity
Not Before: Jan 1 00:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81b5ca9b3590ac36b4029af0bee0aafc89f33147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:8a:ce:25:e1:ee:6e:9e:fd:94:d0:70:97:
ac:93:12:27:73:af:d4:9f:45:f6:2e:2e:13:cb:38:
0e:35:9f:50:64:f3:af:d8:31:a0:be:29:c9:3f:70:
95:ff:81:79:ff:6f:0e:23:d7:66:88:d5:75:74:a1:
b1:b8:75:25:74:d8:f6:b7:f4:7d:de:bc:c6:c0:66:
83:ce:7e:0f:e5:7a:0c:f4:a1:98:c4:53:1d:2c:35:
4f:7a:63:82:da:4a:30:93:9e:b2:e4:c0:03:21:61:
6c:08:01:39:30:58:77:98:92:e0:e4:2d:ff:3e:ae:
47:99:8a:16:4c:7a:c3:bd:29:0c:6b:08:69:e3:91:
d8:ff:c8:47:00:c1:c1:0e:eb:a8:ac:07:b3:23:bf:
99:88:53:89:bb:cc:7a:1f:44:75:d5:5e:81:3c:52:
d9:8b:51:a4:61:f0:a8:3e:c7:6a:ff:d3:49:92:68:
7f:82:fc:9b:ca:34:70:ed:1c:1d:b9:ae:80:94:c3:
fe:5c:fc:13:aa:a5:1c:6b:08:ef:f3:22:59:95:0e:
aa:97:95:14:96:f6:8b:10:17:3f:ae:8a:90:25:86:
0e:cd:c1:ea:88:a3:97:ab:f1:40:f0:3b:95:f6:02:
11:89:02:9f:42:b5:bd:0c:78:61:eb:39:ab:3b:29:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B5:CA:9B:35:90:AC:36:B4:02:9A:F0:BE:E0:AA:FC:89:F3:31:47
X509v3 Authority Key Identifier:
keyid:BA:41:18:A5:58:19:13:70:6A:1C:DE:2D:71:37:37:C7:06:28:81:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukEYpVgZE3BqHN4tcTc3xwYogY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/gbXKmzWQrDa0AprwvuCq_InzMUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/683660-9d9b-455b-8710-b1a14c3d6d0f/1/ukEYpVgZE3BqHN4tcTc3xwYogY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.196.0/24
195.85.231.0/24
Signature Algorithm: sha256WithRSAEncryption
45:40:c4:36:23:a3:57:5a:e3:f6:c9:a1:3b:8d:b1:db:65:39:
4f:ea:f3:72:10:f5:46:26:2e:5f:2a:04:3b:04:7e:d2:62:b8:
a9:79:d1:22:e8:9e:8c:b4:fb:01:ad:0f:07:3e:2b:fa:a7:35:
ca:a0:ef:38:a5:29:ea:7f:fd:2f:33:77:ea:ac:36:a3:d6:1d:
ea:34:97:f8:f3:27:b3:fc:24:5c:79:3d:11:07:a4:11:a0:00:
a3:02:f6:e4:14:4e:0d:4a:73:da:54:f9:cb:c6:0d:8b:ea:db:
80:81:98:5d:78:7d:55:b0:7a:fe:67:fe:23:ad:1f:33:e2:27:
53:f7:34:96:b8:26:d3:e1:fe:df:5d:7a:5e:b9:9b:42:d1:9b:
59:f7:04:80:f5:77:62:e9:bb:2e:36:6e:7a:7b:1c:71:aa:13:
d6:2e:d9:a7:71:14:31:c5:e3:dd:9e:97:9e:c3:46:52:a0:a6:
06:b2:4a:43:37:8c:c3:0b:fe:b8:b5:b6:e5:64:de:70:78:bc:
33:c7:fe:f5:ed:8c:2a:54:da:0a:a7:63:8e:f3:fa:dc:3b:5e:
52:2b:72:ed:61:78:a6:44:cf:b0:1b:a1:41:c7:cb:00:8d:00:
fe:57:07:c6:3b:ac:63:55:18:37:5f:84:e8:76:90:ad:c1:e8:
c5:f7:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:45 2024 by rpki-client on console-ams.rpki-client.org