Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/GBTxmTU3aXIa7JFP9KW1jltLuC4.roa
File: GBTxmTU3aXIa7JFP9KW1jltLuC4.roa (raw, json)
Hash identifier: JhOVyvn4Jl5eBN/XBiN9xww2ZD3ZuMf1d/Plfd51g6M=
Subject key identifier: 18:14:F1:99:35:37:69:72:1A:EC:91:4F:F4:A5:B5:8E:5B:4B:B8:2E
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 01894E588816E042C9D620F020754FBF9322
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/GBTxmTU3aXIa7JFP9KW1jltLuC4.roa
Signing time: Thu 13 Jul 2023 08:22:51 +0000
ROA not before: Thu 13 Jul 2023 08:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 37.1.227.0/24 maxlen: 24
37.1.231.0/24 maxlen: 24
37.1.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:58:88:16:e0:42:c9:d6:20:f0:20:75:4f:bf:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 13 08:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1814f199353769721aec914ff4a5b58e5b4bb82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:11:69:a2:46:10:d4:00:9c:fe:ac:50:f9:
d2:65:2a:79:c4:f6:bf:b3:b7:de:61:bd:8a:34:98:
40:d7:5d:35:22:51:6f:a6:f3:74:3d:e3:c5:f6:0a:
2c:1a:50:02:44:e0:90:49:6e:08:54:ec:68:f9:fd:
cf:ec:03:50:95:da:52:80:cf:24:d3:37:b6:6a:e2:
4f:b7:fb:da:92:b6:92:50:8b:43:c7:0e:1f:46:26:
97:e9:8d:e2:03:09:fd:74:0e:e7:85:11:31:64:37:
6f:a9:b7:a7:10:69:9e:6b:5a:4d:50:20:3a:b3:f9:
56:05:a1:40:72:b6:ce:f8:39:67:e0:0f:db:10:86:
eb:c1:81:c6:dd:4d:19:6e:fc:26:90:44:c6:f1:19:
30:41:b9:46:d2:b7:b1:3c:0a:69:c9:8a:8a:54:92:
4f:54:4a:cd:3d:b7:d4:7b:08:99:4e:c8:f8:e6:f3:
a3:14:11:e8:4f:c0:a5:db:9c:35:d6:8e:e6:3e:9b:
2c:72:ed:83:c5:91:fd:de:4f:58:af:dc:54:11:13:
69:7d:72:38:15:c8:ef:e0:03:45:3c:63:6c:35:8f:
3f:fc:bc:4e:4d:bd:56:88:2e:1a:61:51:a2:77:e0:
20:f4:ab:29:a1:6a:25:6f:c3:11:64:30:20:93:5b:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:F1:99:35:37:69:72:1A:EC:91:4F:F4:A5:B5:8E:5B:4B:B8:2E
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/GBTxmTU3aXIa7JFP9KW1jltLuC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.226.0/23
37.1.231.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ef:3a:d8:d8:e1:52:4b:91:68:a2:c1:a1:d7:7b:4f:8e:30:
75:0b:f9:3e:b7:1a:26:ac:e3:9d:d6:52:ad:08:3c:9f:5e:1f:
56:bb:b5:4e:5b:71:58:47:85:d2:09:9f:2a:9c:6a:50:63:9d:
99:ef:c6:5d:37:6b:cf:e4:d6:5a:60:33:90:fb:55:74:b7:d3:
3c:f6:74:77:4a:a5:78:e1:5e:f4:9a:d2:ca:65:b4:c9:9a:a9:
f0:85:c8:7b:63:f8:ff:0a:0e:28:d9:ee:1a:6a:d7:ea:5c:59:
15:14:05:9a:8a:e2:1a:66:c6:bf:c6:d6:bb:de:7d:c6:72:e1:
cf:4d:78:12:1c:7e:49:09:fd:b2:67:52:f3:d1:9b:fa:82:b5:
cc:9f:54:ff:1c:a6:53:99:f5:f5:b7:98:57:4c:6a:3e:7e:aa:
a6:71:33:77:34:cc:08:67:33:ff:a0:26:72:bb:53:67:3c:12:
c4:ed:d8:01:fc:fd:25:37:d1:df:d7:60:3e:91:4b:71:e5:be:
a1:52:3e:a5:63:2c:94:72:c8:e7:31:0d:b7:19:ab:c7:b1:7b:
cf:87:ec:a8:85:8c:2e:03:bb:32:ea:be:42:42:c3:0e:c9:a4:
34:c9:bf:a3:45:8f:8d:7d:4f:b3:0c:10:e0:dd:05:ef:97:aa:
00:50:fa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org