Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/GX3fmoM1fYCCj5C0IMSXVO-YxbA.roa
File: GX3fmoM1fYCCj5C0IMSXVO-YxbA.roa (raw, json)
Hash identifier: fLasC4+eVytXyOY+UdMtZgse8naxGxUleI5E1gFo3lA=
Subject key identifier: 19:7D:DF:9A:83:35:7D:80:82:8F:90:B4:20:C4:97:54:EF:98:C5:B0
Certificate issuer: /CN=325aeffe20b6f9a464741be1f33daf1465c36fa1
Certificate serial: 01856EA6B8F17B1557F7FB8C6D4C6009BC15
Authority key identifier: 32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/GX3fmoM1fYCCj5C0IMSXVO-YxbA.roa
Signing time: Sun 01 Jan 2023 18:44:58 +0000
ROA not before: Sun 01 Jan 2023 18:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.104.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:b8:f1:7b:15:57:f7:fb:8c:6d:4c:60:09:bc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325aeffe20b6f9a464741be1f33daf1465c36fa1
Validity
Not Before: Jan 1 18:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=197ddf9a83357d80828f90b420c49754ef98c5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:7f:d4:65:3a:6f:c0:c0:53:79:9b:85:f1:
e6:59:81:09:53:a3:c7:ac:78:95:cc:ec:bf:5f:a6:
5b:a3:33:bf:05:5b:2f:90:e4:b8:5a:86:d6:7b:93:
11:c9:d1:c0:a5:49:b3:14:2d:d8:0f:3c:3f:75:c0:
dd:20:00:08:ef:bd:f6:5d:9e:f2:71:90:b8:b7:b9:
c5:f7:fe:98:d5:51:b3:4f:54:0b:de:1d:5f:82:4c:
91:8e:06:d2:9f:3f:17:18:8e:d7:dd:cd:57:3f:ec:
7e:bc:e1:49:26:46:7b:58:97:49:e5:59:44:ef:95:
bb:22:45:73:37:80:99:52:32:74:b1:a6:68:a1:31:
cb:38:5b:77:c9:87:e2:38:05:57:d9:12:64:5a:a4:
36:f7:8d:a9:75:25:5e:55:da:4d:a4:7f:04:ba:ae:
f8:67:87:3f:8b:be:98:95:da:b3:52:24:b7:b7:e0:
c3:d7:21:1b:0f:f0:21:4d:83:ac:11:9c:46:0a:e2:
72:d3:2c:16:9c:64:73:35:97:72:8a:a4:b8:0e:36:
b2:56:6d:9d:c0:e2:68:2d:0d:0d:2f:5b:3e:2b:9d:
a1:2a:0b:2c:70:32:ba:71:80:3e:b8:ac:a4:f3:17:
af:d2:20:b4:67:ec:59:24:51:15:1e:93:c6:1e:06:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7D:DF:9A:83:35:7D:80:82:8F:90:B4:20:C4:97:54:EF:98:C5:B0
X509v3 Authority Key Identifier:
keyid:32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/GX3fmoM1fYCCj5C0IMSXVO-YxbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:44:8f:05:f3:19:7d:a4:1f:b8:3a:fd:1b:e6:8a:e0:b2:d1:
16:a0:3c:06:c6:02:e5:49:cd:fb:1b:fb:ae:00:f4:5e:ec:52:
90:09:01:05:dd:db:47:5a:b2:aa:6d:dd:5a:e8:fb:12:21:6f:
cb:79:33:1f:e3:85:f8:62:9a:00:d6:6a:0f:70:35:4e:9a:be:
35:cd:c5:24:bc:06:2e:c4:a6:17:dd:4f:0c:55:3a:f8:aa:d7:
1f:0c:5b:a3:e2:c4:f2:01:37:ce:c5:b5:c4:2d:2f:b2:3e:03:
75:42:96:21:52:44:86:45:70:49:eb:13:92:c7:36:67:74:6f:
b4:34:66:be:33:11:37:ff:81:24:52:e3:1b:32:8a:ee:65:13:
6f:68:0f:0e:85:56:87:89:81:69:78:90:f9:13:c0:4b:70:ee:
c6:fb:7f:5e:48:24:b6:47:e9:cf:3f:79:04:26:0c:d3:61:f7:
ed:3e:e1:b6:d7:e9:15:3f:a8:11:9a:10:39:c6:d0:1e:8b:7b:
6e:2e:4e:30:11:b8:a9:5d:b9:ba:f2:b5:c0:69:66:5b:f6:0a:
c2:d1:0c:89:a9:ca:08:f4:cf:e2:bf:e0:b1:89:c7:6a:e1:83:
c7:9f:ae:21:d1:37:33:67:2c:4b:1b:14:30:5f:e4:ed:f8:71:
27:ee:58:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:33 2024 by rpki-client on console-fra.rpki-client.org