Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/GM--dj_JWY22EdyKpzsGP_rM96g.roa
File: GM--dj_JWY22EdyKpzsGP_rM96g.roa (raw, json)
Hash identifier: ypWLcDXsYrBF1V4BbB4kFlkWEMhK02IWzARiRIiUHvQ=
Subject key identifier: 18:CF:BE:76:3F:C9:59:8D:B6:11:DC:8A:A7:3B:06:3F:FA:CC:F7:A8
Certificate issuer: /CN=f288c5c7e8a267dec91664428fd14784bc861ebc
Certificate serial: 018CC26D6B4357480E5EEBD90A734095D090
Authority key identifier: F2:88:C5:C7:E8:A2:67:DE:C9:16:64:42:8F:D1:47:84:BC:86:1E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ojFx-iiZ97JFmRCj9FHhLyGHrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/GM--dj_JWY22EdyKpzsGP_rM96g.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 217.198.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6b:43:57:48:0e:5e:eb:d9:0a:73:40:95:d0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f288c5c7e8a267dec91664428fd14784bc861ebc
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18cfbe763fc9598db611dc8aa73b063ffaccf7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:0e:f7:18:ca:ba:cf:bd:d5:d6:bb:6c:b8:
12:f6:ca:ae:2d:34:4a:ad:23:5f:2c:21:56:64:58:
63:0a:8c:9a:39:0f:f9:ed:6a:22:d1:59:1f:66:92:
37:9e:28:7f:5f:f7:e0:b0:72:cd:7f:15:04:00:20:
e1:da:de:2b:4a:d2:26:fa:d4:5b:31:5b:14:41:a5:
c7:f2:4c:cf:37:56:d2:4e:c0:8b:6c:54:58:54:7d:
4e:58:0a:21:f7:fe:f4:b0:e8:de:80:3f:ae:0a:17:
70:18:85:c4:a3:78:d5:fe:12:30:8a:c5:c0:d2:44:
53:b8:d2:b2:fc:d1:ff:88:1d:1f:0b:67:3b:83:60:
da:4d:1d:f7:ed:af:77:c8:14:8a:74:33:3f:64:ef:
9d:50:73:b0:3e:30:2c:7a:38:43:12:c0:72:aa:9b:
14:59:fa:8f:38:3b:c6:d4:2f:54:2a:17:71:16:f6:
8d:ff:76:94:51:77:87:c8:29:a4:1d:b8:33:ea:4e:
5a:ff:1c:cd:11:10:19:ab:04:0b:ac:97:bd:f3:4c:
62:23:b5:0a:96:ff:5d:24:2f:7b:fc:eb:12:a2:93:
4d:70:01:59:fc:d1:5a:0c:58:ae:b5:0b:97:3b:20:
bf:87:3e:0d:f4:a9:76:02:6b:d2:36:eb:be:64:07:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:BE:76:3F:C9:59:8D:B6:11:DC:8A:A7:3B:06:3F:FA:CC:F7:A8
X509v3 Authority Key Identifier:
keyid:F2:88:C5:C7:E8:A2:67:DE:C9:16:64:42:8F:D1:47:84:BC:86:1E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ojFx-iiZ97JFmRCj9FHhLyGHrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/GM--dj_JWY22EdyKpzsGP_rM96g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/8ojFx-iiZ97JFmRCj9FHhLyGHrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.176.0/24
Signature Algorithm: sha256WithRSAEncryption
40:45:d0:11:6e:1d:bc:05:22:2b:a5:0b:eb:a1:18:14:66:ad:
c9:43:b6:08:de:20:20:15:c8:22:3f:64:b5:3f:7e:da:35:49:
1c:b4:10:ff:53:b8:40:41:80:fe:be:00:44:df:67:e7:64:fb:
ba:c4:06:2e:2e:30:8f:76:dd:7c:0b:29:26:0d:e3:cf:38:8f:
ad:e3:d1:71:04:e8:e8:f6:ed:90:99:db:ff:ad:4e:85:d0:de:
6e:84:e8:a4:5d:7d:e4:34:91:e7:9e:03:b9:94:1c:e8:83:ac:
b0:6c:85:e0:f2:4d:7f:fd:27:8f:68:de:09:be:98:dd:06:f2:
5c:ce:3a:28:b6:2d:a9:c0:69:6a:54:02:fc:eb:d5:f2:44:48:
c3:a2:8f:22:9a:40:4b:f8:3d:f0:33:14:42:c8:08:9d:63:30:
e5:c2:2f:b0:96:ac:93:19:57:3d:b0:32:9b:98:cd:eb:0b:80:
b4:c4:76:c2:6a:2c:89:02:d2:97:6f:4a:5d:48:a5:ab:99:79:
c3:55:f9:ae:04:bb:3b:92:e1:51:92:f7:38:1e:f8:7a:b3:69:
3f:83:d0:4a:78:be:07:0b:8a:4e:de:ff:1b:23:f8:81:8d:24:
29:b8:0d:d3:95:01:0b:6c:67:55:f6:fb:46:20:07:c2:4b:87:
0a:b6:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 15:35:10 2024 by rpki-client on console-fra.rpki-client.org