Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/GsvA6cz4CGv40FCvDDAkVQZ9feA.roa
File: GsvA6cz4CGv40FCvDDAkVQZ9feA.roa (raw, json)
Hash identifier: GX9kepg9UYGdiM5y5iUrIuBsksJn239wIIWDpTvSs5c=
Subject key identifier: 1A:CB:C0:E9:CC:F8:08:6B:F8:D0:50:AF:0C:30:24:55:06:7D:7D:E0
Certificate issuer: /CN=5e7e445904943e99830cb094988720fc977b1fbc
Certificate serial: 01856DAF4B8F3321894C1BE0FE7D7B4CC875
Authority key identifier: 5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/GsvA6cz4CGv40FCvDDAkVQZ9feA.roa
Signing time: Sun 01 Jan 2023 14:14:42 +0000
ROA not before: Sun 01 Jan 2023 14:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205473
IP address blocks: 194.113.196.0/24 maxlen: 24
194.113.197.0/24 maxlen: 24
194.113.198.0/23 maxlen: 23
194.113.198.0/24 maxlen: 24
194.113.196.0/22 maxlen: 22
194.113.199.0/24 maxlen: 24
194.113.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:4b:8f:33:21:89:4c:1b:e0:fe:7d:7b:4c:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7e445904943e99830cb094988720fc977b1fbc
Validity
Not Before: Jan 1 14:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1acbc0e9ccf8086bf8d050af0c302455067d7de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a6:1a:cf:d9:78:90:05:c8:6e:30:93:85:4b:
4a:98:ad:cd:c7:79:20:11:17:dc:6f:69:7b:3f:91:
99:99:87:3d:a3:12:75:6d:d8:84:04:ae:d7:1b:99:
ae:42:fa:2a:94:3c:93:01:e2:39:58:88:bd:eb:43:
b8:ec:25:5c:20:53:bc:f8:dc:ae:cb:f4:eb:a2:64:
cd:0b:64:ea:ad:0e:3f:c5:3a:69:d0:ee:20:0f:5a:
d6:fd:11:80:6a:0e:59:13:bc:bf:39:1d:c9:8f:b6:
98:d8:41:3d:44:55:c9:5c:10:4e:89:93:a2:60:4a:
bd:d7:46:30:56:e2:c7:02:22:10:8d:81:6b:25:15:
ae:b1:d4:a9:4e:46:6d:87:5e:28:16:9b:b3:40:6a:
c1:19:0e:88:1f:b2:ef:8a:22:8e:72:df:3a:ed:4c:
55:0f:db:91:b5:83:1c:b1:76:49:07:c5:6f:67:b6:
e5:c2:8d:cd:79:bb:92:55:e2:d2:f6:f4:07:24:13:
5d:19:95:0e:71:a5:82:1e:f2:05:dc:5c:ef:79:9a:
4f:07:cf:c8:68:3a:67:c3:df:00:91:a8:e6:06:90:
76:60:62:16:c9:37:16:e1:f2:03:3a:a6:b1:a7:e9:
12:f9:96:f1:9b:18:56:02:c2:a5:87:41:12:97:ef:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CB:C0:E9:CC:F8:08:6B:F8:D0:50:AF:0C:30:24:55:06:7D:7D:E0
X509v3 Authority Key Identifier:
keyid:5E:7E:44:59:04:94:3E:99:83:0C:B0:94:98:87:20:FC:97:7B:1F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/GsvA6cz4CGv40FCvDDAkVQZ9feA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c8dcd5-d4f9-4dbe-bf11-56aa0a9a4491/1/Xn5EWQSUPpmDDLCUmIcg_Jd7H7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:1e:6d:e7:f5:25:a6:37:16:65:df:0b:27:b2:f7:ca:0c:36:
29:53:02:8a:31:c0:03:48:c9:f6:63:a7:12:0d:24:04:70:7d:
77:a8:e3:3b:4c:e1:5f:fe:2a:18:08:f5:17:7f:4c:65:da:25:
a9:47:02:30:6a:7e:e6:a6:11:e4:f3:f3:a4:b5:76:e3:8e:18:
36:3a:28:8a:fa:b4:4e:39:1d:7e:64:3e:b0:97:46:e5:df:f3:
cd:ad:05:b1:3f:1f:53:0a:ca:18:be:3f:72:8f:39:28:dd:5e:
35:f4:dd:7d:91:e5:ce:c1:4e:4b:ba:e5:97:7a:09:31:9d:f7:
1d:55:d5:54:58:75:46:02:57:06:68:0d:70:57:50:f8:57:e2:
da:72:0b:ad:10:b1:a7:49:30:d8:a5:07:fe:fd:98:93:f5:4b:
0c:34:00:ec:b7:85:b5:ba:a1:10:e9:0d:a1:c4:c7:3b:c2:c1:
2f:d0:95:f1:db:8e:d2:ec:74:44:13:ac:ef:7f:4e:29:88:c9:
c3:80:3b:eb:91:4a:44:9a:41:b4:19:55:04:16:09:3f:d6:1f:
cc:50:71:a4:a7:87:43:fb:13:e0:bd:43:2a:71:b2:25:5b:e6:
a7:aa:22:76:0d:74:d6:39:bc:45:b8:09:2a:56:d1:1d:07:04:
60:db:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:06 2024 by rpki-client on console-ams.rpki-client.org