Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/GyU4xnCaXrgCfPJIsN8DoWJWZBk.roa
File: GyU4xnCaXrgCfPJIsN8DoWJWZBk.roa (raw, json)
Hash identifier: FnwI3BVo+CDHsPPiROyVOv8fAmrKD8X2wWUyzv5sQsc=
Subject key identifier: 1B:25:38:C6:70:9A:5E:B8:02:7C:F2:48:B0:DF:03:A1:62:56:64:19
Certificate issuer: /CN=7d9a0a5b6861e3eece6e56e18ca4ba605de656f1
Certificate serial: 018570B070AE5896E45A15A3AB17221AA55F
Authority key identifier: 7D:9A:0A:5B:68:61:E3:EE:CE:6E:56:E1:8C:A4:BA:60:5D:E6:56:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZoKW2hh4-7OblbhjKS6YF3mVvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/GyU4xnCaXrgCfPJIsN8DoWJWZBk.roa
Signing time: Mon 02 Jan 2023 04:14:49 +0000
ROA not before: Mon 02 Jan 2023 04:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212175
IP address blocks: 185.225.9.0/24 maxlen: 24
2a10:9e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:70:ae:58:96:e4:5a:15:a3:ab:17:22:1a:a5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9a0a5b6861e3eece6e56e18ca4ba605de656f1
Validity
Not Before: Jan 2 04:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b2538c6709a5eb8027cf248b0df03a162566419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:11:36:83:78:9b:40:05:d2:c3:e4:d0:7f:
dd:c0:87:37:a0:6e:df:11:db:a5:8d:0e:3c:0d:09:
6e:6c:1c:11:1a:0b:85:cf:76:a6:c4:d5:16:dc:74:
b9:03:a3:27:3c:c2:dd:94:ae:94:dc:54:fd:1e:a2:
81:a3:8a:47:3c:bd:81:35:8a:ab:97:46:e8:21:8e:
79:62:85:4f:bd:ba:83:66:2b:7a:ea:fc:2c:18:ea:
e3:9d:06:db:f3:b8:e3:7c:61:e5:0f:36:b4:66:b3:
c1:ef:ca:3d:0f:19:6e:eb:99:e0:60:4e:f8:62:ca:
ce:91:db:8b:cf:8d:88:de:d6:8f:f8:7d:ac:9f:fa:
9a:e7:1e:d2:91:a6:ca:01:a9:4e:7b:df:97:52:90:
e1:5a:95:23:41:60:71:0c:7b:f3:aa:ca:1f:fa:8d:
ac:5b:9d:30:ca:3f:1e:99:cd:56:02:23:ef:a9:fa:
12:ac:6e:c5:c5:25:97:9b:d5:d7:f7:cb:16:d2:70:
9e:44:08:31:39:68:09:66:b4:f3:45:29:f5:39:67:
ea:c5:e5:d1:39:0c:a8:e3:3a:d5:77:11:1f:38:f4:
d9:45:3c:81:f5:47:2d:45:05:ef:7c:09:4f:e6:e2:
3f:ff:70:bf:1a:40:7b:a2:6c:93:d0:6e:e1:25:c0:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:38:C6:70:9A:5E:B8:02:7C:F2:48:B0:DF:03:A1:62:56:64:19
X509v3 Authority Key Identifier:
keyid:7D:9A:0A:5B:68:61:E3:EE:CE:6E:56:E1:8C:A4:BA:60:5D:E6:56:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZoKW2hh4-7OblbhjKS6YF3mVvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/GyU4xnCaXrgCfPJIsN8DoWJWZBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/fZoKW2hh4-7OblbhjKS6YF3mVvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.9.0/24
IPv6:
2a10:9e80::/29
Signature Algorithm: sha256WithRSAEncryption
64:ac:0c:3b:de:d5:8a:70:24:97:78:a3:bd:d9:8a:ca:a5:a6:
4f:42:f8:8e:1e:8d:7a:e2:f2:eb:9c:0f:63:98:4d:f8:fc:59:
8d:b2:50:ab:f8:55:6c:28:9f:4a:cf:9f:34:a9:3e:1f:0b:29:
0d:c7:8c:57:73:64:34:7d:4d:4f:fd:e5:94:f6:35:bb:15:c6:
01:b3:82:98:b3:a6:4a:2b:9c:99:75:e4:d5:2e:51:bb:49:8b:
ea:31:56:76:21:99:8b:a5:1f:ff:1f:b7:85:e2:98:c4:a3:48:
e4:75:e0:ed:26:5d:6e:d7:1a:7c:03:56:dd:52:7f:af:d3:0f:
92:70:dd:57:82:4f:52:6f:e1:b9:44:8d:bc:e6:c3:a9:36:6a:
27:4e:92:42:4b:c8:9a:c5:99:34:d5:40:05:eb:fb:4c:ea:d3:
84:8d:e5:d6:11:7a:20:5a:b2:fd:12:7b:a9:ab:29:40:49:40:
76:a5:4f:a8:5c:a1:9d:4f:20:3f:e1:52:a7:df:c3:24:11:05:
cb:9f:84:a1:0a:bb:42:38:df:30:10:ab:22:76:eb:67:2c:1b:
b4:cf:de:37:38:c4:ae:59:65:8a:a3:7e:2e:12:04:f3:61:e7:
0b:c5:92:1f:c1:25:58:99:e5:8d:48:28:48:f7:1b:41:e7:77:
2e:58:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:37 2024 by rpki-client on console-ams.rpki-client.org