Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/1GYv6543STQlz5gqko_1sgCnTzo.roa
File: 1GYv6543STQlz5gqko_1sgCnTzo.roa (raw, json)
Hash identifier: ra6Cy4bAa+p9k5bbpu2PvPbjGsgzddGKAUcrNi+tQ3o=
Subject key identifier: D4:66:2F:EB:9E:37:49:34:25:CF:98:2A:92:8F:F5:B2:00:A7:4F:3A
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB912B4217C8DC05C9234B0CD05A2A
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/1GYv6543STQlz5gqko_1sgCnTzo.roa
Signing time: Sun 01 Jan 2023 19:25:12 +0000
ROA not before: Sun 01 Jan 2023 19:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 185.244.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:91:2b:42:17:c8:dc:05:c9:23:4b:0c:d0:5a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4662feb9e37493425cf982a928ff5b200a74f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:4a:44:17:66:12:c6:f5:e3:cc:bd:08:3a:
c9:a2:1f:ac:cc:45:88:40:08:2a:2c:6b:42:9a:2b:
12:7e:0d:58:cd:77:ff:55:97:c8:5c:0c:86:96:1d:
e2:b3:be:ff:66:15:80:2e:d0:3a:15:51:88:f6:dc:
cf:d4:6c:9e:e7:01:71:cb:80:5b:1d:f2:a0:57:99:
29:03:6e:ea:a8:0a:08:51:e3:3a:ef:aa:dc:4f:cc:
14:b2:fd:c4:b4:24:8e:ec:4c:41:a8:1b:61:b5:d3:
4a:0e:99:fd:52:5a:f0:00:2a:26:9e:6d:b0:fb:86:
54:73:7e:3d:e2:d4:d0:ec:d4:52:30:4e:16:12:8e:
ec:47:c8:82:22:28:51:23:04:8a:42:4c:a7:c9:76:
7e:2d:38:6e:ba:15:8c:76:29:c0:ff:63:9d:34:0c:
3a:7c:fb:19:0f:9d:9e:37:48:57:19:16:7e:29:fe:
c6:7c:4f:a4:15:ca:2e:cf:fe:8b:28:7f:15:20:23:
00:fb:dd:4c:74:5e:92:17:e4:98:09:a6:93:0d:bd:
59:5e:8f:87:9e:65:dc:da:e5:1a:35:60:2e:ef:8e:
02:a9:9e:64:4e:39:fa:63:82:f4:f8:d8:a2:e8:3f:
24:bf:95:44:36:2e:f7:cb:54:1d:ee:a4:65:46:81:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:2F:EB:9E:37:49:34:25:CF:98:2A:92:8F:F5:B2:00:A7:4F:3A
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/1GYv6543STQlz5gqko_1sgCnTzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ca:09:c6:5d:ee:5b:b0:c1:a5:9e:5d:e7:64:7f:55:68:0c:
f8:f9:38:6e:55:a1:da:ae:49:04:97:ee:bc:41:8b:a1:fd:91:
e7:bc:2a:fc:6f:91:83:58:b6:dc:36:e4:1d:61:4c:5f:e7:cd:
28:9e:9f:35:23:42:94:fd:22:74:03:57:79:0a:b5:1a:0d:10:
92:8c:f0:fb:df:94:a7:ee:96:5f:3a:c9:ed:6d:ca:d2:28:9b:
bf:ab:90:0a:1b:87:eb:78:70:29:32:53:c6:7c:86:8d:f5:3e:
1b:66:33:c3:d1:e1:7d:79:42:37:f6:1d:71:53:d5:7b:1e:6b:
9b:94:99:00:44:92:f6:ea:82:cf:cb:c7:f6:43:10:cb:71:cd:
09:fc:85:03:1c:6b:7c:1e:c3:90:71:56:91:57:f8:51:f7:5e:
bd:48:5e:49:6f:de:95:40:0c:ca:8c:22:e9:95:11:9e:c9:52:
41:2f:1b:12:b3:ac:e4:0b:dd:89:b3:d9:15:cd:d0:25:83:e1:
47:4c:af:b1:c9:34:05:8b:08:a3:94:ac:61:e5:4d:58:03:d1:
fd:26:f8:c1:2d:ef:92:17:5a:ee:79:52:6c:6d:25:a2:98:dd:
bc:1a:97:26:91:27:ee:30:1f:3e:40:d7:12:8e:33:4b:94:34:
82:d9:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:47 2024 by rpki-client on console-ams.rpki-client.org