Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/62a55a-e565-4214-99ae-5bd34c959d05/1/G0-0TvToYaGsukNnJC5WYsBuhqc.roa
File: G0-0TvToYaGsukNnJC5WYsBuhqc.roa (raw, json)
Hash identifier: DPfgqcwzYa92CDWPYM7xAlnMZ2jB56SsvRJY137HbIU=
Subject key identifier: 1B:4F:B4:4E:F4:E8:61:A1:AC:BA:43:67:24:2E:56:62:C0:6E:86:A7
Certificate issuer: /CN=d474ea8fa9311771eb8f07e8e5f5da9a698c034b
Certificate serial: 018570B080ACE7FE5F86679375E6A9C578A5
Authority key identifier: D4:74:EA:8F:A9:31:17:71:EB:8F:07:E8:E5:F5:DA:9A:69:8C:03:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HTqj6kxF3Hrjwfo5fXammmMA0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/62a55a-e565-4214-99ae-5bd34c959d05/1/G0-0TvToYaGsukNnJC5WYsBuhqc.roa
Signing time: Mon 02 Jan 2023 04:14:53 +0000
ROA not before: Mon 02 Jan 2023 04:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 145.1.96.0/21 maxlen: 21
145.1.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:80:ac:e7:fe:5f:86:67:93:75:e6:a9:c5:78:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d474ea8fa9311771eb8f07e8e5f5da9a698c034b
Validity
Not Before: Jan 2 04:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b4fb44ef4e861a1acba4367242e5662c06e86a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:06:7c:76:2a:33:ad:44:d2:db:df:90:59:
62:33:01:f7:a4:67:30:84:0b:2f:9b:92:82:75:4b:
04:93:fe:3e:06:62:e5:4e:48:1f:a1:5b:74:a7:1e:
b4:82:39:1b:3f:30:72:63:75:73:66:f3:a0:6c:9b:
49:70:87:ae:4a:2f:95:b9:2c:5c:d5:4c:eb:c2:76:
b1:a3:eb:be:68:ce:00:ec:2d:57:9c:33:8c:e3:a2:
c0:3c:49:e6:1a:3e:5a:78:f6:53:c5:15:03:49:99:
af:96:f7:9a:13:b3:8a:08:4e:f9:1d:15:55:ef:a2:
ad:28:67:67:ba:a0:59:d0:e0:bd:1c:08:b4:e7:45:
2b:fe:fb:18:56:91:77:9b:63:19:c1:d8:8f:04:dd:
c4:8f:21:08:6f:d3:dc:45:b3:cd:40:e8:7f:b8:37:
ec:f4:80:52:4b:a9:87:e8:84:fe:7f:3a:35:05:ce:
a6:11:7c:07:7c:73:ba:a5:d5:7f:7a:96:56:a8:6d:
d9:4d:a2:ab:dc:b3:40:bb:39:85:30:5d:6b:14:d3:
cd:c6:69:c2:f5:aa:dc:e6:c2:6d:ae:37:ae:49:6e:
9e:8b:55:06:64:e8:52:ec:e2:70:98:47:f0:48:e5:
bd:24:5c:d2:04:c1:49:eb:b7:d0:d6:08:4f:28:38:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4F:B4:4E:F4:E8:61:A1:AC:BA:43:67:24:2E:56:62:C0:6E:86:A7
X509v3 Authority Key Identifier:
keyid:D4:74:EA:8F:A9:31:17:71:EB:8F:07:E8:E5:F5:DA:9A:69:8C:03:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HTqj6kxF3Hrjwfo5fXammmMA0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/62a55a-e565-4214-99ae-5bd34c959d05/1/G0-0TvToYaGsukNnJC5WYsBuhqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/62a55a-e565-4214-99ae-5bd34c959d05/1/1HTqj6kxF3Hrjwfo5fXammmMA0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.1.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6b:9d:9c:9e:19:a9:41:03:b5:d9:38:10:4f:fd:06:e2:ae:de:
7c:9d:7d:e9:d1:a5:da:6c:06:59:82:48:f3:c7:a8:42:3d:28:
97:a1:e9:6d:81:92:3b:d9:bc:6f:2b:48:92:ec:1e:12:d7:b6:
fc:c7:d7:cc:6c:4f:a4:4c:f3:da:67:65:ed:91:1e:bf:65:de:
f5:eb:77:09:b2:9c:26:e4:35:b6:b2:ff:a1:a7:d8:98:23:a4:
19:38:26:f3:08:0d:c2:4b:5d:c5:9f:3e:b8:42:5d:fe:66:bc:
82:15:ab:2b:47:28:15:cc:4b:5f:d3:3d:fb:cf:17:2d:28:65:
22:f1:e7:60:3e:cd:b9:65:02:cc:a3:64:de:cc:46:70:d0:d5:
1e:a5:7d:32:69:90:39:56:7e:86:7d:dd:98:4d:fa:37:94:af:
1d:5e:c9:e7:d4:ba:91:67:58:63:fb:05:7b:3c:e9:9f:7f:66:
61:69:f2:01:26:d1:d3:df:2f:07:0e:ea:8e:f2:97:1b:30:e6:
65:74:52:2d:90:a6:33:bb:ea:03:32:62:89:b5:dc:9c:4e:d0:
87:6f:49:ae:06:fe:ef:f7:2b:5b:90:37:aa:70:0e:68:5e:e4:
8e:5a:34:34:d8:15:f1:12:92:7d:fe:84:3b:ab:6f:6c:1a:c3:
d9:e8:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:11 2023 by rpki-client on console-fra.rpki-client.org