Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/gL18GA1BBtPzL48O4oOOomU0Ytk.roa
File: gL18GA1BBtPzL48O4oOOomU0Ytk.roa (raw, json)
Hash identifier: far0s5jH9yQXntDbvHlGKA1jMyAwlQgWlJuzivgsRXE=
Subject key identifier: 80:BD:7C:18:0D:41:06:D3:F3:2F:8F:0E:E2:83:8E:A2:65:34:62:D9
Certificate issuer: /CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Certificate serial: 01856F8BA35355B1EA48657AEB36B14C9BF1
Authority key identifier: 56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/gL18GA1BBtPzL48O4oOOomU0Ytk.roa
Signing time: Sun 01 Jan 2023 22:55:00 +0000
ROA not before: Sun 01 Jan 2023 22:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 188.214.157.0/24 maxlen: 24
86.105.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:a3:53:55:b1:ea:48:65:7a:eb:36:b1:4c:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Validity
Not Before: Jan 1 22:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80bd7c180d4106d3f32f8f0ee2838ea2653462d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:02:08:b6:0d:57:e9:bc:b8:03:4f:bf:92:
f4:1f:25:ff:e0:55:cc:43:09:47:ce:28:c0:01:34:
83:95:c5:73:81:38:45:2f:fe:3e:61:b4:eb:a0:a4:
5c:e0:92:9d:dd:20:dd:92:fb:9c:4e:83:38:11:6b:
a3:60:c7:67:7c:c8:81:13:ac:36:ca:39:d3:ae:86:
22:36:64:5e:78:a0:2b:73:1e:f6:06:9e:fd:ce:0a:
14:f4:40:e6:35:40:6d:98:10:6f:97:1e:42:a7:2b:
8b:b7:ab:0b:2c:88:65:6f:d0:28:4a:e6:72:17:01:
fe:c2:56:4c:58:52:3d:17:3b:5b:9b:51:66:14:5c:
b1:25:ba:da:17:5c:0b:89:ab:5c:d8:78:c7:ab:14:
a4:38:0e:54:13:61:c9:39:7b:67:13:44:c7:28:16:
73:5a:60:8d:dd:e3:19:6a:75:f8:d3:d1:4c:16:a3:
0a:2b:ea:76:22:fe:99:a2:1c:f8:12:3c:6c:35:3e:
1a:62:34:9f:47:41:b3:33:d0:29:33:d5:71:89:02:
b7:4d:77:87:60:24:75:6c:f2:a6:3a:d3:71:f1:71:
03:62:e3:63:ad:26:e3:48:0c:e4:dc:20:ee:65:a3:
6a:cc:85:4e:a3:f4:e1:6d:76:2c:d0:b5:74:f6:26:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:7C:18:0D:41:06:D3:F3:2F:8F:0E:E2:83:8E:A2:65:34:62:D9
X509v3 Authority Key Identifier:
keyid:56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/gL18GA1BBtPzL48O4oOOomU0Ytk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.182.0/24
188.214.157.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:26:c6:a7:cd:b7:e0:3e:b0:3b:2c:df:ff:0e:ce:d3:61:cb:
fd:51:2e:d8:8b:0e:4d:4b:52:1e:3b:ea:6b:cc:65:a8:be:f8:
fc:d8:b3:b3:d3:ca:17:fd:d8:6c:a7:23:07:14:a3:a3:75:4c:
65:0f:37:32:73:18:12:d9:b5:6c:6f:de:e3:c8:12:2a:b6:d9:
03:67:b4:49:c1:c4:86:9a:73:5b:56:e5:c3:52:41:4b:4a:94:
95:64:48:a6:fd:6d:e3:6c:76:b6:17:45:dd:b4:ca:76:b7:ba:
bf:2b:f1:50:f6:85:bd:15:d4:b6:19:b9:35:3b:82:0d:28:b8:
f7:79:79:5b:94:a0:f6:e6:84:c1:59:16:5d:01:5c:18:e0:bd:
30:11:bb:09:72:30:09:13:f0:5f:bd:e0:1c:f9:6f:34:80:78:
67:b1:be:30:77:f9:14:fb:9f:d0:9a:25:ee:4e:e5:8b:4f:8b:
11:5f:8b:7c:8f:02:64:dd:63:f5:35:3d:91:19:68:9b:a4:45:
16:7a:7c:5d:4e:ee:06:ae:e2:d2:7e:8a:9c:ec:fe:02:98:98:
72:fd:da:06:41:35:c7:e9:6a:5b:be:e7:3c:a7:28:8d:a5:ba:
98:27:2e:71:fc:67:6c:d7:71:0b:0d:04:27:c8:c1:c5:cd:15:
d8:b6:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:12 2024 by rpki-client on console-fra.rpki-client.org