Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/GyGXJPM85tfYVoHMXZpIU8Vr_fk.roa
File: GyGXJPM85tfYVoHMXZpIU8Vr_fk.roa (raw, json)
Hash identifier: vt56T/frHO7tXq5vlPEatDJrlVT9D27Rww1ELERe910=
Subject key identifier: 1B:21:97:24:F3:3C:E6:D7:D8:56:81:CC:5D:9A:48:53:C5:6B:FD:F9
Certificate issuer: /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial: 0182ED74FBC988EBE524A1B8CAB62D0D06CD
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/GyGXJPM85tfYVoHMXZpIU8Vr_fk.roa
Signing time: Tue 30 Aug 2022 06:34:02 +0000
ROA not before: Tue 30 Aug 2022 06:34:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 171.22.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:74:fb:c9:88:eb:e5:24:a1:b8:ca:b6:2d:0d:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
Validity
Not Before: Aug 30 06:34:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b219724f33ce6d7d85681cc5d9a4853c56bfdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:8f:35:8a:c4:72:03:b6:74:cc:e2:0d:95:
b9:19:7c:ec:81:64:c9:29:22:36:53:c8:43:a8:13:
4c:e1:e2:28:ec:ec:5c:fe:72:da:8c:3c:fb:d4:17:
b4:ff:f4:bf:a6:d2:62:a5:aa:a9:62:f4:fc:cd:03:
78:23:3a:cf:70:47:00:e4:45:05:03:d5:0e:9d:10:
af:42:80:db:a4:ea:48:07:e7:02:4f:a1:2d:8e:d6:
e9:8d:76:db:2b:89:9e:fe:83:9e:1c:d0:2c:e2:27:
90:8c:c9:dc:94:d9:9d:7e:e9:26:80:07:d3:44:1a:
32:c4:46:38:d9:99:08:0c:72:cd:a9:77:e1:22:8c:
5d:93:45:13:b9:7f:68:0c:35:1e:84:15:4e:1d:11:
f4:3c:88:a9:d1:0c:3b:fa:0e:9e:6e:2c:ef:0c:91:
3f:aa:03:22:35:e1:63:53:23:e7:2d:5b:37:ba:c9:
86:65:f2:ba:52:74:f1:5d:36:df:12:d0:27:91:52:
b0:d3:f1:aa:0b:b1:e3:d5:82:8a:07:08:24:d4:ab:
79:32:74:98:5a:e6:d0:6e:ad:32:d8:1e:7e:af:aa:
b5:93:87:52:c7:ba:8f:3c:fa:d9:ab:80:7d:f3:0c:
21:bb:d6:bb:de:6c:df:cf:1f:38:9c:e8:2e:ad:37:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:21:97:24:F3:3C:E6:D7:D8:56:81:CC:5D:9A:48:53:C5:6B:FD:F9
X509v3 Authority Key Identifier:
keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/GyGXJPM85tfYVoHMXZpIU8Vr_fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:1b:5f:dd:f4:a7:6c:de:63:c5:9d:7e:18:e9:47:5a:31:f8:
36:48:78:07:64:52:c4:1f:0c:c7:0b:f9:23:e6:8d:de:38:b9:
e2:94:b3:50:3a:b0:79:5b:be:f0:04:9f:30:62:44:f9:69:7a:
56:2a:7d:c6:fc:b3:82:64:5d:5c:87:66:97:34:f3:e1:5f:32:
b3:f7:ab:0b:d5:1a:19:32:5e:fa:c5:bb:f8:f5:62:79:ee:5c:
3a:2b:45:d9:da:fe:ac:9f:f2:4f:63:79:e8:0c:ae:08:bc:7f:
70:bd:70:b9:d0:40:22:b8:cb:52:c3:79:46:27:90:e5:7a:fa:
ca:f7:b7:3d:7c:7a:89:30:a9:d3:21:72:1b:6a:0b:8b:2c:ec:
67:e9:40:00:dd:0f:3f:b3:24:ad:6a:43:77:27:85:21:45:51:
b5:20:74:b1:84:7f:a0:77:d9:72:9d:17:97:32:72:9d:58:ab:
22:62:d9:9e:f0:87:ab:d8:36:44:3f:8b:b4:1d:b6:67:db:a6:
f7:03:85:58:df:65:09:9e:f8:56:85:08:4b:74:ab:b0:e6:8b:
74:47:90:f0:78:fe:20:df:80:3a:17:6d:15:e0:15:8d:64:ee:
a8:9f:17:63:71:87:58:26:4f:07:11:12:68:7f:d6:80:ae:01:
a9:95:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org