Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/GCqa7RQXSmmw4wLpuJRxQGBMm3Q.roa
File: GCqa7RQXSmmw4wLpuJRxQGBMm3Q.roa (raw, json)
Hash identifier: QwAN1IPFOUUjnA+jK8HfijwxugTxUw/RrqpZitjk2JA=
Subject key identifier: 18:2A:9A:ED:14:17:4A:69:B0:E3:02:E9:B8:94:71:40:60:4C:9B:74
Certificate issuer: /CN=dd2f415e120caf5ea318c327c3818f5493f7e0e5
Certificate serial: 0185E99A2B98EC44EC4353CC8202068E9876
Authority key identifier: DD:2F:41:5E:12:0C:AF:5E:A3:18:C3:27:C3:81:8F:54:93:F7:E0:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3S9BXhIMr16jGMMnw4GPVJP34OU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/GCqa7RQXSmmw4wLpuJRxQGBMm3Q.roa
Signing time: Wed 25 Jan 2023 15:44:33 +0000
ROA not before: Wed 25 Jan 2023 15:44:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 193.33.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:9a:2b:98:ec:44:ec:43:53:cc:82:02:06:8e:98:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2f415e120caf5ea318c327c3818f5493f7e0e5
Validity
Not Before: Jan 25 15:44:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=182a9aed14174a69b0e302e9b8947140604c9b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:28:58:56:ec:77:16:78:51:ed:40:74:79:
2e:c2:21:8a:67:35:2f:16:d7:ee:4f:2f:3f:a0:78:
8d:37:fd:2e:e5:2a:a5:ea:26:65:c6:10:5f:ee:90:
b4:b2:dc:09:12:b2:0f:43:a7:89:17:37:18:61:83:
68:0f:01:2d:cb:4a:17:ee:1d:8d:54:26:fd:54:f8:
41:a9:15:3a:b4:d4:44:62:71:f2:1d:f2:c5:12:50:
95:5d:8f:27:d9:36:4e:00:1e:92:f4:48:1f:1c:57:
53:b8:99:bd:f9:9f:5e:2b:f2:08:72:cd:df:d7:84:
7b:88:a9:98:cd:66:94:43:c2:57:58:9e:c7:e1:a8:
12:22:50:2f:92:67:74:51:f4:b2:af:20:7f:c8:dd:
3a:02:ce:04:74:d3:d8:ea:b3:37:0f:e0:55:62:25:
21:6f:77:71:17:83:83:84:4a:b6:c8:8b:c0:56:45:
6c:f9:fb:42:c3:09:b2:a9:a3:43:18:d6:d1:1f:5b:
83:7a:e0:d1:95:d8:a1:e2:0e:7e:61:6b:ae:db:90:
6b:17:49:7d:36:f1:39:cc:73:de:ca:26:87:15:89:
0a:45:65:f5:1e:09:99:b1:c7:f2:9b:71:ec:07:47:
c4:74:46:32:2c:21:6b:63:32:ea:71:fe:3b:51:74:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2A:9A:ED:14:17:4A:69:B0:E3:02:E9:B8:94:71:40:60:4C:9B:74
X509v3 Authority Key Identifier:
keyid:DD:2F:41:5E:12:0C:AF:5E:A3:18:C3:27:C3:81:8F:54:93:F7:E0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3S9BXhIMr16jGMMnw4GPVJP34OU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/GCqa7RQXSmmw4wLpuJRxQGBMm3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/3S9BXhIMr16jGMMnw4GPVJP34OU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.52.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:e8:3f:fb:19:0f:22:8b:4c:b6:88:47:ab:12:f5:a6:91:b2:
fc:ae:f7:6a:99:ab:b9:9c:d8:5b:9c:21:e8:ae:c4:3a:27:b6:
cb:f0:5c:33:36:1a:63:50:2c:08:a9:79:27:06:12:db:13:20:
ac:e3:e4:f7:03:5d:71:c2:28:53:f8:54:1f:b2:e8:5a:50:44:
58:77:45:0f:31:2d:20:23:d9:c1:fd:62:a3:cf:c7:f4:c6:22:
1a:48:27:ac:38:de:74:46:6a:2b:c1:42:e1:80:fc:63:b9:69:
d0:d7:fb:cf:3a:8b:6d:00:09:a7:6d:80:a1:4c:db:c2:b7:d7:
05:56:dc:15:92:9a:9d:6a:94:8d:0c:f0:c1:de:dc:25:d0:03:
8a:f9:79:59:95:10:ff:d6:6c:19:82:be:81:13:1a:51:e8:ab:
6e:f0:17:a0:ca:16:2e:b3:4a:65:3a:e2:d6:3e:b4:b2:41:8a:
d7:d7:f0:bb:c6:2b:2b:6b:44:75:79:79:2f:7f:2f:6f:97:0c:
00:93:f3:6d:a5:58:3f:87:0b:85:0d:b5:b9:86:0a:9d:e9:b4:
0a:fd:3d:5d:20:8c:dc:92:46:6c:5f:fe:c2:49:79:f2:6a:da:
82:ce:6a:e1:c2:a0:3a:88:31:26:2a:fb:ee:2a:aa:33:da:f9:
ee:22:b9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:36 2024 by rpki-client on console-fra.rpki-client.org