Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/G7dn1__8SBTCLMBaA7MRi0bC1g0.roa
File: G7dn1__8SBTCLMBaA7MRi0bC1g0.roa (raw, json)
Hash identifier: 1G6flUOncuqlvEWjZDmosqkLofDs0RvEiHMPbaOP3aE=
Subject key identifier: 1B:B7:67:D7:FF:FC:48:14:C2:2C:C0:5A:03:B3:11:8B:46:C2:D6:0D
Certificate issuer: /CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
Certificate serial: 018A0E478E35BE3E61E305E5B6CBE08EAD13
Authority key identifier: 4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/G7dn1__8SBTCLMBaA7MRi0bC1g0.roa
Signing time: Sat 19 Aug 2023 14:51:25 +0000
ROA not before: Sat 19 Aug 2023 14:51:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209097
IP address blocks: 185.115.204.0/24 maxlen: 24
2a12:f280::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:47:8e:35:be:3e:61:e3:05:e5:b6:cb:e0:8e:ad:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0dad1bf18215a2fa808691a7bc5f9e702f99e2
Validity
Not Before: Aug 19 14:51:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bb767d7fffc4814c22cc05a03b3118b46c2d60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:8c:a4:b5:42:c9:c4:7c:28:0a:ae:e8:0a:
50:75:18:f6:92:c0:ed:fa:4f:bf:1e:c8:28:41:2d:
8e:03:1e:ba:3d:56:4e:22:7c:df:cf:79:d0:03:28:
82:66:6c:8b:31:da:b3:56:97:e6:2c:59:18:0a:6d:
4a:ee:22:69:76:49:6b:0f:0a:1d:d4:b8:83:1d:bc:
5e:da:d7:0a:4c:20:a6:de:03:3c:5a:44:7b:7c:fe:
64:95:ee:1d:29:88:4e:42:cb:4c:d0:65:ec:e2:21:
fb:91:76:43:b7:8a:1b:99:19:a8:f5:aa:69:e3:ff:
58:c0:0a:83:14:66:e2:f4:c7:f3:e3:80:f1:ab:46:
fb:d8:2e:9b:36:ba:67:1b:4b:6e:52:89:c8:6b:f1:
64:11:86:11:23:80:00:05:73:e1:04:cc:05:55:03:
b4:28:86:44:af:6b:17:43:58:1f:ca:2e:d1:e4:f8:
62:45:c8:1d:07:6b:bb:8f:1e:57:45:b3:fe:a0:e1:
41:f4:3e:32:ab:36:d1:50:ec:68:0d:ec:f6:77:a6:
fb:33:e2:c3:4b:a9:5c:c9:f1:16:db:6d:39:d4:42:
9c:f4:81:13:88:25:1d:ec:c0:b1:c7:14:41:da:07:
e8:05:75:c8:31:d2:49:50:b1:fc:27:ba:18:28:8e:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:67:D7:FF:FC:48:14:C2:2C:C0:5A:03:B3:11:8B:46:C2:D6:0D
X509v3 Authority Key Identifier:
keyid:4C:0D:AD:1B:F1:82:15:A2:FA:80:86:91:A7:BC:5F:9E:70:2F:99:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TA2tG_GCFaL6gIaRp7xfnnAvmeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/G7dn1__8SBTCLMBaA7MRi0bC1g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8f7ae3-8e5e-4f06-9824-c869d7691b32/1/TA2tG_GCFaL6gIaRp7xfnnAvmeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.204.0/24
IPv6:
2a12:f280::/29
Signature Algorithm: sha256WithRSAEncryption
39:61:39:3c:fc:e2:df:73:7f:49:1e:6f:00:7d:ce:49:ce:ee:
ca:d8:c1:b9:45:f5:98:21:94:30:68:86:7a:07:12:54:95:e9:
2d:68:52:3a:b7:00:eb:1f:42:90:45:48:ce:63:e1:17:ce:61:
ef:04:bd:d3:8b:0d:6e:1a:8a:42:27:78:ca:e4:be:39:90:d9:
bb:3d:59:e0:1d:a7:26:89:c0:28:ed:95:01:4d:53:bf:29:06:
64:c8:7b:b1:b7:7d:fc:0f:80:4e:c2:1e:f5:a6:c6:2e:14:23:
eb:96:be:63:45:4b:78:3c:0b:de:65:53:eb:cb:75:19:e4:83:
94:d0:c6:d7:b5:d1:7d:75:73:92:ea:f8:b2:58:21:0c:8d:f7:
5c:43:48:b3:54:63:95:9a:9b:8a:14:c8:08:47:71:b5:c3:3d:
b3:d4:05:21:05:b1:e6:3d:cd:b7:4b:eb:80:f5:29:96:03:fe:
70:48:11:e6:71:c3:85:8d:dd:03:16:ac:0e:3a:9a:5b:61:86:
13:87:f1:61:83:be:ae:d3:c4:02:21:de:b7:45:34:ef:1d:c5:
ef:db:b9:7f:19:db:c7:e5:32:21:ef:1b:58:d7:c2:77:9a:40:
ff:d1:8e:79:c5:c3:ac:21:15:ca:b5:be:f6:42:06:98:27:06:
6c:1f:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:08 2024 by rpki-client on console-fra.rpki-client.org