Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/GNQWclsm31IebHUyEvVsCxvT1eo.roa
File: GNQWclsm31IebHUyEvVsCxvT1eo.roa (raw, json)
Hash identifier: 6JbTvkp2gXUIz4yusiy2dMa5FrjhWTYexLnskyj8Ytc=
Subject key identifier: 18:D4:16:72:5B:26:DF:52:1E:6C:75:32:12:F5:6C:0B:1B:D3:D5:EA
Certificate issuer: /CN=8d00a003cd5e8948e1b12d267d0ea567a2211677
Certificate serial: 01856FF01E56E5DC5799FABECE24110A048D
Authority key identifier: 8D:00:A0:03:CD:5E:89:48:E1:B1:2D:26:7D:0E:A5:67:A2:21:16:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/GNQWclsm31IebHUyEvVsCxvT1eo.roa
Signing time: Mon 02 Jan 2023 00:44:45 +0000
ROA not before: Mon 02 Jan 2023 00:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 130.255.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:1e:56:e5:dc:57:99:fa:be:ce:24:11:0a:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d00a003cd5e8948e1b12d267d0ea567a2211677
Validity
Not Before: Jan 2 00:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18d416725b26df521e6c753212f56c0b1bd3d5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:e0:a1:84:33:b5:01:1e:28:e4:d4:9d:fa:
f7:63:11:83:85:db:17:98:06:54:66:3d:b6:1d:77:
86:0b:0e:8b:ff:65:8a:e9:08:84:bd:19:85:95:cf:
3e:4f:16:1a:c8:64:52:96:a8:4d:fd:75:33:b7:8f:
b4:18:de:58:ab:c1:bd:9a:e7:1b:7e:66:06:b0:b3:
c5:82:68:2c:ee:92:51:ef:b7:b2:7f:53:fc:b1:93:
08:bd:97:bf:85:a9:41:f6:05:7b:d4:cb:07:c8:e3:
2b:d1:9a:8d:aa:3b:6e:ee:69:ac:d9:b1:2e:1c:4a:
15:93:42:c3:27:52:3e:e2:09:30:61:e1:a3:4b:e4:
4a:30:78:ba:47:7c:a2:25:33:73:25:af:51:0d:b7:
62:38:e6:cd:0c:63:f9:66:d9:ea:dc:0c:0d:bd:1f:
99:79:44:e2:70:b2:f0:01:b0:d1:02:ea:64:c2:b5:
71:7b:75:4b:82:29:38:a6:c0:39:69:ab:3e:1f:e3:
38:51:4e:57:4f:21:16:77:ae:94:7c:6d:7e:91:07:
36:a6:1c:fc:8a:41:bd:bc:23:24:97:f8:6b:2f:a9:
60:ef:37:d4:d0:85:f7:2b:38:b6:60:3d:a5:d3:4a:
c0:fd:62:28:a5:3e:eb:31:08:cf:b4:25:44:fe:5d:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D4:16:72:5B:26:DF:52:1E:6C:75:32:12:F5:6C:0B:1B:D3:D5:EA
X509v3 Authority Key Identifier:
keyid:8D:00:A0:03:CD:5E:89:48:E1:B1:2D:26:7D:0E:A5:67:A2:21:16:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/GNQWclsm31IebHUyEvVsCxvT1eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ba:36:10:c2:2a:c5:04:87:28:d0:89:1b:f1:f9:a8:55:c7:
23:ae:03:c4:43:34:2c:cb:96:6f:48:e0:f6:3a:72:62:bd:2e:
35:37:7c:1a:76:06:71:e3:6b:38:00:53:2c:f6:9b:da:8c:0d:
58:4c:70:78:e9:16:8a:a8:f1:32:d5:ee:fb:b1:61:e7:db:49:
5c:ad:a4:e6:ea:51:74:a3:b0:49:e4:e8:a9:87:ec:e1:df:c8:
2b:89:1f:2f:97:ac:5a:68:38:29:15:09:13:46:61:fa:a9:09:
a1:10:95:92:43:aa:09:53:ab:be:63:8f:f0:dd:aa:b9:8b:5c:
ba:58:e6:b5:1f:cc:2c:50:e2:bb:61:13:e1:0d:46:32:cf:4c:
3e:61:9d:5d:01:bc:d9:86:88:9d:b6:ff:02:61:05:7f:5d:ba:
18:c0:81:fd:5a:02:49:9b:ed:28:db:a7:c1:ac:13:f1:b5:d1:
19:fe:99:5d:d7:3a:14:bc:c4:28:a2:f9:64:65:34:2f:74:36:
1f:05:c9:52:33:c2:41:60:45:58:e3:fe:6a:9a:24:b1:03:d1:
94:66:ac:82:e0:f6:0e:9c:e8:75:af:cd:08:2d:8c:d2:b7:5f:
66:8b:01:0d:2b:41:b0:a9:10:aa:ab:b6:30:84:80:1f:53:4c:
f3:db:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:24 2024 by rpki-client on console-ams.rpki-client.org