Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/GSwbqwgc5ojE5C84VahpnGdHwNw.roa
File: GSwbqwgc5ojE5C84VahpnGdHwNw.roa (raw, json)
Hash identifier: /gNoTeNrblo1HMf2KyZGkv73TcCmyg5RtE3qX19m+j8=
Subject key identifier: 19:2C:1B:AB:08:1C:E6:88:C4:E4:2F:38:55:A8:69:9C:67:47:C0:DC
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 018284644CF8FFFF9BE9B163EE92FFEE4301
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/GSwbqwgc5ojE5C84VahpnGdHwNw.roa
Signing time: Tue 09 Aug 2022 20:55:41 +0000
ROA not before: Tue 09 Aug 2022 20:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 193.31.126.0/24 maxlen: 24
194.99.24.0/24 maxlen: 24
77.83.24.0/24 maxlen: 24
194.99.26.0/24 maxlen: 24
77.83.27.0/24 maxlen: 24
77.83.26.0/24 maxlen: 24
77.83.25.0/24 maxlen: 24
193.151.191.0/24 maxlen: 24
193.151.190.0/24 maxlen: 24
193.151.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:64:4c:f8:ff:ff:9b:e9:b1:63:ee:92:ff:ee:43:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Aug 9 20:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=192c1bab081ce688c4e42f3855a8699c6747c0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:89:5a:31:36:9c:3b:93:63:9c:d3:22:56:
37:21:45:5a:e9:b5:10:d1:2a:59:c3:57:21:67:b9:
11:fe:aa:9d:2e:3d:0b:75:61:35:38:32:d2:6c:df:
7f:6b:5b:62:ac:6a:66:bb:28:84:c0:ba:5d:74:67:
ba:b3:65:e4:c7:e2:ef:0f:5b:e5:98:03:3b:b7:10:
b1:2b:8b:07:a6:4f:39:47:ab:ea:51:b7:34:7f:c8:
cf:c2:5f:f4:30:45:c6:c7:9e:94:42:89:cd:20:3a:
55:9e:09:77:df:20:17:d7:ee:0d:ef:14:27:bb:89:
41:f1:4b:d8:53:f3:13:e0:5f:4a:22:46:38:b4:bd:
22:4a:e6:46:9e:09:71:05:a2:9f:57:c7:bb:6b:b4:
80:d1:38:bf:79:53:a7:6f:ee:3b:15:60:92:8c:0f:
d5:f7:61:1b:cd:3f:56:33:8d:49:87:8e:f3:e7:fc:
67:bf:b5:57:26:65:3f:38:df:97:25:9c:44:c5:49:
eb:97:bc:12:cd:a5:df:1a:13:16:21:34:06:f2:34:
55:6f:6a:b9:00:ee:ce:2d:83:fa:c6:8d:fe:e2:fa:
9b:c4:69:84:90:f2:1e:96:a0:9f:24:d3:0a:31:8b:
3a:d9:ef:a7:8d:39:83:52:8e:00:78:3d:15:23:69:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2C:1B:AB:08:1C:E6:88:C4:E4:2F:38:55:A8:69:9C:67:47:C0:DC
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/GSwbqwgc5ojE5C84VahpnGdHwNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.24.0/22
193.31.126.0/24
193.151.189.0-193.151.191.255
194.99.24.0/24
194.99.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5d:c4:f4:57:bc:72:f2:10:94:e7:62:8f:b2:0c:28:ac:2f:
17:61:d1:1f:78:e9:22:de:86:5b:24:58:fb:b1:f9:fc:3e:07:
77:f4:72:fe:9b:55:e2:77:8f:69:28:1c:a6:80:3a:3e:84:b3:
8a:42:bc:90:9c:7c:11:09:69:51:8f:bc:36:ea:14:aa:3d:1a:
01:b3:69:9f:dc:f5:9b:3d:33:a4:95:fd:73:8a:06:4c:fa:74:
fc:73:5c:3a:ec:05:60:88:c4:75:8e:10:c2:4a:98:5b:17:fb:
08:ee:f0:59:6c:4c:e1:31:d5:80:89:8d:f5:92:cd:c5:5f:24:
bc:ee:1d:ef:6c:48:b1:d0:c7:f9:54:b1:fa:d7:bc:e3:f8:90:
d1:0b:57:e3:2b:01:7e:80:cc:72:a7:1e:d9:f4:fa:fa:9a:dd:
b9:16:2d:9c:80:d6:22:9f:61:ae:70:03:0d:c9:bd:9a:49:a8:
0e:58:e7:10:f8:7f:88:2b:71:05:7b:6d:b2:74:4a:d6:d2:a7:
53:f4:58:af:b1:64:63:b9:79:b4:6e:5a:2f:7f:71:4e:00:47:
e5:07:81:3f:0d:18:68:ef:da:7b:3b:35:7c:06:b6:55:33:d7:
31:ae:3c:a4:b7:80:37:c2:92:1a:d9:4d:9f:c1:62:da:1a:e8:
70:30:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:00 2024 by rpki-client on console-fra.rpki-client.org