Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GSQGDfkP9_Yr3ipc_Z4P1v5pLKQ.roa
File: GSQGDfkP9_Yr3ipc_Z4P1v5pLKQ.roa (raw, json)
Hash identifier: o5qr52OlP4GTGPpgedt1ah3fKP9PMFe/JkAXxWxd0IE=
Subject key identifier: 19:24:06:0D:F9:0F:F7:F6:2B:DE:2A:5C:FD:9E:0F:D6:FE:69:2C:A4
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01853D49F4AFECC34C96DE73C4F7CA8B8E5A
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GSQGDfkP9_Yr3ipc_Z4P1v5pLKQ.roa
Signing time: Fri 23 Dec 2022 04:42:14 +0000
ROA not before: Fri 23 Dec 2022 04:42:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.172.172.0/24 maxlen: 24
185.172.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3d:49:f4:af:ec:c3:4c:96:de:73:c4:f7:ca:8b:8e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 23 04:42:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1924060df90ff7f62bde2a5cfd9e0fd6fe692ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:ee:c5:4d:48:81:02:6e:a9:fd:f0:43:89:
67:87:fe:0a:b5:84:7f:8c:a8:bc:85:3b:68:5e:11:
35:52:b4:fb:eb:18:27:3a:66:0c:63:09:2f:f8:da:
1d:81:ef:91:c2:26:f8:f3:e6:3d:59:d4:65:96:a1:
7b:f5:54:7c:e5:15:23:ec:2f:b0:3a:d5:ba:19:b9:
f2:e8:c0:54:e8:b8:83:a4:3c:4a:83:df:ab:ef:e6:
a9:b7:90:a1:3d:04:4d:11:17:40:87:b4:a5:6b:13:
ba:34:6b:a5:8e:05:3a:cf:b3:38:1c:2c:f6:d9:10:
04:d0:63:e7:88:cd:49:ea:88:89:a2:a4:3a:33:e2:
4d:8c:d9:02:14:b9:29:6b:b3:20:8f:2c:8a:65:00:
90:eb:fa:5f:a5:a1:1f:6a:6b:6b:6e:66:60:0c:38:
3c:77:5b:3d:1c:a9:4e:3d:f7:ec:08:6d:4d:cf:b7:
41:d5:9c:bc:3e:8c:c6:3f:7a:ba:fb:c8:d8:3e:26:
1f:87:92:3a:dc:4d:44:23:67:96:a6:da:11:7f:94:
35:bb:c7:fd:ce:93:f5:40:8d:e4:42:62:7b:4e:7f:
b3:8b:9b:37:c1:ef:5c:49:c6:ae:f9:f2:90:e4:cb:
81:db:63:3d:55:2d:a0:e7:d6:35:56:a7:e8:58:7c:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:24:06:0D:F9:0F:F7:F6:2B:DE:2A:5C:FD:9E:0F:D6:FE:69:2C:A4
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GSQGDfkP9_Yr3ipc_Z4P1v5pLKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:5f:56:50:be:0c:f7:2e:d6:64:4e:2a:3b:09:3a:45:6d:fe:
c2:71:7e:1c:00:02:07:2b:61:10:33:79:65:8b:64:fe:fc:49:
48:87:4d:7d:1a:ad:d4:19:47:19:d2:c2:43:78:ee:2e:af:b7:
3a:8e:4e:21:1d:d1:2d:2a:d6:8f:90:6d:e1:4a:91:09:99:8c:
64:d9:d3:f9:e3:bb:b1:64:bb:a2:02:ba:3f:17:b6:ce:db:c6:
16:8b:50:df:06:44:f1:39:a2:ac:90:0a:2f:c8:e7:c0:0b:4a:
16:b0:33:7a:0b:08:a2:c7:ee:3c:62:b5:26:f2:15:22:a4:f9:
72:96:f6:ff:e3:82:77:87:4b:a4:4e:45:59:13:67:3d:32:14:
04:48:7b:4f:33:18:99:ae:df:3d:9d:d6:3e:37:99:cb:6f:e9:
e3:54:ef:19:c7:26:b4:6f:4a:16:da:6e:46:6f:db:39:fc:ed:
6a:79:21:22:8c:1c:c6:20:33:02:02:b8:11:40:14:43:49:96:
74:bb:85:65:9f:8d:b1:83:a5:5c:d2:f7:3a:91:ff:62:61:ff:
82:de:51:91:ba:cb:bd:6e:85:c3:bd:73:ae:66:fa:57:a3:13:
30:a6:c6:30:20:f2:aa:9b:1f:29:ab:b4:73:13:6d:08:43:6e:
86:b2:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:08 2024 by rpki-client on console-ams.rpki-client.org