Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f79c91-cc4f-43ba-b99c-05785925473f/1/gFGZ62GXGoH2H-YjlVVNWvlARVQ.roa
File: gFGZ62GXGoH2H-YjlVVNWvlARVQ.roa (raw, json)
Hash identifier: HxqRVyGMll3qlByYgxCYkAyUmOFo5t5hrQVRqFvcrKo=
Subject key identifier: 80:51:99:EB:61:97:1A:81:F6:1F:E6:23:95:55:4D:5A:F9:40:45:54
Certificate issuer: /CN=d56ee953df45c402aecde7ca972308ba2c830fa7
Certificate serial: 018CCA2A3158B88C047F950FC503B0ACC27F
Authority key identifier: D5:6E:E9:53:DF:45:C4:02:AE:CD:E7:CA:97:23:08:BA:2C:83:0F:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W7pU99FxAKuzefKlyMIuiyDD6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f79c91-cc4f-43ba-b99c-05785925473f/1/gFGZ62GXGoH2H-YjlVVNWvlARVQ.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 91.228.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:31:58:b8:8c:04:7f:95:0f:c5:03:b0:ac:c2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ee953df45c402aecde7ca972308ba2c830fa7
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=805199eb61971a81f61fe62395554d5af9404554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:06:4b:8a:f6:3c:88:9a:da:26:fe:98:7e:
60:0d:31:f0:e7:c9:13:48:83:38:72:bf:e3:71:f6:
7e:ce:e5:d2:6d:54:3f:ca:53:65:26:91:1a:ab:1c:
f2:70:b0:a3:a9:2e:a9:3d:d0:57:76:86:f6:65:fd:
fb:35:be:99:13:43:4f:50:79:52:a8:1d:a4:79:d5:
fb:60:ec:b0:b5:3e:f9:d6:24:17:63:55:e8:9b:6c:
cc:f2:78:58:c8:05:60:84:c5:26:c6:bd:4f:8d:b4:
86:2b:ed:dd:61:7c:1e:12:04:32:04:5f:e3:23:8f:
7a:3d:51:68:28:c5:b9:85:49:05:4d:d8:a0:51:10:
a2:ac:e9:aa:b3:94:cc:3b:e9:8e:79:1b:e8:39:17:
e2:e6:38:18:34:b4:ce:2d:3d:7d:3e:de:aa:8d:fe:
d6:97:c7:fa:1d:90:3f:67:da:dc:ce:ce:1e:e5:e2:
67:36:cb:25:09:68:a1:7e:b4:59:c4:d5:8b:3b:da:
a5:38:7a:cf:60:2c:8c:c5:a6:ba:ac:7a:9e:20:b2:
6e:5d:e8:74:97:1a:33:b1:94:be:ef:12:f4:71:7b:
ee:8e:4f:c1:21:c4:7e:5e:08:12:45:d0:ce:6a:04:
15:84:36:a7:7f:ab:0b:78:4c:8d:c1:7d:6f:54:bc:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:99:EB:61:97:1A:81:F6:1F:E6:23:95:55:4D:5A:F9:40:45:54
X509v3 Authority Key Identifier:
keyid:D5:6E:E9:53:DF:45:C4:02:AE:CD:E7:CA:97:23:08:BA:2C:83:0F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W7pU99FxAKuzefKlyMIuiyDD6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f79c91-cc4f-43ba-b99c-05785925473f/1/gFGZ62GXGoH2H-YjlVVNWvlARVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f79c91-cc4f-43ba-b99c-05785925473f/1/1W7pU99FxAKuzefKlyMIuiyDD6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:db:bd:95:10:32:a5:ec:6b:a9:5e:b0:55:8d:d0:d7:88:d2:
4f:52:67:cf:0e:71:16:ee:05:88:bd:f6:89:c7:23:f4:15:23:
58:df:9c:8c:b3:df:8e:55:3a:03:3b:23:ce:e9:d3:2d:e6:25:
18:9a:50:64:f4:f1:98:78:30:cd:14:20:30:9c:4a:77:eb:63:
0d:d5:fe:14:31:55:b4:d8:cd:d8:6e:67:19:ed:e3:6b:4a:c2:
6b:ce:87:9f:a1:a8:cd:aa:af:92:ad:72:4b:62:b1:0e:a9:6d:
41:27:3f:5b:9d:93:76:2a:9b:d0:00:e6:98:b7:1a:25:d2:b6:
42:9e:0e:73:71:69:6d:92:30:50:7b:67:3d:7b:13:0b:93:b6:
12:55:50:95:f4:b9:ed:a4:a3:95:95:39:a9:d6:b5:f0:33:62:
7d:e2:f9:99:31:cb:1c:1a:13:25:33:a6:3f:30:fc:a8:04:a2:
5d:15:fa:0a:6d:8f:cb:43:42:b3:39:96:a3:6a:8b:3f:07:60:
52:c3:df:0f:ae:6d:65:99:3e:97:d5:4b:08:12:d4:e3:4b:91:
ac:82:a5:64:30:97:ad:2e:34:ac:e1:c2:af:6b:c8:01:6f:1d:
6c:b1:2f:29:9f:88:f4:ba:5d:06:6a:71:07:9d:00:2e:28:62:
6f:aa:49:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:08 2024 by rpki-client on console-ams.rpki-client.org