Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/GTPNIVNklntkPJw1cdlWitJyUXs.roa
File: GTPNIVNklntkPJw1cdlWitJyUXs.roa (raw, json)
Hash identifier: 6R+VES1DZ9A9J1rXBALAdIbPRDBV/mbBBWNhTlhBMgw=
Subject key identifier: 19:33:CD:21:53:64:96:7B:64:3C:9C:35:71:D9:56:8A:D2:72:51:7B
Certificate issuer: /CN=65a854a9bbff13914d051648c11d667c6438b133
Certificate serial: 01856C011E96FB8007D3869A3449B2AF5603
Authority key identifier: 65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/GTPNIVNklntkPJw1cdlWitJyUXs.roa
Signing time: Sun 01 Jan 2023 06:24:50 +0000
ROA not before: Sun 01 Jan 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35112
IP address blocks: 217.119.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:1e:96:fb:80:07:d3:86:9a:34:49:b2:af:56:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a854a9bbff13914d051648c11d667c6438b133
Validity
Not Before: Jan 1 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1933cd215364967b643c9c3571d9568ad272517b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:b0:5c:06:d8:79:38:9f:79:e2:78:37:97:
04:47:7a:ed:85:cb:80:f9:40:da:9c:b9:21:23:7c:
f2:4b:30:23:77:e4:b3:c3:03:51:d2:c8:0f:2e:c5:
87:13:77:ae:57:6e:b7:11:da:ee:ef:9c:63:86:65:
aa:85:b8:e0:00:ed:c2:7d:44:a9:df:0e:3f:5f:18:
a7:55:ca:46:3e:a1:9f:0d:67:e2:be:70:18:8e:12:
12:22:02:88:ce:6a:da:ea:fe:b2:ae:e9:85:24:20:
33:1a:bf:7d:8a:37:e4:e3:fe:e2:ad:52:05:21:77:
9a:07:81:6c:64:18:50:2a:55:c2:7a:8a:9d:03:f1:
07:eb:04:01:fb:46:bf:37:a8:04:9c:f5:24:cc:23:
a5:90:83:53:6f:cd:05:0d:8e:10:05:51:83:2f:2a:
c2:5c:c3:21:1b:7d:51:53:14:bd:13:18:a4:bd:64:
ee:04:ed:bc:c1:bf:f2:4c:42:b9:3d:fa:6f:c3:31:
6e:2b:9e:7f:29:16:3d:ba:ad:8e:77:bc:6b:0c:f9:
79:e4:45:03:a2:4e:72:08:17:88:a6:e2:49:99:d9:
85:01:8d:f1:4d:c1:1b:00:8a:a0:d4:c8:27:df:87:
68:82:05:11:7d:44:bb:7c:83:69:5a:1a:4c:cb:0e:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:CD:21:53:64:96:7B:64:3C:9C:35:71:D9:56:8A:D2:72:51:7B
X509v3 Authority Key Identifier:
keyid:65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/GTPNIVNklntkPJw1cdlWitJyUXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:47:7e:c6:66:89:65:e5:9a:ee:66:89:cf:28:9f:ae:99:29:
d6:85:59:d7:aa:d6:91:1b:21:6f:37:28:e7:e8:de:b2:98:6c:
c7:42:57:29:49:38:99:ab:88:93:d4:f6:38:4a:d5:4a:07:d4:
4a:7b:fc:17:5a:66:b3:49:11:cb:ac:8c:15:bf:60:4a:c1:d1:
6e:ea:e7:87:f3:4e:3e:6c:be:55:c7:94:8d:b8:26:9d:0e:f4:
29:45:87:e9:7d:1e:ea:50:df:23:4a:f7:67:83:0a:ca:4c:b5:
fa:73:d7:ce:c0:15:fa:d2:7e:ed:3d:a1:e7:6d:51:5f:ff:90:
01:a5:2d:61:6e:b8:b3:87:72:d6:c0:ae:0a:62:36:95:e0:7a:
23:63:eb:d4:22:b6:75:b5:72:08:be:0c:e2:ab:97:f2:04:dc:
74:56:c6:d5:83:70:32:f7:6e:2c:ce:d9:86:f6:ee:0d:da:d3:
f0:9b:0a:c4:70:d3:53:ab:9e:57:c0:99:10:a5:08:24:bd:2c:
39:59:d6:28:ef:4e:91:6c:70:7b:2d:15:dd:4a:0f:ed:d6:17:
e3:32:a4:ea:e4:69:1f:29:1d:8e:30:d6:99:f4:0e:b1:e7:06:
16:94:01:25:fd:75:0d:1f:01:ef:91:9a:c1:92:e5:73:da:16:
03:2c:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:24 2024 by rpki-client on console-ams.rpki-client.org