Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/Ges7PuPF3kPrR369IgcqMSoF0qc.roa
File: Ges7PuPF3kPrR369IgcqMSoF0qc.roa (raw, json)
Hash identifier: +nkeYBNxiQOfAWJevZMul4aF4mWwnh9h+TugZApksKY=
Subject key identifier: 19:EB:3B:3E:E3:C5:DE:43:EB:47:7E:BD:22:07:2A:31:2A:05:D2:A7
Certificate issuer: /CN=2f6c0999157eca3302f125c63bec3b821af8aa03
Certificate serial: 01850D491CE7DB2BEBC099DD5CD76783B5FA
Authority key identifier: 2F:6C:09:99:15:7E:CA:33:02:F1:25:C6:3B:EC:3B:82:1A:F8:AA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2wJmRV-yjMC8SXGO-w7ghr4qgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/Ges7PuPF3kPrR369IgcqMSoF0qc.roa
Signing time: Tue 13 Dec 2022 20:59:33 +0000
ROA not before: Tue 13 Dec 2022 20:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212041
IP address blocks: 194.61.81.0/24 maxlen: 24
195.28.20.0/24 maxlen: 24
185.245.246.0/23 maxlen: 23
185.247.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:49:1c:e7:db:2b:eb:c0:99:dd:5c:d7:67:83:b5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6c0999157eca3302f125c63bec3b821af8aa03
Validity
Not Before: Dec 13 20:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19eb3b3ee3c5de43eb477ebd22072a312a05d2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:4a:5f:9b:ce:63:42:d3:13:95:4a:d5:e7:
80:f6:5c:a3:6a:c8:e7:d0:d0:1b:5b:12:db:af:52:
2a:a3:16:ac:3c:c9:2e:18:05:2c:9e:67:91:66:ad:
de:5f:ba:61:c7:33:bd:73:4c:4a:5b:80:55:e9:8e:
51:f6:25:ae:b1:97:43:c3:26:06:06:91:8f:a8:77:
c0:d1:7b:a9:79:ae:89:21:92:8a:f3:7a:36:c0:d8:
22:a1:14:36:39:68:48:c8:72:d2:2e:b0:89:40:0e:
9a:f4:2a:fe:ab:d3:3d:9c:4d:0d:6e:34:87:13:f6:
f7:c1:ee:90:ef:78:58:0d:e3:85:b0:0d:ed:71:29:
40:c8:69:b8:39:2c:5a:7f:ce:ed:ed:3b:1a:b3:b6:
a2:c6:dd:db:a1:d8:80:85:0e:ae:8b:2b:32:ca:63:
57:3b:a7:aa:c8:ad:fa:d8:ca:10:52:f1:d3:8a:62:
ea:b1:26:a8:54:d9:0a:2b:3f:35:5e:ad:4f:2a:b6:
42:f7:c8:5d:b5:a3:14:e2:7c:08:55:86:89:b7:62:
b8:c1:e5:dc:bb:aa:79:0b:2c:e0:f3:9e:61:d6:a2:
91:09:76:05:aa:15:fd:e8:31:43:b4:c8:cb:7e:bc:
91:9b:ae:bc:ce:49:98:8d:c3:d2:f5:0c:f2:a5:ca:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EB:3B:3E:E3:C5:DE:43:EB:47:7E:BD:22:07:2A:31:2A:05:D2:A7
X509v3 Authority Key Identifier:
keyid:2F:6C:09:99:15:7E:CA:33:02:F1:25:C6:3B:EC:3B:82:1A:F8:AA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2wJmRV-yjMC8SXGO-w7ghr4qgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/Ges7PuPF3kPrR369IgcqMSoF0qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/89097a-1d78-4787-bf4e-83fa0b35134c/1/L2wJmRV-yjMC8SXGO-w7ghr4qgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.246.0/23
185.247.60.0/24
194.61.81.0/24
195.28.20.0/24
Signature Algorithm: sha256WithRSAEncryption
42:35:ad:cd:7e:3d:88:36:4e:c1:45:51:d5:12:eb:d7:ce:b9:
11:a9:8b:09:67:43:77:dc:d1:0b:76:2a:ac:04:6e:6c:d2:8c:
8c:82:ed:c6:c4:6f:d3:42:49:71:d1:d6:56:71:4a:82:a2:83:
a5:7e:bc:c3:06:45:a0:1f:21:8e:42:f4:67:65:9d:94:d9:fe:
76:3a:8f:e0:ff:69:ca:40:ba:6b:7c:cd:ad:e5:da:36:fb:99:
59:21:61:b2:6d:72:fc:36:78:95:7c:db:77:5f:2f:a1:e2:21:
35:42:1a:e5:ee:91:c5:a3:df:61:ff:c8:da:aa:fb:2a:ff:80:
60:d4:3b:14:d5:6a:5e:13:be:24:6b:18:99:e7:86:93:96:30:
b0:4d:aa:88:4b:35:13:17:97:cb:78:84:69:32:27:e7:d5:b1:
0a:e5:91:56:d5:19:b2:eb:59:a5:06:21:6b:d0:f3:29:e6:19:
db:6a:2d:46:7b:5a:60:a8:aa:5e:1c:93:ac:bb:25:64:b0:34:
6e:27:d4:b4:4c:27:40:44:68:99:13:7e:dd:70:db:d5:6b:c6:
ea:9c:05:64:d9:19:b0:8f:bf:3b:b2:e3:39:fe:b8:a6:a1:17:
7b:1b:63:00:dd:c1:ea:e4:b5:ed:a6:9e:41:fe:d9:e1:ab:53:
a4:a5:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:56 2024 by rpki-client on console-ams.rpki-client.org