Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/GyUpT6mHdMeX-E7ZhUxap9DMx3Q.roa
File: GyUpT6mHdMeX-E7ZhUxap9DMx3Q.roa (raw, json)
Hash identifier: h3c0xIuJEOooZJd1mOqS2s05m+bUjY16fTJmEg8KUWE=
Subject key identifier: 1B:25:29:4F:A9:87:74:C7:97:F8:4E:D9:85:4C:5A:A7:D0:CC:C7:74
Certificate issuer: /CN=371e04ff185b50b9e61ec5f46e2b10877491d882
Certificate serial: 01856CCAFA0D33587EC63C7035EE16D09E36
Authority key identifier: 37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/GyUpT6mHdMeX-E7ZhUxap9DMx3Q.roa
Signing time: Sun 01 Jan 2023 10:05:19 +0000
ROA not before: Sun 01 Jan 2023 10:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202932
IP address blocks: 188.244.104.0/22 maxlen: 22
2a0d:58c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fa:0d:33:58:7e:c6:3c:70:35:ee:16:d0:9e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371e04ff185b50b9e61ec5f46e2b10877491d882
Validity
Not Before: Jan 1 10:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b25294fa98774c797f84ed9854c5aa7d0ccc774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:09:58:07:62:f3:85:69:35:55:b9:5a:65:
6d:15:0e:04:ac:d9:37:f6:00:83:eb:d3:ef:bf:35:
3a:21:be:33:73:05:60:b1:4c:5f:39:e8:e3:01:b0:
cf:a3:99:16:a0:54:6c:4c:78:d4:95:29:fd:86:de:
5f:e6:b6:01:ef:c0:15:4b:43:15:1f:76:a2:d4:02:
91:9d:3a:e5:73:03:d1:41:7f:fb:41:c9:76:79:19:
0e:c1:da:30:9e:c9:a6:5e:c5:5e:b6:04:42:df:be:
fd:bb:b9:49:3a:f5:b0:07:55:99:34:7f:38:cb:ec:
09:50:f0:98:e9:a0:c1:72:dd:5c:ae:41:50:f7:18:
dc:f9:64:4d:10:15:4f:00:45:14:26:83:69:9a:17:
67:83:f1:83:30:77:a5:46:7c:13:89:f8:45:af:76:
94:59:a0:43:97:8d:6b:a7:93:1c:49:a1:d8:c4:46:
5f:4b:ad:4e:10:af:8b:e3:fc:87:fd:e7:ee:31:85:
58:3b:29:7f:0f:d2:f4:8d:82:80:5b:f5:4d:0d:5d:
60:69:ce:57:d0:fb:55:fe:91:56:79:3a:74:06:83:
a2:7a:9c:e6:db:58:93:e4:ed:a6:ad:a2:81:3b:e6:
76:0b:2c:cd:7b:86:b5:83:79:24:e7:de:f3:6c:f6:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:29:4F:A9:87:74:C7:97:F8:4E:D9:85:4C:5A:A7:D0:CC:C7:74
X509v3 Authority Key Identifier:
keyid:37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/GyUpT6mHdMeX-E7ZhUxap9DMx3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Nx4E_xhbULnmHsX0bisQh3SR2II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.104.0/22
IPv6:
2a0d:58c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:7f:bd:2f:04:4b:61:13:0d:b8:4e:3d:65:b2:cd:1e:b5:2f:
90:7f:29:e0:2b:f8:63:ff:41:c6:41:b0:6f:fb:43:d6:1d:0b:
d0:cc:96:91:fc:52:4b:54:46:7d:0e:40:fa:03:74:22:65:48:
5c:7c:ef:86:be:cb:7c:5c:69:e8:8f:e1:e2:bb:4f:21:b9:a7:
ed:fe:64:a4:41:55:22:d0:20:19:c5:ac:a9:ec:54:86:3f:bd:
6a:7a:b4:71:ac:31:75:cb:83:4b:88:63:33:a5:24:4b:16:d6:
65:31:ed:93:86:eb:1e:f5:56:be:07:97:d6:78:ea:4e:07:ea:
d3:b8:29:c9:e9:fa:97:55:a7:a9:69:b8:d2:ec:48:64:b4:4e:
a1:f7:0c:88:05:a7:b5:a5:1e:41:e6:87:05:1a:8d:b0:91:2e:
05:c3:cd:d9:6d:56:56:2d:b4:31:a5:b9:4c:b2:32:52:ea:af:
c8:0c:7e:5c:74:40:c9:ba:20:e3:78:82:0b:15:88:70:35:33:
e2:d4:32:50:1b:56:4d:0e:f1:54:27:50:71:bb:b0:32:1b:05:
04:e9:b5:13:1f:48:0a:5c:48:8a:ae:68:ed:a4:95:a2:0c:6d:
c5:e7:55:51:6f:d1:a8:a6:42:ea:72:6e:9b:01:55:c5:6a:0f:
08:0d:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org