Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/GtD1FrvttQYUMd7bocMkLOp11fQ.roa
File: GtD1FrvttQYUMd7bocMkLOp11fQ.roa (raw, json)
Hash identifier: VtPRD7IoK4xjqfiYgz1vNyNfQClJClidB/EH6okZUjg=
Subject key identifier: 1A:D0:F5:16:BB:ED:B5:06:14:31:DE:DB:A1:C3:24:2C:EA:75:D5:F4
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 01856DD404118EC56C396C5A01396BBC64F6
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/GtD1FrvttQYUMd7bocMkLOp11fQ.roa
Signing time: Sun 01 Jan 2023 14:54:49 +0000
ROA not before: Sun 01 Jan 2023 14:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15703
IP address blocks: 193.47.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:04:11:8e:c5:6c:39:6c:5a:01:39:6b:bc:64:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 14:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ad0f516bbedb5061431dedba1c3242cea75d5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2b:02:49:ef:04:24:9f:e3:73:85:67:bd:97:
c0:57:ca:e1:f3:a5:b3:d4:dc:af:ed:07:9e:37:c2:
e1:d1:5d:de:4e:ae:d9:96:e1:6c:b1:25:f3:d1:6a:
d2:bc:f6:71:6d:a4:72:c6:30:e0:ce:70:00:18:98:
7a:11:53:1a:25:10:b6:87:77:9a:49:02:6f:4e:f7:
0f:3a:d8:95:70:d5:1a:7a:1a:ec:0f:66:46:fa:8b:
ba:b8:33:0b:99:5e:e4:9f:5d:71:55:42:9e:cb:78:
6f:cd:92:bb:5e:80:f4:29:fc:93:f0:d9:a6:42:e7:
89:36:f2:14:95:8d:dd:28:9b:57:63:8d:5f:70:db:
a6:8a:42:85:40:5d:18:d4:81:56:38:44:91:29:24:
ef:7f:dd:c3:60:9f:45:89:a1:19:e4:2e:24:87:79:
02:9c:a8:d2:9d:bf:3e:34:cb:90:70:c7:3f:65:89:
f4:8c:d6:66:fd:b7:18:bb:5f:19:9d:4b:3f:05:df:
41:6b:21:8b:57:29:2e:b2:ab:c5:a5:2f:1f:b7:36:
4d:89:33:04:b1:26:4c:3b:60:62:db:61:3b:44:f8:
a1:7e:f6:a9:d3:3c:80:3a:e1:aa:57:2d:e0:a6:3f:
90:9a:64:f3:bc:c7:e9:d5:62:c7:77:2b:4e:e9:ef:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D0:F5:16:BB:ED:B5:06:14:31:DE:DB:A1:C3:24:2C:EA:75:D5:F4
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/GtD1FrvttQYUMd7bocMkLOp11fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ad:b9:11:f9:be:22:c3:00:20:0c:78:36:8b:20:aa:f6:a1:
e7:ad:44:0f:f0:c3:3e:52:af:59:4e:f1:79:3b:a9:5a:c7:1f:
91:21:af:37:83:93:e7:94:97:89:fc:d3:c0:9c:9b:36:04:ac:
73:66:75:79:cd:2e:c9:1e:a9:15:ca:b2:8f:ff:c0:3c:a6:eb:
8c:d9:2f:e6:fb:5c:24:7d:46:b7:3c:1f:82:f8:b6:eb:a0:3e:
56:d8:c3:5c:05:aa:57:94:cb:17:87:a9:17:15:14:2e:11:20:
e2:22:ed:a5:76:69:ec:1c:94:52:8a:f1:bb:11:e9:b4:44:9a:
54:30:e2:c0:e9:5f:fe:be:fb:13:9d:e9:e8:5e:fe:40:0e:9c:
58:a5:da:c7:a3:25:11:a0:8d:9b:0e:90:23:68:b8:d6:05:a4:
bb:ce:97:7e:c1:da:13:5a:a5:5d:3d:a2:91:b4:a5:cb:2b:de:
d9:aa:27:71:2e:b1:6b:c1:0c:6e:31:0e:c0:69:68:57:14:0c:
b3:4b:3e:f8:45:ba:a4:04:95:eb:aa:63:b5:61:b0:e7:cc:2d:
b0:17:0f:8f:51:d8:7f:6c:9c:2f:bd:cb:ae:c2:bf:4c:bb:c2:
c6:17:79:e1:6e:81:36:5a:97:90:f0:48:b9:65:0d:0c:0d:72:
77:05:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org