Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/GyWZd-1DVAT1hrGQaBPx171q_18.roa
File: GyWZd-1DVAT1hrGQaBPx171q_18.roa (raw, json)
Hash identifier: UTxJb10AdRG2xqUU1KrWxQvXaDpn77ZhuTxOppEgT0g=
Subject key identifier: 1B:25:99:77:ED:43:54:04:F5:86:B1:90:68:13:F1:D7:BD:6A:FF:5F
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 01831C7BDE7CC5C2BF3D20A3DFD8BA5DB6F0
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/GyWZd-1DVAT1hrGQaBPx171q_18.roa
Signing time: Thu 08 Sep 2022 09:43:43 +0000
ROA not before: Thu 08 Sep 2022 09:43:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210122
IP address blocks: 152.89.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:7b:de:7c:c5:c2:bf:3d:20:a3:df:d8:ba:5d:b6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Sep 8 09:43:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b259977ed435404f586b1906813f1d7bd6aff5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:dd:7a:74:93:96:4c:42:6e:d6:fd:d4:64:
c9:91:fd:cd:5d:b1:0c:88:fb:43:be:e7:b9:b9:c4:
5e:db:92:c9:9a:50:0f:d2:73:7a:15:4a:cc:78:86:
57:78:f0:6e:36:a4:10:42:97:20:23:6f:b5:14:ed:
f7:68:1d:db:5c:fc:14:cd:72:cd:7b:b2:59:9c:e9:
b7:e5:67:28:b8:74:db:03:26:1e:0b:32:d6:ee:5d:
ab:b2:bc:70:0b:61:46:5b:23:11:ee:ca:1e:3b:69:
f1:90:48:f9:20:a7:0f:9b:76:9c:41:ab:f2:2d:84:
0c:86:bf:6f:ad:12:ff:e0:cb:ee:03:c8:97:7a:c5:
07:f6:93:c5:49:34:48:c0:13:7a:d1:eb:5c:2c:fa:
ff:30:4a:81:ec:67:5a:16:bb:92:12:c0:0f:da:6f:
2b:0b:56:c1:d6:1a:9d:2a:ac:e8:3b:1c:02:67:9f:
a3:9b:72:b7:dc:7d:cf:61:7d:19:a4:ea:a2:0e:f3:
87:95:d2:2d:d8:04:66:45:45:5c:f2:a3:3e:a5:b3:
ef:9e:a0:6e:dc:1d:25:f1:6b:16:fe:a8:1f:fe:7e:
40:68:33:09:e8:e4:40:47:ba:97:40:44:a3:9f:a2:
b0:ef:a0:4c:ec:f5:94:ca:fb:40:ab:24:18:80:1c:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:99:77:ED:43:54:04:F5:86:B1:90:68:13:F1:D7:BD:6A:FF:5F
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/GyWZd-1DVAT1hrGQaBPx171q_18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
28:15:ba:d3:12:e5:84:71:a6:c0:76:bf:1e:ee:9b:f0:fb:c5:
d1:3a:a8:90:c4:c7:51:86:10:94:ff:fa:d5:85:87:82:7d:17:
10:53:6d:c0:f1:5a:97:35:6f:65:18:ed:d3:b1:1b:a4:ad:63:
ed:e1:ea:85:d2:16:40:ca:91:ea:04:1a:4c:6e:a0:98:87:da:
37:7b:9d:78:71:d2:63:a2:ce:f4:dc:02:10:2c:79:0a:5f:e8:
86:39:5b:38:fb:89:60:5f:cf:e7:fe:70:f8:ad:ce:9c:24:70:
29:c2:ee:ad:8d:30:71:7b:3d:ed:9e:53:76:17:7e:df:a0:9a:
91:08:54:82:2b:da:80:82:22:2b:42:48:50:7d:f1:67:4c:83:
d2:97:f0:dc:71:0f:be:e1:57:b9:b7:c6:3c:80:80:9c:1b:79:
ef:20:6c:61:d4:54:f7:f6:8b:80:46:e1:f6:2b:e7:57:5b:05:
0a:e4:be:9c:7c:a9:4f:f7:a6:8b:b5:8a:e7:5e:40:b6:c5:4c:
c0:c0:1a:d1:21:12:d3:ca:46:c9:1e:aa:1b:f7:f2:30:a1:c8:
97:17:f6:c0:94:21:bd:c1:1c:d9:2f:1f:0d:28:67:d5:cb:b5:
0d:62:62:98:d0:3f:1e:c9:89:b0:a0:53:6c:10:c4:43:34:48:
e3:8f:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:42 2024 by rpki-client on console-fra.rpki-client.org