Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/GykBtXMjW8aLQK5DI1rRAzB-rBA.roa
File: GykBtXMjW8aLQK5DI1rRAzB-rBA.roa (raw, json)
Hash identifier: 9MR9GPof+h6bdjZgJ4mbXMWkJcMorY8RtjFv+AkozEg=
Subject key identifier: 1B:29:01:B5:73:23:5B:C6:8B:40:AE:43:23:5A:D1:03:30:7E:AC:10
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 04827A3B
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/GykBtXMjW8aLQK5DI1rRAzB-rBA.roa
Signing time: Tue 28 Jun 2022 09:20:02 +0000
ROA not before: Tue 28 Jun 2022 09:20:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 85.255.120.0/21 maxlen: 21
176.118.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75659835 (0x4827a3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Jun 28 09:20:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b2901b573235bc68b40ae43235ad103307eac10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:67:98:77:72:4d:38:e6:87:21:b0:63:cb:
1b:62:e2:f3:98:bc:57:2f:35:6e:0d:82:d3:89:bd:
6f:37:09:13:9f:e2:b1:1c:c3:9a:41:c7:4e:b6:f7:
11:d7:31:ef:d4:fb:bc:eb:df:a6:81:a8:b3:20:74:
a9:12:60:05:ce:41:f9:a5:6b:01:16:01:5c:14:a1:
5c:f7:08:a0:81:37:aa:73:70:ac:35:5b:3c:c3:f5:
3b:b4:18:9e:56:08:0f:de:38:28:67:5f:47:49:d3:
cc:8a:8f:ae:ac:66:f8:09:21:ee:04:1c:8a:cf:87:
79:e7:00:14:86:11:f0:85:07:3d:f5:eb:12:49:af:
be:fe:b8:53:8d:92:10:f6:d2:ff:ed:6b:b7:64:72:
e0:06:10:c0:09:41:92:c8:63:2f:4c:02:60:7e:0d:
96:4f:a8:99:ed:74:d6:26:6b:db:7c:95:c5:99:4d:
f7:6b:73:01:cc:71:53:2c:8c:27:12:91:01:06:71:
9d:22:c1:2e:02:ad:8d:7e:1c:8d:a6:32:cb:44:9c:
16:88:a6:aa:c5:d0:60:f3:4f:57:88:cf:53:cd:cd:
c1:1c:b0:9c:87:8f:e5:3a:49:d5:bc:9c:06:5d:d1:
74:8d:f5:ed:24:60:53:68:33:2e:a8:9b:4f:2d:76:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:29:01:B5:73:23:5B:C6:8B:40:AE:43:23:5A:D1:03:30:7E:AC:10
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/GykBtXMjW8aLQK5DI1rRAzB-rBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.120.0/21
176.118.80.0/21
Signature Algorithm: sha256WithRSAEncryption
11:e2:66:62:e0:8c:1a:fb:01:00:14:2b:ed:d7:26:27:01:7a:
e8:f5:94:c0:74:74:a4:88:f3:3d:ca:dc:af:43:11:89:bb:89:
cc:03:ee:8e:62:3a:90:77:69:04:34:af:42:60:41:73:27:c7:
35:a2:8a:42:ba:9f:46:61:88:61:f9:c3:82:67:15:cd:df:df:
a0:50:2f:ed:14:74:a1:de:49:d3:2c:72:a4:fd:92:9b:2c:7d:
ea:6d:dd:10:1a:9d:8f:2f:15:c0:eb:a3:ef:66:ba:ea:fd:01:
4d:8d:36:91:bb:0d:68:c1:e2:76:fc:01:b6:ee:9b:ed:f0:b3:
6f:68:fe:60:2b:25:d8:3b:0d:bd:bf:f0:30:73:45:40:2b:82:
bc:58:ca:cf:9d:46:1c:79:d4:d0:d6:a9:56:2b:d0:13:ab:ad:
47:03:f5:1a:cc:e7:5e:3a:82:19:99:7d:e2:12:a1:e6:14:00:
7a:16:54:3f:f0:3a:7e:30:6b:cd:73:76:e6:f8:a6:b1:1b:f5:
95:ae:76:50:b0:ae:96:7f:78:81:98:89:02:e4:33:ea:a4:16:
d8:01:51:a8:77:e4:67:ee:d9:1a:95:85:04:a4:37:67:c8:c4:
af:62:97:12:cd:b7:52:b7:84:02:e6:51:a4:30:14:39:dd:ae:
2b:2f:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org