Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/_GK7qFNw3oDn0J2os8MauWBNdVs.roa
File: _GK7qFNw3oDn0J2os8MauWBNdVs.roa (raw, json)
Hash identifier: iBQuzps9Ydp7oMZ0TnsOr9pIgVh/LweiIVy6gnJg1+w=
Subject key identifier: FC:62:BB:A8:53:70:DE:80:E7:D0:9D:A8:B3:C3:1A:B9:60:4D:75:5B
Certificate issuer: /CN=57b7b462e4cef92dcbf44692ff0f851ee3e7a9d6
Certificate serial: 01856BC1111CC9E28D0B61181C6D7CEB0536
Authority key identifier: 57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/_GK7qFNw3oDn0J2os8MauWBNdVs.roa
Signing time: Sun 01 Jan 2023 05:14:52 +0000
ROA not before: Sun 01 Jan 2023 05:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 185.5.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:11:1c:c9:e2:8d:0b:61:18:1c:6d:7c:eb:05:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b7b462e4cef92dcbf44692ff0f851ee3e7a9d6
Validity
Not Before: Jan 1 05:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc62bba85370de80e7d09da8b3c31ab9604d755b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:c7:b8:45:30:8c:cb:34:53:4d:43:64:87:
c2:75:64:ff:d7:d0:a8:f5:88:43:4c:d3:8c:de:14:
5b:95:37:68:82:04:9a:0e:d5:74:67:5f:46:f9:a1:
f8:c0:90:5a:25:46:40:85:df:a4:2c:bf:83:70:ba:
bd:c9:ef:73:d2:86:fc:e7:f1:e5:90:7a:69:eb:be:
1e:75:38:a2:f0:39:e2:12:02:48:20:af:af:b5:95:
ab:5a:39:bd:6e:e5:c5:de:05:48:3f:01:3b:4e:22:
a6:97:92:d7:1d:7c:b9:d1:64:21:e5:34:aa:61:46:
b7:99:23:79:d5:6f:34:2a:fc:44:0e:b4:83:74:01:
b4:5a:1c:08:a5:fc:2e:0c:eb:d7:3e:8e:af:d0:dd:
00:68:1c:3f:fc:44:40:35:22:89:bd:9a:23:53:ec:
75:38:ec:a9:14:36:08:1d:a2:46:40:ee:63:c3:3c:
13:1a:5e:20:e0:cc:a5:1c:68:e3:c0:83:b0:8a:dd:
d1:4e:48:ec:f4:23:dd:28:c0:1a:61:bb:5f:36:0f:
2c:11:fa:a4:97:5b:8d:31:14:98:98:ea:e8:28:46:
2c:33:e9:30:32:d4:5c:8d:d3:16:2f:7f:d1:11:6e:
dd:92:fc:36:50:ff:9b:26:99:2d:ac:38:17:59:f1:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:BB:A8:53:70:DE:80:E7:D0:9D:A8:B3:C3:1A:B9:60:4D:75:5B
X509v3 Authority Key Identifier:
keyid:57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/_GK7qFNw3oDn0J2os8MauWBNdVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/V7e0YuTO-S3L9EaS_w-FHuPnqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:72:f7:25:23:04:e8:ec:54:39:28:86:2e:a1:58:98:24:1d:
bd:6f:c5:e3:42:8a:73:cd:1d:23:0d:26:01:7b:e5:ce:c6:85:
54:9c:32:2b:b1:0d:09:ee:69:11:f0:57:f5:84:0d:43:5e:6e:
78:ff:96:57:fc:c4:a9:c9:3a:36:b9:f9:02:a1:5f:ac:af:d4:
cd:28:aa:68:8a:7e:f6:ab:86:16:9d:f3:e0:1a:96:f7:a7:18:
3f:53:a5:63:8b:de:33:5e:80:68:78:8f:24:2f:54:3b:c2:a8:
4c:ef:fc:61:5d:d9:19:14:f0:a2:b5:0d:02:1d:08:2b:c5:5a:
64:e5:f9:47:01:79:7c:a2:9f:6b:a6:84:9e:77:e1:82:5f:12:
1c:0c:e4:4b:4c:bd:1d:7b:f5:97:b9:d7:d6:91:ae:c6:38:74:
cf:a3:e4:22:93:6e:68:f7:58:d7:eb:cf:10:11:5d:0a:f1:54:
d9:7b:c4:5d:3f:84:a8:72:9c:7f:a3:fd:c4:45:17:6f:79:76:
95:90:04:73:e8:08:36:92:d5:a5:14:28:e4:45:96:3f:ae:c3:
b6:5d:fd:4c:0b:d2:f8:f1:1e:ed:de:29:29:a9:0c:36:44:70:
9f:4c:c0:9b:b8:63:a0:c1:bd:1a:54:ff:b1:1a:fd:d2:bc:ee:
4b:be:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 15:14:23 2023 by rpki-client on console-ams.rpki-client.org