Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/gT0-CnVn1qTt2W7RU5oL-oJPu2c.roa
File: gT0-CnVn1qTt2W7RU5oL-oJPu2c.roa (raw, json)
Hash identifier: K5oMsUQ2p2VN4eQWLKziun9N33vKl7dchh0U98N1bP4=
Subject key identifier: 81:3D:3E:0A:75:67:D6:A4:ED:D9:6E:D1:53:9A:0B:FA:82:4F:BB:67
Certificate issuer: /CN=2145c7418668c725392fc63e632f4615fab3a346
Certificate serial: 018CCA29E223FEEB3187D82262B933A3B63E
Authority key identifier: 21:45:C7:41:86:68:C7:25:39:2F:C6:3E:63:2F:46:15:FA:B3:A3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/gT0-CnVn1qTt2W7RU5oL-oJPu2c.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60538
IP address blocks: 193.36.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e2:23:fe:eb:31:87:d8:22:62:b9:33:a3:b6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2145c7418668c725392fc63e632f4615fab3a346
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=813d3e0a7567d6a4edd96ed1539a0bfa824fbb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:cb:41:4d:a6:8b:7e:fd:a0:df:ed:75:41:
41:d5:81:1c:b6:3d:2f:e4:a2:c4:e1:54:a0:d0:44:
ab:ff:ae:4c:d3:47:0d:16:73:7d:0b:f7:65:7e:6f:
4e:90:1d:ca:43:3a:2a:fc:a6:50:e3:26:78:11:d7:
08:48:67:97:94:e9:15:10:0c:e3:2b:ab:5c:bb:fb:
86:13:a9:7b:d4:08:45:2d:ea:b8:86:10:c1:30:8e:
82:7b:73:58:ff:2e:de:6c:4e:b3:5a:83:a8:d0:27:
e6:e6:c9:b1:8c:f6:c6:b0:fc:74:91:6d:a1:4d:d5:
65:c1:c4:d5:4b:c3:d5:3e:3e:55:9a:80:0a:2d:10:
55:9c:c3:54:53:57:42:68:3e:01:25:7e:ee:21:3c:
d1:4b:80:2e:53:ac:85:18:6e:22:0e:ec:32:40:ea:
1e:2e:00:f9:70:65:96:5d:d0:46:dd:ec:a9:57:6e:
61:ed:cd:64:47:ce:55:d8:48:24:d2:0e:3b:48:5a:
3a:08:63:40:bc:c5:f3:fe:8b:58:0d:2a:97:f9:96:
94:79:74:2f:05:b4:f4:e7:b7:18:d1:a9:d4:db:38:
82:18:04:50:9a:af:97:c6:8b:d9:e8:73:34:a6:53:
23:11:42:81:65:28:fc:33:70:c4:b3:a8:c2:81:c0:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3D:3E:0A:75:67:D6:A4:ED:D9:6E:D1:53:9A:0B:FA:82:4F:BB:67
X509v3 Authority Key Identifier:
keyid:21:45:C7:41:86:68:C7:25:39:2F:C6:3E:63:2F:46:15:FA:B3:A3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/gT0-CnVn1qTt2W7RU5oL-oJPu2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f7235c-5205-469b-8088-052e1f6a02a3/1/IUXHQYZoxyU5L8Y-Yy9GFfqzo0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.1.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:84:69:e8:27:b3:60:62:27:1e:a3:f6:27:41:c1:44:d6:06:
14:f0:53:6b:90:12:f8:d4:e2:68:a6:6a:4a:7f:65:ad:62:5a:
23:ba:56:0f:ea:5b:84:aa:6e:f2:28:ea:d5:be:20:1d:a2:74:
9d:53:de:15:76:a4:95:44:37:36:b3:96:3c:0f:b0:01:71:b0:
bb:20:05:d7:8c:98:3b:4d:71:22:fc:51:6c:bb:04:d5:6f:32:
d8:42:4b:6d:0a:66:a1:f3:cc:82:2b:85:04:a1:d3:ae:db:56:
04:3e:9c:b3:ee:61:bd:82:3d:ce:e3:04:a5:79:9d:7c:48:a8:
12:65:36:c5:49:76:27:f2:09:c8:2c:f4:4a:f2:70:48:b2:33:
d9:7d:56:9a:cb:7a:1c:34:c5:60:6c:2c:89:ef:55:a6:b6:3e:
0e:85:ab:50:d3:77:23:f8:5e:75:b1:4d:17:bd:b2:73:9e:52:
c1:13:96:99:d4:6f:3f:e1:b9:9f:e8:ba:cd:6e:28:00:27:a7:
26:14:84:d5:7c:95:d9:9c:8f:71:16:b1:56:a1:7e:b7:12:25:
c1:8f:a9:26:9b:b4:c7:de:13:64:37:f4:e0:c6:ab:e8:b7:bb:
92:e0:e5:93:a1:55:43:a7:1c:b7:05:ad:23:c8:2b:6c:44:31:
f9:30:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 09:48:54 2024 by rpki-client on console-ams.rpki-client.org