Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/94099b-1727-408e-9f1f-48dee405d0c0/1/ge6rtVt_kagAVZQGyObj-anUbmE.roa
File: ge6rtVt_kagAVZQGyObj-anUbmE.roa (raw, json)
Hash identifier: vfrmy8jzKio3+2ZofN8xhpzEIUz3gO4uG4oPOpSHxPM=
Subject key identifier: 81:EE:AB:B5:5B:7F:91:A8:00:55:94:06:C8:E6:E3:F9:A9:D4:6E:61
Certificate issuer: /CN=1cb9eaf2a66adf18a44b3c54550fe1cea191b00a
Certificate serial: 018572BA5F99EB17747FC2E659845DD7B6ED
Authority key identifier: 1C:B9:EA:F2:A6:6A:DF:18:A4:4B:3C:54:55:0F:E1:CE:A1:91:B0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLnq8qZq3xikSzxUVQ_hzqGRsAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/94099b-1727-408e-9f1f-48dee405d0c0/1/ge6rtVt_kagAVZQGyObj-anUbmE.roa
Signing time: Mon 02 Jan 2023 13:44:54 +0000
ROA not before: Mon 02 Jan 2023 13:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207513
IP address blocks: 185.196.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:5f:99:eb:17:74:7f:c2:e6:59:84:5d:d7:b6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb9eaf2a66adf18a44b3c54550fe1cea191b00a
Validity
Not Before: Jan 2 13:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81eeabb55b7f91a800559406c8e6e3f9a9d46e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:0e:14:9f:cb:bb:3a:33:2f:1e:e8:26:bb:
69:20:f1:97:3f:99:a6:95:e4:c5:a4:98:15:72:85:
30:c1:00:fb:93:6b:78:7a:30:53:3d:64:3f:a6:f6:
49:06:d2:73:3a:88:99:cb:ce:7f:e5:36:9a:35:67:
06:e3:98:2f:a8:59:00:38:6a:ed:ea:b6:61:95:90:
fd:ed:41:69:22:d3:66:82:3f:b7:f2:11:95:74:02:
d0:53:49:ec:d4:b5:50:a5:2b:10:01:f0:97:2c:b5:
6c:27:57:1e:a4:fb:f8:d3:b6:48:36:8d:08:d3:5f:
f0:c8:23:d6:b0:5f:cc:74:5c:61:34:d1:8b:15:fc:
ce:ee:b1:c6:ff:c6:2b:99:b8:06:dd:13:28:d8:eb:
be:c5:f1:f7:75:fa:cb:f9:36:3f:8f:90:2d:15:57:
06:de:d8:e8:81:66:2d:52:4f:4f:40:c4:da:27:78:
b2:f8:83:12:df:1f:5d:49:92:6e:63:31:31:c1:88:
16:02:de:c9:81:ac:ee:bf:34:ea:c1:64:8c:fa:b9:
cf:df:9e:63:b8:5c:86:d7:f1:60:6c:48:5b:05:91:
7e:8b:2c:39:77:24:91:13:8b:72:e3:fb:a9:2c:ad:
e4:26:be:0d:62:00:93:ac:04:ea:82:78:00:a8:8c:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:AB:B5:5B:7F:91:A8:00:55:94:06:C8:E6:E3:F9:A9:D4:6E:61
X509v3 Authority Key Identifier:
keyid:1C:B9:EA:F2:A6:6A:DF:18:A4:4B:3C:54:55:0F:E1:CE:A1:91:B0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLnq8qZq3xikSzxUVQ_hzqGRsAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/94099b-1727-408e-9f1f-48dee405d0c0/1/ge6rtVt_kagAVZQGyObj-anUbmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/94099b-1727-408e-9f1f-48dee405d0c0/1/HLnq8qZq3xikSzxUVQ_hzqGRsAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3d:a4:0d:38:39:94:fa:08:78:e5:a6:e2:13:c6:b1:0a:e7:
1f:3c:8a:25:81:07:32:27:0a:4c:7d:f0:15:3f:99:7f:45:8a:
03:15:80:63:7c:c1:ee:50:52:0c:bd:05:c9:37:c4:40:ab:50:
34:fb:77:ca:29:9f:9c:02:85:5c:9f:f0:d7:6c:c6:cf:21:ee:
5c:1e:ea:59:4e:c7:be:69:8a:91:ee:56:1d:4a:ad:fd:18:8b:
d9:9c:0d:b4:42:27:94:21:c1:d7:75:3e:4a:c8:76:d3:46:37:
9c:67:ee:f7:52:0f:bb:e5:64:07:08:22:3c:34:7d:2e:3e:02:
12:a2:5b:08:76:1b:30:43:60:ba:36:e9:c9:f8:11:29:9b:cb:
6b:0d:27:3a:bf:42:ae:a9:01:72:22:2a:14:9a:8d:ba:b6:74:
6f:07:d1:39:1c:5b:da:84:20:a2:b0:d3:72:67:c1:2a:3e:e8:
3c:be:23:7e:41:40:53:e1:19:dc:8b:51:66:dc:04:a0:27:28:
ae:5a:82:50:0e:f4:99:40:ab:bc:ce:69:77:70:78:c3:34:a1:
10:1f:ff:59:1d:cd:c6:90:bd:ea:5f:8d:0a:fe:da:e9:43:05:
e6:f6:84:ee:c9:c9:7d:0f:fd:e4:5d:94:7a:af:bd:4d:02:2b:
72:73:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:50 2023 by rpki-client on console-ams.rpki-client.org