Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/GR8j0BQRYdlKWDi28VtBmIRKbGM.roa
File: GR8j0BQRYdlKWDi28VtBmIRKbGM.roa (raw, json)
Hash identifier: sM4ALsn/OZ5Kf7OCZUA4OKX+jy1E+Hu0NkDSUTSJ5fg=
Subject key identifier: 19:1F:23:D0:14:11:61:D9:4A:58:38:B6:F1:5B:41:98:84:4A:6C:63
Certificate issuer: /CN=0e6731c7df777222e81b03800f8815a07e0b1fc0
Certificate serial: 018B604B6612A4DEA456FD8D6F82408FB3A5
Authority key identifier: 0E:67:31:C7:DF:77:72:22:E8:1B:03:80:0F:88:15:A0:7E:0B:1F:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dmcxx993ciLoGwOAD4gVoH4LH8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/GR8j0BQRYdlKWDi28VtBmIRKbGM.roa
Signing time: Tue 24 Oct 2023 06:07:15 +0000
ROA not before: Tue 24 Oct 2023 06:07:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210079
IP address blocks: 91.201.40.0/22 maxlen: 22
185.221.152.0/22 maxlen: 22
185.221.155.0/24 maxlen: 24
185.221.154.0/24 maxlen: 24
212.8.247.0/24 maxlen: 24
185.12.92.0/22 maxlen: 22
2a03:80c0::/48 maxlen: 48
2a03:80c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:4b:66:12:a4:de:a4:56:fd:8d:6f:82:40:8f:b3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6731c7df777222e81b03800f8815a07e0b1fc0
Validity
Not Before: Oct 24 06:07:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=191f23d0141161d94a5838b6f15b4198844a6c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:0c:cc:68:4a:ea:14:26:2f:b2:06:fd:64:
4a:2d:e0:96:7a:35:00:c7:f4:4e:a5:9f:a9:69:ec:
3e:22:50:07:4b:84:bf:88:b1:d0:62:72:90:28:be:
ff:52:2a:23:d3:df:ed:60:f3:fb:c7:de:bd:85:1d:
c7:b8:38:b9:a4:ec:00:19:90:8c:69:d4:8e:ed:0d:
ce:7c:b1:42:8a:8f:96:68:38:6b:a8:35:03:7b:d7:
24:6c:86:d4:53:5d:04:a5:9a:ad:aa:b1:27:7a:26:
de:1a:e1:7d:97:5a:0f:11:4c:0e:f6:8a:cd:5b:8e:
00:85:49:eb:0a:84:8c:e1:f5:91:c7:aa:59:75:de:
c3:d3:5a:3f:b4:56:8d:51:2c:9c:34:2d:26:51:0e:
93:58:6e:ee:59:df:be:c4:2f:06:2b:59:32:25:74:
81:a8:ef:40:b4:2d:3c:54:54:ca:de:f4:ff:0f:25:
99:f9:75:3d:6c:e3:9b:69:b5:59:c0:a9:9f:f5:10:
ab:08:0f:c9:9a:48:56:d9:9f:f5:38:9d:af:1a:17:
78:af:06:c9:0c:55:94:09:68:88:9e:a2:93:5a:61:
8d:4b:50:e9:2e:d4:dc:83:6d:a1:af:02:03:45:31:
69:8b:8f:a0:57:f3:6d:2f:55:6f:6d:c2:a0:20:c0:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1F:23:D0:14:11:61:D9:4A:58:38:B6:F1:5B:41:98:84:4A:6C:63
X509v3 Authority Key Identifier:
keyid:0E:67:31:C7:DF:77:72:22:E8:1B:03:80:0F:88:15:A0:7E:0B:1F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dmcxx993ciLoGwOAD4gVoH4LH8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/GR8j0BQRYdlKWDi28VtBmIRKbGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/5a7fc3-0ca8-477e-83b4-2b01e53013e2/1/Dmcxx993ciLoGwOAD4gVoH4LH8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.40.0/22
185.12.92.0/22
185.221.152.0/22
212.8.247.0/24
IPv6:
2a03:80c0::/47
Signature Algorithm: sha256WithRSAEncryption
cd:04:5a:5d:85:cc:77:57:1b:fa:4c:72:e6:dd:ce:2d:ef:6c:
e1:37:c2:78:56:d8:8c:d0:f4:bc:52:15:d5:a1:1a:00:50:ab:
bf:64:e2:8d:65:b4:f5:31:02:43:bd:d5:83:b6:36:d5:b3:c4:
a8:ad:00:6c:5c:74:c9:44:96:72:46:04:b2:eb:6f:f8:1a:07:
15:36:3b:37:95:54:2d:dd:8f:9b:61:93:14:fa:7e:2a:42:b3:
ec:21:d4:ac:72:da:fc:b5:8b:f9:d4:74:76:8d:81:0f:82:bf:
d7:6a:fc:76:80:02:57:4a:38:11:2f:4e:ee:0a:37:1c:23:77:
73:d5:2e:a3:48:42:ed:45:6d:d6:29:61:1e:be:37:d4:d5:dd:
4c:43:8c:4a:35:40:97:d4:bd:08:4f:8c:5c:94:fd:61:77:ae:
88:d4:0f:3b:f3:c9:3d:f3:9e:72:93:92:b5:1d:a9:7e:46:40:
c4:37:da:f2:76:93:bc:8d:77:fa:be:81:40:14:b2:16:dd:95:
bb:96:14:f9:9e:3f:32:fb:45:62:22:1f:80:bf:15:0a:8d:c7:
4d:93:5b:9e:bc:cf:08:50:b5:9c:bc:7c:01:5d:fb:ac:50:c4:
6f:ce:87:fe:d0:9f:31:97:c6:61:d8:4f:6b:45:15:02:e6:67:
a1:b5:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:54 2024 by rpki-client on console-fra.rpki-client.org