Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/gtPXSohfrbFx9IzED2KSzWhExis.roa
File: gtPXSohfrbFx9IzED2KSzWhExis.roa (raw, json)
Hash identifier: aD0mh45Qh5vsUE0qq3YdP5AoFeeHOOB7PsMrK+A1znk=
Subject key identifier: 82:D3:D7:4A:88:5F:AD:B1:71:F4:8C:C4:0F:62:92:CD:68:44:C6:2B
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0189E599080C44383016C91F2EA9CC90C4DE
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/gtPXSohfrbFx9IzED2KSzWhExis.roa
Signing time: Fri 11 Aug 2023 17:15:58 +0000
ROA not before: Fri 11 Aug 2023 17:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137443
IP address blocks: 46.8.176.0/23 maxlen: 24
46.8.178.0/23 maxlen: 24
46.8.180.0/22 maxlen: 24
46.8.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:99:08:0c:44:38:30:16:c9:1f:2e:a9:cc:90:c4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 11 17:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82d3d74a885fadb171f48cc40f6292cd6844c62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:65:b5:6a:a3:a1:8d:c0:87:14:44:d5:fc:
d8:c9:23:39:58:e7:66:13:8d:a9:e9:38:20:ed:9c:
35:0e:fd:d6:81:22:80:84:30:7b:fc:96:8c:77:7b:
00:51:3e:76:8d:7d:1c:a8:fa:2b:f5:b3:cf:a6:c3:
5f:35:36:5c:fd:e3:37:c5:04:77:0d:7c:50:c7:47:
77:16:8e:69:58:1e:89:63:d6:50:17:de:f3:c3:7f:
fa:26:78:32:7f:ac:71:51:06:90:55:25:4a:28:56:
b6:ab:97:eb:22:c5:17:8a:3b:89:5e:12:aa:8d:00:
e9:c6:16:f2:f2:91:1c:77:20:ba:ac:3b:e7:48:06:
60:30:79:a1:e7:36:fc:13:89:53:99:65:13:59:ed:
e9:36:66:d9:93:1b:9b:b0:95:ce:8a:9a:9f:93:0c:
a7:45:45:c2:07:b9:c4:a8:7b:f7:db:e0:61:ce:d1:
d2:03:f8:76:1c:6c:1c:06:04:35:07:cb:78:cb:de:
20:0a:fd:86:fc:a7:95:11:d2:94:9e:b9:33:0e:4c:
7d:ea:9f:91:80:7d:f7:a9:ac:27:a7:2d:d7:48:83:
a1:05:87:83:fc:6d:c2:4b:75:82:4b:91:a5:5e:ad:
00:1d:86:9f:4f:64:12:8e:3a:8d:9e:01:95:e5:1b:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:D7:4A:88:5F:AD:B1:71:F4:8C:C4:0F:62:92:CD:68:44:C6:2B
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/gtPXSohfrbFx9IzED2KSzWhExis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.176.0/21
46.8.196.0/23
Signature Algorithm: sha256WithRSAEncryption
06:e7:98:be:11:f7:54:bd:7a:92:9c:ca:39:28:4d:ac:6f:46:
3f:e3:bb:bf:88:cd:ff:66:21:f2:55:6a:00:9c:ba:49:e4:88:
a0:2c:43:62:54:04:e0:44:17:22:62:c0:84:87:b5:79:d4:8a:
a9:ac:99:84:cf:e7:4e:b1:7c:ed:a3:8e:67:86:f3:f6:22:57:
58:b6:47:9e:33:58:a5:a3:9c:a1:00:68:5d:d1:f8:42:9a:3e:
1b:ff:8d:0b:2f:82:0d:f7:c2:30:27:a5:4e:34:5b:0a:c4:29:
01:e3:61:a4:d1:cd:3b:3e:98:c9:f2:05:47:09:ad:6e:37:89:
8b:be:b2:c1:20:e2:d3:e7:64:09:19:5e:3c:f0:92:71:9a:cc:
6f:ea:e8:58:03:46:f0:1c:50:98:0f:2c:3f:61:d7:1f:04:9c:
14:96:1e:50:87:4b:f2:35:6b:7e:b7:03:bc:8b:60:22:bb:07:
45:4a:4a:d6:a9:d5:c3:7f:da:e5:23:be:dc:51:e8:8f:d4:a0:
b3:40:66:ca:06:25:ef:99:69:41:82:d7:7f:8b:2c:09:b6:6d:
0e:4b:5a:d2:71:bc:ab:3c:c8:9c:b3:4f:1c:10:4f:9e:6a:a1:
aa:2d:29:33:5b:55:89:87:12:6f:c6:9e:7e:d4:a3:16:12:a1:
77:3b:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:05 2025 by rpki-client