Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/GmNrvnPRZyOFGvZ11ca18Bkt0yk.roa
File: GmNrvnPRZyOFGvZ11ca18Bkt0yk.roa (raw, json)
Hash identifier: Lh2dDcrBQ7qxeWZp6U33ADdscPq+Rc9mn2aMgz2pSeA=
Subject key identifier: 1A:63:6B:BE:73:D1:67:23:85:1A:F6:75:D5:C6:B5:F0:19:2D:D3:29
Certificate issuer: /CN=36fab4897fb14ee1e09f85200efe44d5e70a69a8
Certificate serial: 018964C256DC439A5DEE79B53C418E4ED103
Authority key identifier: 36:FA:B4:89:7F:B1:4E:E1:E0:9F:85:20:0E:FE:44:D5:E7:0A:69:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nvq0iX-xTuHgn4UgDv5E1ecKaag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/GmNrvnPRZyOFGvZ11ca18Bkt0yk.roa
Signing time: Mon 17 Jul 2023 16:50:04 +0000
ROA not before: Mon 17 Jul 2023 16:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.211.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c2:56:dc:43:9a:5d:ee:79:b5:3c:41:8e:4e:d1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fab4897fb14ee1e09f85200efe44d5e70a69a8
Validity
Not Before: Jul 17 16:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a636bbe73d16723851af675d5c6b5f0192dd329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:02:19:cd:25:f9:8a:58:3b:ae:2b:3f:c9:
d0:8b:c8:2a:63:9e:bf:e2:71:87:c2:e2:03:70:2e:
56:b3:ad:88:fd:e1:6a:fc:ad:11:a5:70:7d:dc:a7:
ae:3b:2a:36:85:a8:34:ae:fb:e8:97:7b:d1:2d:25:
77:65:d4:4b:e9:d1:d2:74:ee:ca:df:4e:01:8d:b2:
3f:5e:98:1f:fe:5e:25:c8:cc:5f:3d:55:b9:44:4c:
b5:64:34:0d:df:91:99:7a:70:dc:ec:87:b8:03:09:
9d:98:90:2e:45:de:85:60:a1:d4:1e:c3:f7:a3:b8:
de:be:ad:b4:2e:80:0b:7f:0b:95:1f:fa:ba:ec:da:
28:24:ae:0b:9f:29:8c:ff:05:cc:e4:d5:e6:bd:4f:
ca:f9:fb:35:1b:3d:10:bb:a5:4a:9e:94:a0:55:10:
c6:20:08:3f:67:4d:4e:8d:3c:6d:85:33:e8:9e:09:
29:3f:61:c9:41:28:be:a2:ed:58:50:f9:8f:9e:43:
b0:22:5d:9b:f3:b0:9f:fc:6c:32:6f:8c:2d:f0:57:
98:2b:0e:70:f7:8b:06:d2:59:06:b1:71:d8:98:f1:
9d:87:78:dc:2b:f4:5d:d7:52:c1:c1:13:74:6a:be:
9b:04:42:2c:b1:e1:dc:27:8a:40:15:2e:d7:92:a7:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:63:6B:BE:73:D1:67:23:85:1A:F6:75:D5:C6:B5:F0:19:2D:D3:29
X509v3 Authority Key Identifier:
keyid:36:FA:B4:89:7F:B1:4E:E1:E0:9F:85:20:0E:FE:44:D5:E7:0A:69:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nvq0iX-xTuHgn4UgDv5E1ecKaag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/GmNrvnPRZyOFGvZ11ca18Bkt0yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/Nvq0iX-xTuHgn4UgDv5E1ecKaag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:bf:5a:9c:ff:4d:0a:22:b7:a9:da:3e:2b:c3:59:c9:f7:c4:
01:9f:8f:13:97:ba:8b:ec:4f:07:f8:08:7a:b0:c0:f5:ca:7f:
16:4b:bd:f2:bc:f6:16:39:2e:48:82:52:db:c4:43:2e:d1:07:
ed:7c:71:cf:64:0e:79:cb:39:0a:68:55:e8:0b:88:65:84:39:
a9:e7:cc:80:3b:91:bc:ac:06:7d:ab:1e:f7:9d:40:0d:51:c0:
10:a2:7f:0c:b6:f5:c6:77:f4:1f:99:e9:d1:58:f9:16:83:cb:
62:55:98:f0:93:4a:98:13:2c:e9:04:2f:8b:28:4b:f3:db:2d:
7c:5b:86:ca:23:8d:64:46:a1:87:6b:a0:9d:ec:2d:24:77:da:
9f:eb:cb:28:79:31:80:3c:c4:0e:5b:1e:24:96:d1:1d:c6:62:
57:c3:7c:ce:09:04:4f:19:41:ee:70:ae:3a:0e:92:88:b1:43:
34:53:fa:8a:e4:c6:85:f7:74:7f:e0:be:f2:1e:cf:fb:a6:01:
5f:6f:ae:21:8c:4e:56:36:fd:75:d1:71:98:8b:d5:d3:22:c4:
6f:bf:1d:4a:48:6a:e1:26:24:bb:4b:ad:23:c1:c3:b3:ba:b5:
8f:d6:3c:60:d7:79:7e:14:bf:9a:9d:4b:26:0d:2c:db:3c:80:
4c:28:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:35 2025 by rpki-client