Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/GvRPnPT2AkdoF4lSEHH05wg8NmE.roa
File: GvRPnPT2AkdoF4lSEHH05wg8NmE.roa (raw, json)
Hash identifier: uId7MSBfjOvR4XzjtduXn5SerJ0gLngh3jU15kQczw0=
Subject key identifier: 1A:F4:4F:9C:F4:F6:02:47:68:17:89:52:10:71:F4:E7:08:3C:36:61
Certificate issuer: /CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Certificate serial: 0188208676BAA613DD71E4B0154F4104BE21
Authority key identifier: 33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/GvRPnPT2AkdoF4lSEHH05wg8NmE.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 194.62.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:76:ba:a6:13:dd:71:e4:b0:15:4f:41:04:be:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1af44f9cf4f60247681789521071f4e7083c3661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:31:3f:fe:1c:78:6c:c9:cb:4a:04:bc:7b:
65:9a:35:f1:c5:19:5e:96:12:b5:eb:4b:36:13:ca:
70:e8:97:fd:ae:3e:b1:29:dc:a9:31:8a:19:7a:59:
6a:5f:b5:2b:e2:b3:9c:9b:1e:4e:90:9d:86:f0:3f:
a2:00:c6:b7:4f:20:1d:c1:54:f2:60:ee:bf:f4:6c:
4a:b4:a7:fb:ee:c5:b0:6d:e0:b7:9a:b0:0a:1e:81:
9e:bd:da:2e:ac:51:d5:f0:8c:3f:1a:dc:58:2a:2b:
a6:1c:60:81:93:5d:df:cb:d4:23:bd:91:e5:8d:08:
ee:5b:06:09:15:a1:75:85:23:ea:7d:32:ff:37:1f:
34:1b:48:9e:ff:13:a1:d4:b2:7e:11:d4:68:c7:ae:
fc:19:31:41:57:96:64:fc:b8:11:30:ad:40:8b:9f:
a6:01:f2:f7:ed:fb:97:3d:1b:58:6c:eb:05:62:e4:
8a:2b:19:aa:68:5c:0e:69:71:d4:b1:a5:96:06:1c:
cd:6d:0c:85:61:93:49:ec:10:70:68:8a:9f:4c:fa:
c0:46:c4:cd:74:62:6b:1b:ed:96:a1:5d:8d:d4:5f:
d7:46:0b:80:96:b3:ce:2b:fd:00:b6:e3:22:63:f4:
b9:0c:b8:59:5b:18:9d:e0:2b:8c:84:0c:17:26:63:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F4:4F:9C:F4:F6:02:47:68:17:89:52:10:71:F4:E7:08:3C:36:61
X509v3 Authority Key Identifier:
keyid:33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/GvRPnPT2AkdoF4lSEHH05wg8NmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:56:78:5d:ba:77:ac:1f:56:cb:41:9f:72:f0:16:a9:e4:20:
ca:cc:95:c1:78:60:b7:d1:44:4c:47:5e:9e:38:52:f6:84:d1:
26:7c:91:20:bf:ee:1e:c5:a1:f0:02:19:c3:d6:8a:68:c5:63:
29:56:c5:dd:b5:21:fc:98:c9:57:fe:ca:71:81:d6:d9:60:0e:
12:76:90:bd:ab:e3:14:67:68:8c:75:22:3b:99:27:08:c8:cb:
da:6d:ed:b1:8b:fa:c2:0a:04:46:ab:7c:f9:28:ee:59:5a:93:
37:65:15:85:09:40:bf:84:3b:93:4a:d8:40:20:ab:e2:65:c9:
06:ec:91:51:c9:3d:e1:83:9c:15:8a:23:4d:e0:8c:4e:93:50:
1d:9d:fc:a8:e3:8c:a5:f4:3e:78:d4:bc:5b:93:82:eb:9d:6a:
ed:3c:ce:9d:31:de:a4:ca:18:75:e1:6c:31:7d:cf:cf:80:4b:
06:66:9e:ef:99:96:22:bc:bc:62:cf:07:11:4b:23:cd:92:25:
71:ed:3e:b0:b9:69:62:6c:56:8f:ce:01:a9:82:71:59:ce:4d:
63:5f:d8:6d:b9:0f:ed:6b:79:90:d7:46:16:6e:cf:9b:bb:3e:
f9:d6:50:6f:fe:fc:fe:50:89:2a:57:42:0b:38:13:ba:b8:90:
7e:75:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 09:50:51 2023 by rpki-client on console-fra.rpki-client.org