Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/GhNqttgDWziKulJldiaRxSH-acU.roa
File: GhNqttgDWziKulJldiaRxSH-acU.roa (raw, json)
Hash identifier: J4ubMbmgVSaFt+jwwxn7P1osR0IlYPH427MaRsnydF8=
Subject key identifier: 1A:13:6A:B6:D8:03:5B:38:8A:BA:52:65:76:26:91:C5:21:FE:69:C5
Certificate issuer: /CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Certificate serial: 032C97
Authority key identifier: 5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/GhNqttgDWziKulJldiaRxSH-acU.roa
Signing time: Thu 03 Feb 2022 16:44:55 +0000
ROA not before: Thu 03 Feb 2022 16:44:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.112.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208023 (0x32c97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Validity
Not Before: Feb 3 16:44:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a136ab6d8035b388aba5265762691c521fe69c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:f2:d3:1e:2e:c1:de:a5:90:58:8d:7c:eb:
87:14:94:c4:dc:96:79:6a:f9:47:4f:25:6f:0f:05:
4c:31:8a:33:f3:76:4e:39:fc:4f:49:59:aa:76:ae:
aa:4a:ba:ff:11:06:de:d7:71:57:45:09:24:d7:8a:
68:43:9d:7b:e2:bd:10:51:f1:ec:ec:94:c0:63:0a:
5e:3e:cc:2c:16:0a:8a:c5:fb:2a:87:d3:93:c8:2d:
3f:4b:5a:3c:bc:98:ac:08:e8:75:f4:2d:46:e8:92:
02:09:db:55:95:16:39:93:bf:fb:c2:18:b8:c8:23:
56:3f:ca:73:96:fc:71:9c:58:24:d9:47:f7:7c:af:
7d:cb:66:9e:eb:93:bf:1f:d3:0d:48:68:fd:e4:2b:
51:c0:e5:37:44:53:0d:f0:0c:39:ec:f0:af:13:98:
cf:67:32:55:54:4d:df:65:4b:f0:1f:8d:5e:73:da:
4e:cf:79:14:5d:79:fe:15:9c:9d:64:74:ce:29:6e:
e0:30:0f:d2:5c:7f:e8:ed:77:74:1e:73:a7:74:30:
c8:46:d3:12:13:aa:44:98:96:a8:09:40:bd:a8:8b:
94:39:cb:99:8d:b4:c4:2e:d9:9f:dc:19:de:7d:b1:
38:1f:1e:af:1e:86:93:15:27:b6:37:6a:28:94:3d:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:6A:B6:D8:03:5B:38:8A:BA:52:65:76:26:91:C5:21:FE:69:C5
X509v3 Authority Key Identifier:
keyid:5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/GhNqttgDWziKulJldiaRxSH-acU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9c:11:ac:a7:51:26:dd:f4:ff:54:f2:4f:da:67:fa:49:a8:
28:52:97:eb:d3:cb:ec:2a:d7:b9:66:67:22:ec:cf:6d:69:3b:
1c:a7:9a:d1:9f:4d:a2:2b:71:c7:be:54:1a:94:7b:b0:d1:3b:
bd:85:81:37:d7:a4:36:21:96:27:f3:39:48:14:f0:12:37:f2:
29:cb:0b:b0:46:12:ee:18:0f:d7:2c:08:5f:e8:41:69:b0:22:
fa:95:c1:b9:41:c5:be:9d:23:d0:e0:59:9c:06:1f:57:02:80:
86:50:46:6a:fe:ac:5b:61:0b:7b:da:94:16:94:2e:9e:8f:cd:
a3:85:7a:6e:92:25:42:4c:3d:c5:0a:b0:ac:41:06:fa:18:9f:
e3:5d:ba:74:87:58:2b:6d:5a:ae:07:5f:67:1a:6b:d8:78:c4:
5f:6b:f6:98:84:2a:37:c6:7e:82:f7:1a:48:55:7c:b7:8e:dc:
d5:15:c3:41:15:7a:db:a4:d3:76:b3:a9:ba:58:66:a0:a9:3b:
14:83:4b:e5:69:a6:ae:f1:19:fa:ae:4c:d0:f0:7f:98:2b:bf:
9b:2a:da:d6:76:96:11:88:60:e5:16:54:7d:81:01:11:ce:df:
35:6f:e4:00:c3:fa:af:ed:11:cb:ee:80:fe:19:a8:3d:98:51:
8a:c4:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org