Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/G-N0ewdbPuQTwxF9OjTcSMPoMh0.roa
File: G-N0ewdbPuQTwxF9OjTcSMPoMh0.roa (raw, json)
Hash identifier: S5tCoCrK8jB8YU4sW/Z3WqWy5Rf4nCzIh3XI71STmwo=
Subject key identifier: 1B:E3:74:7B:07:5B:3E:E4:13:C3:11:7D:3A:34:DC:48:C3:E8:32:1D
Certificate issuer: /CN=891d6101d729bc95597da528604ec0b0b7e0042c
Certificate serial: 0181ED3FCBBA80258ADE4CAD1A23844C7EC7
Authority key identifier: 89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/G-N0ewdbPuQTwxF9OjTcSMPoMh0.roa
Signing time: Mon 11 Jul 2022 12:33:10 +0000
ROA not before: Mon 11 Jul 2022 12:33:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 86.104.192.0/24 maxlen: 24
86.104.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:3f:cb:ba:80:25:8a:de:4c:ad:1a:23:84:4c:7e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891d6101d729bc95597da528604ec0b0b7e0042c
Validity
Not Before: Jul 11 12:33:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1be3747b075b3ee413c3117d3a34dc48c3e8321d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:e0:4e:5a:55:78:d7:9d:07:ae:57:d0:61:
d8:9e:31:8a:db:bb:af:ce:60:37:fe:68:c7:06:33:
2d:f1:4a:77:e4:a8:a4:9e:e2:75:a6:61:00:27:c1:
92:e6:ed:be:e6:06:fb:0d:34:2c:1f:28:ca:d9:3e:
fa:3f:c8:8b:b5:96:03:d5:24:62:4f:1e:dc:53:0e:
6b:e1:9a:29:43:8a:a0:84:77:85:40:3e:11:f0:ad:
70:47:57:12:35:5e:89:37:92:71:d8:51:c3:7a:27:
71:2b:f2:f1:c9:c5:2b:4c:83:a5:b5:5a:2a:1c:e3:
30:9e:97:6a:ff:b4:a2:83:53:b1:82:43:76:a5:b4:
71:0c:87:75:32:62:e2:c9:cd:a2:d9:35:4b:42:4f:
30:83:d6:ad:dd:7d:3a:a9:79:04:b2:af:89:b2:f2:
fd:b5:06:20:64:51:97:6f:70:20:9b:2f:1e:14:37:
0a:a9:69:9d:9e:4a:25:48:a4:e7:b5:42:d7:85:97:
8b:31:af:5b:2d:dc:7d:88:51:38:35:0b:50:86:3a:
32:a1:ab:5b:db:42:6d:07:35:01:d6:45:16:28:51:
db:aa:f8:8b:5c:1d:30:f9:c8:ec:57:80:ee:0b:76:
e3:35:7c:db:44:d9:e0:00:70:db:31:de:17:94:cc:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E3:74:7B:07:5B:3E:E4:13:C3:11:7D:3A:34:DC:48:C3:E8:32:1D
X509v3 Authority Key Identifier:
keyid:89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/G-N0ewdbPuQTwxF9OjTcSMPoMh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/iR1hAdcpvJVZfaUoYE7AsLfgBCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.19.0/24
86.104.192.0/24
Signature Algorithm: sha256WithRSAEncryption
14:17:0f:4d:46:93:76:64:61:9c:a0:96:bc:6d:b2:85:39:d4:
f4:d6:c4:d2:5c:10:90:e1:38:1e:a9:f0:10:0a:fc:a6:ae:be:
62:10:6b:5b:19:36:88:b6:66:0e:05:a2:67:28:37:02:8b:3b:
2c:e8:a0:e8:95:af:84:ce:5d:7c:c8:b5:48:84:02:24:c2:71:
a7:09:cc:66:c6:90:76:bd:a2:9b:53:7d:4b:f3:4b:91:e0:be:
3c:29:c5:6c:43:69:8c:5a:c0:6a:c7:32:62:f5:9e:0b:43:68:
54:6b:5b:fb:5f:e1:33:a2:5c:b6:c6:ab:9b:f1:0c:50:c3:d9:
94:dd:cf:3b:07:24:42:b6:26:46:d5:07:44:31:16:10:03:82:
75:1e:38:a7:51:4d:bb:c6:74:20:77:20:10:02:66:7d:62:14:
82:db:da:86:ad:ed:69:ce:8f:fe:87:71:b6:79:b6:f2:1a:29:
10:47:2d:f0:a2:01:24:f8:21:f9:ed:2d:7b:c5:25:94:94:b2:
af:a2:b9:ab:7a:99:48:c2:a9:be:83:93:0d:7f:d3:d3:d8:f2:
f0:d1:84:0b:2c:62:87:5c:c2:c5:53:92:59:57:b3:52:5e:31:
77:86:3d:ba:5e:ea:e9:79:6b:6a:f9:92:84:54:14:86:ef:e3:
22:5e:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:06 2023 by rpki-client on console-ams.rpki-client.org