Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/gHlOcJJd_D1THataR2qtktclOrc.roa
File: gHlOcJJd_D1THataR2qtktclOrc.roa (raw, json)
Hash identifier: ZoAdunlossuNrGzGxmaBdvh/I0tXly1igmdP5y6+8zo=
Subject key identifier: 80:79:4E:70:92:5D:FC:3D:53:1D:AB:5A:47:6A:AD:92:D7:25:3A:B7
Certificate issuer: /CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Certificate serial: 01856FCBA9C9F73D44BE96BB364EFC1FCF29
Authority key identifier: C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/gHlOcJJd_D1THataR2qtktclOrc.roa
Signing time: Mon 02 Jan 2023 00:04:56 +0000
ROA not before: Mon 02 Jan 2023 00:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203382
IP address blocks: 185.97.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a9:c9:f7:3d:44:be:96:bb:36:4e:fc:1f:cf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Validity
Not Before: Jan 2 00:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80794e70925dfc3d531dab5a476aad92d7253ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:0b:07:41:48:f4:c4:26:bf:0b:4b:e2:93:
f7:b8:bd:6a:7f:ca:f2:30:91:5d:d1:03:c3:4c:1c:
dc:43:d0:d5:e6:d9:c6:8a:41:4e:11:18:4f:2c:de:
ae:b1:79:72:7e:3c:f7:e6:1a:a8:14:6f:1e:40:c5:
f3:67:a0:dd:21:21:07:85:7b:f5:e5:54:d4:8b:28:
85:23:32:6c:12:a1:eb:79:69:d9:de:6a:9f:aa:35:
09:f5:25:4a:88:5b:02:47:33:53:ba:0b:dd:1a:2f:
63:57:30:c6:4b:d7:93:ed:6a:40:79:f8:1e:62:e5:
3c:75:40:21:af:32:fd:4d:a2:29:73:ce:a3:3c:d7:
9b:75:ed:58:3c:8c:04:9b:a4:e0:35:0b:f5:23:65:
4b:6c:42:5f:61:b3:d0:bd:48:b4:75:49:db:69:6a:
8b:6d:c1:70:49:10:a0:22:51:aa:a5:9e:b9:f9:25:
66:f2:27:d8:1a:a8:5a:0a:a1:f0:c0:03:04:27:3c:
dc:81:88:0e:9b:39:4c:b5:9c:d6:a9:d7:9e:99:ab:
a3:ca:98:08:b7:bd:f3:3e:c7:ea:4b:66:4e:66:f1:
34:80:14:54:2f:b9:fd:bd:3b:76:b0:96:23:f9:5a:
eb:ce:37:f1:f5:d1:dd:f0:d2:db:f6:b5:87:12:5e:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:79:4E:70:92:5D:FC:3D:53:1D:AB:5A:47:6A:AD:92:D7:25:3A:B7
X509v3 Authority Key Identifier:
keyid:C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/gHlOcJJd_D1THataR2qtktclOrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/xMIKsvJE7Gp_Cc8esXUujDKCSPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.100.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8d:ce:1d:d3:c5:d0:5c:5b:e5:48:22:cd:c5:56:1c:74:76:
3d:40:77:03:b9:96:95:c3:3a:af:60:91:e3:5a:77:bc:e5:b9:
a2:00:bc:33:ed:fb:a4:4b:42:4a:83:22:10:73:5a:80:f3:50:
aa:ce:72:f8:b9:12:b6:8d:d8:06:16:88:6b:f4:55:71:7a:66:
99:af:14:58:15:e8:35:57:ae:8f:50:99:4e:08:83:e5:9c:36:
58:6c:dd:cb:c8:8b:40:aa:76:4f:1b:f3:76:55:4c:a6:6a:64:
19:57:e6:3e:b7:38:ad:2d:47:e5:53:9d:5c:f2:6e:34:77:ae:
35:25:6d:a4:c8:ef:19:ca:c1:77:ea:ae:f0:c6:1e:2a:12:a7:
d2:3a:ce:8b:90:bd:62:ff:4f:97:0a:0f:f8:8b:00:2e:8a:3f:
43:b1:bb:61:df:05:8a:ca:ca:ab:b1:21:25:23:b3:9b:48:7c:
bc:39:5a:83:fa:24:86:e2:c3:26:00:a0:58:7a:1b:fc:17:19:
a9:e1:e1:56:fd:0c:e3:a5:32:59:bf:4a:2b:64:7f:a7:33:d2:
a9:77:bd:af:ef:8a:42:f4:ad:4f:74:09:eb:fc:f7:5c:43:c6:
c4:bd:ed:41:f1:9a:8a:13:f9:02:14:ed:c6:07:78:ca:5a:90:
46:21:c0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:10 2024 by rpki-client on console-fra.rpki-client.org