Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/gjDfLn5NExizQJn4SeKzg571csA.roa
File: gjDfLn5NExizQJn4SeKzg571csA.roa (raw, json)
Hash identifier: RoLldbY72GP948U2iqvcth+VJpzfdpElXSU+tc4xQbQ=
Subject key identifier: 82:30:DF:2E:7E:4D:13:18:B3:40:99:F8:49:E2:B3:83:9E:F5:72:C0
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01835ADC9AE00EE9850D220B812C637A0C2E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/gjDfLn5NExizQJn4SeKzg571csA.roa
Signing time: Tue 20 Sep 2022 12:25:50 +0000
ROA not before: Tue 20 Sep 2022 12:25:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 86.38.32.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:dc:9a:e0:0e:e9:85:0d:22:0b:81:2c:63:7a:0c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 20 12:25:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8230df2e7e4d1318b34099f849e2b3839ef572c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:7e:a3:93:16:e9:fc:7d:3a:b2:ba:46:0f:
66:69:fc:26:c7:38:8a:31:79:96:bc:90:e3:ec:f2:
8d:ff:3d:a0:11:71:58:80:b6:60:e0:92:fe:2f:b1:
b0:7d:5d:39:87:ea:29:11:c5:a2:90:42:27:d6:98:
d5:e3:ba:da:7c:fb:84:ce:0c:18:1a:d5:22:ae:64:
5d:2c:69:9b:39:f6:39:54:59:69:27:a4:94:cf:e9:
6b:3a:07:b4:08:ff:a0:59:62:6b:e2:95:ef:49:2a:
99:e5:6a:96:00:1b:cb:80:3d:8c:01:0c:3f:39:a3:
06:fa:a5:7b:96:ce:84:fd:4a:bf:1f:68:ea:30:bd:
bd:d3:7b:6a:19:a6:47:8a:c5:8e:c4:9c:1c:02:b1:
ec:8a:c2:6a:6d:5c:a2:e0:9e:41:7a:69:a3:0f:67:
08:8d:1f:2c:df:21:d8:d7:f4:0b:ed:a5:95:30:c8:
df:d2:ed:cf:42:8c:d9:c3:cc:83:ef:21:d9:1b:1d:
ce:4a:4c:b5:74:da:3d:ec:bd:12:25:1b:89:ac:c8:
83:ed:e7:d8:a8:a7:2f:4b:75:0f:0a:4f:69:ec:8a:
01:45:2d:5c:fd:f7:58:4e:91:e4:be:5f:36:ad:fe:
cc:c2:a6:fb:27:2a:95:f1:95:a5:29:26:dd:3b:2f:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:30:DF:2E:7E:4D:13:18:B3:40:99:F8:49:E2:B3:83:9E:F5:72:C0
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/gjDfLn5NExizQJn4SeKzg571csA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.32.0/24
86.38.226.0/24
Signature Algorithm: sha256WithRSAEncryption
84:58:5d:b9:4f:2a:08:cd:e2:84:f6:08:5e:da:c1:51:cf:62:
6f:ce:6b:03:9e:f2:86:a5:16:5b:d1:53:d8:a4:be:83:04:12:
e8:9b:c4:84:b9:14:0e:7f:87:ca:10:33:b3:a8:8f:05:85:19:
38:f2:2b:97:84:96:60:67:7d:4c:a0:8c:9b:d3:ad:a0:06:60:
a4:86:75:34:ff:72:3e:b1:ea:32:69:d0:43:47:b5:c6:05:82:
b5:04:43:30:a4:5e:a0:2a:c9:09:07:0d:ef:f9:88:4b:68:76:
c2:eb:97:69:52:f6:54:fb:75:14:ee:11:12:e3:85:fd:2a:d6:
1f:fb:1b:ae:0b:06:27:ce:67:4c:f3:34:63:96:7b:32:bd:ea:
5f:98:9d:88:28:5a:8c:19:6f:df:70:7a:4e:b6:77:49:0b:06:
db:e2:16:9b:ec:2c:41:92:48:7f:c8:1e:63:c3:5d:1f:19:6d:
ed:cc:2f:9a:4e:79:64:1f:89:02:0d:a2:b9:81:e1:a9:12:df:
d2:d4:4f:94:99:43:28:49:08:f6:89:55:1d:17:bd:1c:28:7c:
9a:22:b4:82:0c:33:8e:68:a3:1a:2f:1e:52:91:ae:92:fe:8f:
c8:91:5c:09:1b:28:08:6f:79:86:7d:06:c7:aa:86:1b:45:b6:
49:f3:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:59 2025 by rpki-client