Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/GqjUY4ahLetoigNqut1Ufd2H7GE.roa
File: GqjUY4ahLetoigNqut1Ufd2H7GE.roa (raw, json)
Hash identifier: x6OVGbwPK7jp8pISIGqHfWKu5QZ6QsBZs4A4GeszG2A=
Subject key identifier: 1A:A8:D4:63:86:A1:2D:EB:68:8A:03:6A:BA:DD:54:7D:DD:87:EC:61
Certificate issuer: /CN=532c801f4c8502937218368b4e65d0e463d7c9b9
Certificate serial: 01FD6385
Authority key identifier: 53:2C:80:1F:4C:85:02:93:72:18:36:8B:4E:65:D0:E4:63:D7:C9:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyyAH0yFApNyGDaLTmXQ5GPXybk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/GqjUY4ahLetoigNqut1Ufd2H7GE.roa
Signing time: Sat 01 Jan 2022 06:01:24 +0000
ROA not before: Sat 01 Jan 2022 06:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211439
IP address blocks: 193.238.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33383301 (0x1fd6385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532c801f4c8502937218368b4e65d0e463d7c9b9
Validity
Not Before: Jan 1 06:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1aa8d46386a12deb688a036abadd547ddd87ec61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:0e:cc:ea:7a:b8:70:fd:c9:4d:80:93:c4:
99:ca:91:5d:f5:e4:3f:c6:fb:47:b8:d8:97:fb:85:
5d:81:12:a9:86:59:89:a2:f0:d3:f3:ff:b2:e6:15:
72:2a:be:0b:bd:bf:e1:ed:0b:5f:4f:ec:db:2e:0c:
ce:1f:68:90:4d:87:b0:4f:ed:ce:95:37:5c:1e:7f:
00:65:0a:b9:02:b6:15:28:77:9c:6d:8b:bf:3e:1d:
a5:86:71:a3:80:86:34:47:28:06:7b:5f:e8:9d:7c:
6e:a4:4d:bd:11:fe:41:46:6e:a9:b0:55:a6:d4:2e:
5f:17:a7:98:bf:6c:40:83:a7:1d:44:5e:40:bd:83:
d1:dd:dc:18:33:9f:06:59:bb:f1:84:ed:2e:17:c4:
5a:ea:36:d6:82:2b:1b:22:ce:73:94:a8:ad:92:b2:
4f:17:4d:23:a3:4e:07:52:8e:6a:c8:6b:12:5e:56:
fb:62:c5:59:9c:6c:bf:68:41:16:60:dc:c7:70:14:
97:2b:64:c5:dd:86:4e:36:1d:88:dd:50:8f:92:d7:
9e:78:90:8c:4a:1b:dc:41:a3:ee:80:78:af:26:fe:
06:82:b7:4d:81:65:57:f7:08:3f:90:cf:3b:b3:31:
1f:7c:aa:4b:ca:8c:72:b0:a9:8c:17:c8:b7:b8:cd:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A8:D4:63:86:A1:2D:EB:68:8A:03:6A:BA:DD:54:7D:DD:87:EC:61
X509v3 Authority Key Identifier:
keyid:53:2C:80:1F:4C:85:02:93:72:18:36:8B:4E:65:D0:E4:63:D7:C9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyyAH0yFApNyGDaLTmXQ5GPXybk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/GqjUY4ahLetoigNqut1Ufd2H7GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/UyyAH0yFApNyGDaLTmXQ5GPXybk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ff:1f:d4:4f:51:00:56:3f:1a:f9:41:13:c0:b4:a5:b5:75:
53:b8:d0:e6:d1:e8:24:c6:02:37:cf:de:d6:99:7e:52:37:a0:
ac:c1:24:05:92:1b:df:7b:86:e7:48:c4:eb:2c:43:90:1c:75:
19:9d:a8:08:70:99:8a:2d:8a:09:64:cd:c7:09:0f:2c:9b:72:
7d:f5:f2:8d:9a:01:aa:35:0b:39:4b:e3:38:f7:af:96:a8:e3:
33:ab:83:7f:9e:41:4c:ab:4f:25:1e:b1:9d:c6:92:1d:ce:a9:
03:be:c1:0b:9c:88:c4:f0:c9:a1:1e:87:7f:d7:f0:3d:e5:0b:
c4:09:e0:23:c3:7d:a8:a0:bb:93:82:08:8d:9c:56:30:f0:d8:
69:c0:3b:1d:80:1c:5f:9f:8f:93:10:5f:73:5e:af:c7:ac:a4:
72:cc:f3:04:06:eb:d2:8e:2f:70:de:92:a2:70:6b:a0:9e:d8:
1f:54:6e:2d:64:dc:2c:74:f3:cd:6e:d7:9b:3d:f7:89:73:82:
37:7e:9a:94:48:9f:0c:71:34:62:4a:ef:7f:23:77:a9:ad:f7:
07:a0:05:8e:5c:be:f6:59:be:aa:5a:e9:24:f9:6f:cc:ed:aa:
a1:fb:db:7e:74:c9:be:28:43:04:3d:62:07:1f:9b:a0:59:f5:
c0:5e:ed:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:56 2024 by rpki-client on console-fra.rpki-client.org