Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/GQPm00cJtTN7ByLxY-Usmqltfvk.roa
File: GQPm00cJtTN7ByLxY-Usmqltfvk.roa (raw, json)
Hash identifier: ePelrFf9Xag1hBN/f9Gjb3SQmm/PffXmO+Bh9ooiDR4=
Subject key identifier: 19:03:E6:D3:47:09:B5:33:7B:07:22:F1:63:E5:2C:9A:A9:6D:7E:F9
Certificate issuer: /CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Certificate serial: 01856F66D93F915F389738CE489B35FF963A
Authority key identifier: D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/GQPm00cJtTN7ByLxY-Usmqltfvk.roa
Signing time: Sun 01 Jan 2023 22:14:49 +0000
ROA not before: Sun 01 Jan 2023 22:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.187.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d9:3f:91:5f:38:97:38:ce:48:9b:35:ff:96:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Validity
Not Before: Jan 1 22:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1903e6d34709b5337b0722f163e52c9aa96d7ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e7:94:f7:09:06:2b:49:9e:93:b4:13:ad:5f:
18:40:c1:3c:4a:a7:d3:55:d4:62:8c:79:ed:bd:e2:
2c:20:c5:d2:fd:f7:aa:b4:fc:a4:e7:c3:35:f5:66:
0b:20:6b:8e:3a:29:62:7d:1f:6a:98:f6:c8:31:d4:
21:f0:82:de:53:81:c1:03:d8:f4:16:5f:17:8b:7a:
25:5a:43:46:37:c9:17:46:ff:65:17:53:04:ab:e2:
c4:ee:45:dc:20:98:02:a8:97:8e:c8:62:b6:52:1a:
3e:e1:6f:39:bb:88:d4:5c:a2:2f:3d:c4:75:fd:53:
e5:25:3c:71:eb:d9:45:b1:2c:13:54:6a:70:41:e7:
b6:31:45:1a:ac:d0:47:a3:51:92:b8:a6:7d:84:8a:
17:f9:d6:a6:80:1d:ed:b6:b6:9c:f5:c9:b9:ee:4a:
c5:08:29:61:5a:03:bd:08:6a:1b:a6:c7:6f:52:dc:
7b:20:0c:d8:5c:da:68:d9:bd:39:31:d4:3b:2c:2c:
cb:79:d4:c9:6b:26:60:72:e2:07:91:41:82:d5:18:
04:26:c2:bb:9a:39:14:e5:f6:9d:43:8f:f0:00:e7:
0d:eb:0b:de:f9:4d:96:fa:40:f1:69:82:2a:d2:2e:
8d:20:ff:7e:aa:cf:d5:58:c6:3c:53:d1:0e:b9:bf:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:03:E6:D3:47:09:B5:33:7B:07:22:F1:63:E5:2C:9A:A9:6D:7E:F9
X509v3 Authority Key Identifier:
keyid:D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/GQPm00cJtTN7ByLxY-Usmqltfvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b5:9d:38:4f:63:c7:0b:1a:4f:1e:b9:33:aa:e7:58:ac:2d:
3c:4a:59:d5:a8:4a:5a:68:23:92:13:88:0b:66:af:43:fe:e0:
3d:52:35:f6:67:24:fe:d7:dd:cd:31:20:64:ce:cc:ce:26:65:
8a:1d:dd:d0:f7:d1:55:54:e8:81:e7:4c:34:6d:d4:db:2d:6c:
76:ba:9d:9e:8a:a0:09:45:84:01:16:76:a8:80:bb:26:0d:cf:
ac:a5:fa:1f:6a:b5:97:db:4b:98:2a:bc:e9:f2:48:23:c9:ea:
01:61:50:67:04:99:9a:ee:66:67:ff:68:f5:45:bb:5e:c0:91:
5d:e2:4a:1f:0b:0a:ff:3c:ee:a4:76:8c:aa:d8:9e:af:0c:c0:
07:22:69:21:e8:7c:7c:42:f8:b8:bb:c1:67:8c:56:53:fd:a4:
b4:d4:cf:2c:b7:e8:92:d7:69:75:ed:36:ec:d0:fd:8d:63:15:
18:3f:d5:ed:e6:96:5c:ca:4e:88:e6:42:b4:8d:42:bb:d1:d8:
e5:d5:2c:7c:83:ac:7f:53:1b:ba:66:fa:95:6f:b9:95:e8:e2:
81:5a:8b:e3:ec:ea:d0:c0:ed:9e:74:1e:77:72:ec:ce:82:ea:
91:4f:0d:12:1c:64:7f:15:4f:1a:33:f2:db:2b:eb:fd:b0:5b:
87:39:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:06 2025 by rpki-client