Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/gGHpOSVnPo8GjX3dtBLzrECqmJE.roa
File: gGHpOSVnPo8GjX3dtBLzrECqmJE.roa (raw, json)
Hash identifier: i77ii04FVRBLBDHlm9xvke395LLOWkeHgsuFLe3ufv4=
Subject key identifier: 80:61:E9:39:25:67:3E:8F:06:8D:7D:DD:B4:12:F3:AC:40:AA:98:91
Certificate issuer: /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial: 0182A152D04203A12DDC7A8035D2AA334098
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/gGHpOSVnPo8GjX3dtBLzrECqmJE.roa
Signing time: Mon 15 Aug 2022 11:45:35 +0000
ROA not before: Mon 15 Aug 2022 11:45:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203629
IP address blocks: 2a0c:77c3::/32 maxlen: 32
2a0d:3884::/32 maxlen: 32
2a0d:3880::/32 maxlen: 32
2a0c:77c7::/32 maxlen: 32
2a0c:77c0::/29 maxlen: 29
2a0d:3883::/32 maxlen: 32
2a0d:3885::/32 maxlen: 32
2a0c:77c0::/32 maxlen: 32
2a0c:77c6::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
2a0d:3882::/32 maxlen: 32
2a0c:77c5::/32 maxlen: 32
2a0c:77c1::/32 maxlen: 32
2a0d:3886::/32 maxlen: 32
2a0c:77c4::/32 maxlen: 32
2a0c:77c2::/32 maxlen: 32
2a0d:3887::/32 maxlen: 32
2a0d:3881::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:52:d0:42:03:a1:2d:dc:7a:80:35:d2:aa:33:40:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
Validity
Not Before: Aug 15 11:45:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8061e93925673e8f068d7dddb412f3ac40aa9891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:2c:c1:8f:97:c4:00:62:ed:ef:7e:2e:ce:
92:ba:80:80:ed:bb:5e:f3:ad:dc:fb:1d:8a:82:0a:
27:56:26:e2:3d:7f:79:6d:c1:87:6a:0f:8d:1c:e1:
c5:57:3c:95:ab:cf:1b:4f:ae:72:55:95:aa:f8:2c:
43:4a:a2:51:cc:d0:7c:23:ec:8b:8a:60:f6:77:1b:
56:a3:f0:2c:25:c9:b7:22:80:aa:ce:54:d7:2a:aa:
f1:2f:fc:30:49:80:e5:4d:8e:db:4c:35:7e:17:cc:
c6:b8:4b:65:77:8e:4e:cb:b7:e6:b2:2d:bd:ed:aa:
a8:12:50:5f:18:75:78:5d:66:1b:c7:4c:6c:db:f0:
35:00:cb:9e:60:cd:64:fc:15:9a:d3:9b:98:88:0a:
61:67:67:f4:42:47:8e:1d:1d:e8:f9:55:05:0b:05:
bb:e7:c4:6a:5e:2e:da:af:c0:fb:25:11:bd:37:7d:
04:9c:fd:68:14:90:20:ff:3b:ae:00:38:7e:b8:63:
f1:e7:b6:69:2d:17:97:a6:13:1b:61:9e:4a:88:8a:
5f:53:22:1b:82:a9:18:6c:52:b3:19:01:cc:ad:f1:
16:7f:7b:38:8f:10:20:70:73:4c:c4:74:46:eb:fe:
90:f3:19:f6:1d:5e:9b:c5:96:eb:e7:4b:1a:05:8c:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:61:E9:39:25:67:3E:8F:06:8D:7D:DD:B4:12:F3:AC:40:AA:98:91
X509v3 Authority Key Identifier:
keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/gGHpOSVnPo8GjX3dtBLzrECqmJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:77c0::/29
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
19:b8:c5:7b:17:cc:d8:9e:87:84:10:0c:9a:95:1a:96:45:da:
ef:bc:82:e2:61:39:6d:44:39:e2:56:c0:b0:09:ac:eb:9b:53:
96:4b:72:d5:6b:78:61:a1:e9:ce:89:a5:8a:29:97:8c:51:e7:
23:2b:73:d7:a8:63:54:ed:6a:f2:f7:98:8c:8c:db:a4:82:28:
8d:95:6b:96:e2:7e:fd:fb:28:8c:e2:1f:3f:13:d4:f3:ad:23:
fc:70:a7:5d:59:59:3f:f8:3d:3d:92:1a:86:b6:00:6d:5b:6f:
62:3f:e9:fc:ef:41:0d:dd:51:b7:e2:8d:b3:9c:0a:3c:28:05:
a0:98:c9:58:41:99:99:63:63:74:dc:ca:f9:e8:e3:14:96:60:
d6:21:c7:dc:c7:95:47:84:53:41:9c:68:c3:f0:5d:59:0c:bf:
e4:54:01:c6:60:fa:49:7e:32:8e:b5:f0:d1:77:92:fa:fc:ab:
bd:24:29:b5:59:95:e0:08:3d:bd:cb:ab:a5:4c:23:46:5c:5e:
8a:de:41:ab:d6:47:fc:76:d1:68:20:2e:16:56:50:e1:1c:8a:
c0:1f:38:88:cc:69:1e:f3:81:2d:ad:78:e3:e3:98:20:5b:e5:
be:dd:34:d6:bb:59:b5:c7:54:bc:28:07:97:fa:7b:3d:12:f9:
4f:2f:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org