Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/kS25FUnz6IbWglLBUnduX_gsi_o.roa
File: kS25FUnz6IbWglLBUnduX_gsi_o.roa (raw, json)
Hash identifier: IXJGpjBEkPbDltZ8wvnXV68qipaDbbMTL2f51Uf7FNg=
Subject key identifier: 91:2D:B9:15:49:F3:E8:86:D6:82:52:C1:52:77:6E:5F:F8:2C:8B:FA
Certificate issuer: /CN=0ecf600f3311944dc4149f693db57735a9292c86
Certificate serial: 01856F54A06B5C61683DD32CD1CA2EB4BDFD
Authority key identifier: 0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/kS25FUnz6IbWglLBUnduX_gsi_o.roa
Signing time: Sun 01 Jan 2023 21:54:55 +0000
ROA not before: Sun 01 Jan 2023 21:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 194.180.6.0/23 maxlen: 23
194.180.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:a0:6b:5c:61:68:3d:d3:2c:d1:ca:2e:b4:bd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecf600f3311944dc4149f693db57735a9292c86
Validity
Not Before: Jan 1 21:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=912db91549f3e886d68252c152776e5ff82c8bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:7d:15:ca:31:81:d4:a2:1d:b0:ca:a7:81:
cd:b5:09:aa:15:27:04:95:92:4a:b7:09:85:08:2f:
8f:a5:12:f3:e9:89:2a:26:c7:ca:ff:cd:59:a4:7e:
9d:bf:fa:c5:d9:13:61:33:bf:16:6c:f1:1c:75:9a:
e6:5c:8c:c9:4f:d3:ac:a6:6b:40:c4:4f:e0:b4:da:
58:d8:dd:fa:c4:0e:c3:78:2b:98:e1:3a:18:00:b9:
c9:8d:d7:2d:c3:5a:83:c0:ca:82:8e:3c:c3:79:78:
5d:72:fc:8e:33:52:2c:b6:9e:87:79:70:48:b2:c9:
88:78:ec:84:56:91:ef:ac:09:a5:ec:27:31:2a:3b:
7a:cc:f7:56:e1:85:60:63:d3:70:76:dd:b4:bf:c4:
ad:bf:fb:53:82:4b:d9:88:2c:84:32:7a:22:93:ce:
20:60:2c:c4:cd:8b:63:dc:56:41:85:1e:52:af:95:
f2:02:3d:0d:6b:06:5e:2a:5c:e8:8f:18:15:94:4d:
64:79:0b:22:ec:cd:f4:6a:43:7f:e6:4b:bb:32:26:
51:b1:15:91:5c:2d:4f:95:37:c1:cd:9e:fe:7b:eb:
47:9f:c3:3f:2b:6a:73:3e:bb:95:39:37:aa:e4:6f:
ea:c8:f8:02:d7:41:20:91:00:92:18:ed:4c:16:6d:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:B9:15:49:F3:E8:86:D6:82:52:C1:52:77:6E:5F:F8:2C:8B:FA
X509v3 Authority Key Identifier:
keyid:0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/kS25FUnz6IbWglLBUnduX_gsi_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.6.0/23
194.180.26.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:b1:e3:89:ea:28:ff:1b:20:61:83:6c:ff:df:97:93:34:a8:
6a:1c:f6:42:05:fb:a7:27:b7:cd:ec:76:94:9c:94:e7:66:a7:
09:72:7e:1a:2d:88:20:f1:ec:d1:06:5c:ac:a5:a1:3c:e0:27:
c8:f6:db:da:41:64:fa:37:7a:09:be:bc:55:04:a6:ff:b2:2a:
c1:2e:a6:76:35:44:40:26:97:c5:bd:bb:13:3c:ad:3b:63:48:
dd:21:c8:d7:c4:53:95:67:51:1d:98:e5:86:9a:4e:0a:21:30:
57:58:02:7f:74:b7:0f:0c:43:82:9b:ad:37:35:f9:77:22:b3:
58:29:a0:88:cc:1e:b1:45:fc:cc:89:60:cd:63:3d:6d:d5:f2:
52:43:c2:85:e2:5b:bf:c3:81:31:7b:95:59:30:ae:39:7c:57:
50:72:28:ad:56:d7:c7:8a:04:d3:bf:8a:7a:ac:56:54:1e:6c:
e2:85:59:9e:97:14:c8:8e:c1:b5:ff:ef:f0:78:8e:f6:e0:7c:
d4:e6:0f:2b:8f:f1:6a:37:e2:bc:40:c7:68:f3:33:95:7c:f6:
e6:15:36:ff:63:ac:60:b4:6e:88:5c:65:09:d5:b8:0c:82:2f:
3c:d8:3d:10:16:b4:40:03:b2:aa:3f:d7:41:9f:72:95:1f:b6:
e6:1b:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:30 2024 by rpki-client on console-fra.rpki-client.org