Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/GBRb6fPs9zt623UuQ4fgOMDm7R4.roa
File: GBRb6fPs9zt623UuQ4fgOMDm7R4.roa (raw, json)
Hash identifier: yqymEa1Pm+wJzSp5qhbmUWv3H6WcofDKzM2DuRzAjoM=
Subject key identifier: 18:14:5B:E9:F3:EC:F7:3B:7A:DB:75:2E:43:87:E0:38:C0:E6:ED:1E
Certificate issuer: /CN=de5499be872f62f2d04dc4bc638309d77b89a387
Certificate serial: 018CC56E5099BC8386037D365412C3EDEDED
Authority key identifier: DE:54:99:BE:87:2F:62:F2:D0:4D:C4:BC:63:83:09:D7:7B:89:A3:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lSZvocvYvLQTcS8Y4MJ13uJo4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/GBRb6fPs9zt623UuQ4fgOMDm7R4.roa
Signing time: Mon 01 Jan 2024 14:29:50 +0000
ROA not before: Mon 01 Jan 2024 14:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200296
IP address blocks: 213.108.240.0/23 maxlen: 23
213.108.242.0/24 maxlen: 24
213.108.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:50:99:bc:83:86:03:7d:36:54:12:c3:ed:ed:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5499be872f62f2d04dc4bc638309d77b89a387
Validity
Not Before: Jan 1 14:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18145be9f3ecf73b7adb752e4387e038c0e6ed1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:d8:84:6c:18:b2:1f:93:ab:12:df:ff:72:
ee:5a:95:16:42:1c:44:b1:3a:83:98:bb:6d:46:0d:
5b:17:05:b9:74:b9:d0:e6:66:cd:94:e6:40:46:a8:
4f:82:eb:bd:75:e6:63:cf:4a:81:ef:7b:25:f6:30:
18:3c:13:82:5d:af:06:f0:47:16:8a:40:4b:5b:90:
dc:6a:ec:86:3d:e1:dc:05:2f:c1:8d:eb:48:42:92:
fe:cd:b8:03:c3:3f:12:0e:2a:32:9e:0c:6f:df:5b:
01:30:6d:61:1d:7c:00:39:58:11:a5:4e:14:c8:b7:
ce:a7:bb:77:7c:66:7d:58:69:ca:72:4b:e5:98:73:
80:6f:de:63:45:85:f3:e1:87:63:10:bb:2b:08:40:
93:7a:58:5e:1b:c3:e3:2d:db:a4:65:4a:65:f1:6c:
3d:c7:fa:34:42:77:6a:e7:df:69:b9:80:52:7e:49:
26:89:68:20:e0:a5:3e:64:76:3c:d2:93:e4:5f:2d:
bf:74:82:60:a5:6a:be:bc:b4:35:9a:1d:13:44:e0:
c6:19:48:8e:09:15:38:7b:18:34:8c:b1:1f:e0:32:
0e:40:fc:23:47:1a:b3:f5:97:8d:5f:76:8e:cd:ac:
cb:47:8f:06:85:d4:d5:24:e0:67:da:be:82:34:2b:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:5B:E9:F3:EC:F7:3B:7A:DB:75:2E:43:87:E0:38:C0:E6:ED:1E
X509v3 Authority Key Identifier:
keyid:DE:54:99:BE:87:2F:62:F2:D0:4D:C4:BC:63:83:09:D7:7B:89:A3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lSZvocvYvLQTcS8Y4MJ13uJo4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/GBRb6fPs9zt623UuQ4fgOMDm7R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/3lSZvocvYvLQTcS8Y4MJ13uJo4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:06:d6:10:d8:b8:be:29:88:c7:b9:d8:1f:d1:f6:7e:89:cf:
dd:cf:47:06:64:b8:81:41:7a:66:b4:d8:2e:d5:0d:6b:72:ff:
e7:52:61:0c:53:38:5e:88:01:28:c5:9d:47:75:14:bc:c6:3b:
62:d9:1f:30:11:b7:2f:13:9d:26:5a:98:a5:86:48:aa:66:2f:
c6:81:d9:ca:72:a0:95:4d:3f:78:35:65:8c:ea:1b:12:cc:3f:
78:d7:f2:d2:c3:7a:b1:ab:70:8a:7d:2e:0f:56:fc:21:a0:df:
d5:b5:9b:b5:9c:5b:0a:12:97:b9:5a:3d:30:9a:9d:3b:0f:96:
6a:e1:9e:55:5b:72:23:ea:94:d7:48:fc:5f:9c:17:e3:51:33:
d9:4b:3f:0c:fd:f6:ce:cc:e5:57:aa:79:46:2d:01:d0:cb:ef:
93:e4:e2:11:86:5c:c2:f7:15:31:7f:45:dc:6c:f6:8c:3b:43:
77:09:8e:db:47:65:da:2c:1d:f3:11:bc:25:4e:e2:5c:78:15:
94:e0:a8:df:09:a2:31:ab:69:15:16:cb:bd:0f:c4:b7:74:20:
bf:5e:87:fd:cf:18:4b:f6:f3:bc:e2:bc:00:9d:46:08:9e:15:
63:1d:c9:a6:a7:a7:a9:8a:56:fe:d6:c9:3d:67:66:79:f4:7b:
ed:b7:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 09:30:18 2024 by rpki-client on console-fra.rpki-client.org