Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/_GBJ55thnxjuO7elM9Kt85GcDN4.roa
File: _GBJ55thnxjuO7elM9Kt85GcDN4.roa (raw, json)
Hash identifier: Y3oU5fS4xd2FrScvglrsJ10Vg2iljiNZV3XUrD3+8cw=
Subject key identifier: FC:60:49:E7:9B:61:9F:18:EE:3B:B7:A5:33:D2:AD:F3:91:9C:0C:DE
Certificate issuer: /CN=72f333aca0649751ffc5c1346428ac21cbcdf501
Certificate serial: 01856FC249778CB6CBBD1AE7FA30A0122227
Authority key identifier: 72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/_GBJ55thnxjuO7elM9Kt85GcDN4.roa
Signing time: Sun 01 Jan 2023 23:54:41 +0000
ROA not before: Sun 01 Jan 2023 23:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 193.108.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:49:77:8c:b6:cb:bd:1a:e7:fa:30:a0:12:22:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f333aca0649751ffc5c1346428ac21cbcdf501
Validity
Not Before: Jan 1 23:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc6049e79b619f18ee3bb7a533d2adf3919c0cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:9a:a9:9a:ed:0b:11:81:19:84:ee:61:ca:
ff:09:b8:e5:60:97:b2:cd:a9:07:91:2c:69:3d:e7:
bc:2a:3c:a7:49:d5:83:c4:a0:53:1e:b1:0f:cf:eb:
dc:01:50:40:41:15:b1:8c:3a:f6:8e:7e:75:88:85:
ba:3c:23:22:19:5d:28:ad:b1:9f:2e:a7:33:6a:58:
77:0a:06:e3:17:78:80:5a:e8:e3:11:5f:e0:62:13:
20:aa:09:03:49:de:14:8b:55:dd:1b:ef:54:55:f2:
ca:65:2d:43:a7:45:a1:3a:ca:bc:7e:af:59:ce:52:
e8:e0:2b:d4:67:cd:09:9e:58:b6:69:83:46:d7:89:
a6:c1:15:4f:5d:16:3c:9c:f6:43:a1:4c:68:fd:40:
c5:35:05:c7:ae:15:ee:e0:a4:9e:e9:9b:cf:e3:0e:
2a:c6:9a:f2:6f:a0:bf:cb:52:d0:ab:76:3f:a4:f1:
4e:da:fe:17:7d:0a:d6:88:bd:3d:65:5d:4c:63:99:
65:3b:af:be:d9:f7:4d:2e:7d:36:35:8f:66:bc:14:
34:81:72:23:10:a6:63:6a:51:20:79:5b:05:f1:68:
2b:5e:51:8c:fb:24:2a:4e:70:6e:40:2d:62:a7:3e:
81:7d:72:58:98:f9:fd:6f:4a:c4:8f:47:1f:25:2f:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:60:49:E7:9B:61:9F:18:EE:3B:B7:A5:33:D2:AD:F3:91:9C:0C:DE
X509v3 Authority Key Identifier:
keyid:72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/_GBJ55thnxjuO7elM9Kt85GcDN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.131.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f1:6b:67:c4:b3:19:06:a8:7b:f1:3d:28:f9:85:19:b0:1c:
88:a9:f0:1a:43:04:04:3e:a6:3c:09:a7:d7:9c:e6:93:6c:42:
46:17:8d:4c:1a:a3:78:53:68:7c:ee:cc:1c:03:ba:ec:ca:c5:
cc:56:c0:66:10:3a:15:a4:42:4e:37:25:b9:89:e7:8c:37:09:
c3:35:9e:02:0a:b1:d9:a8:51:25:d3:e0:51:3d:fe:00:37:41:
a3:f2:f2:9f:78:9e:d0:a2:c9:38:86:c8:2f:f4:7a:fc:ea:4d:
0a:a0:39:76:d0:37:6f:9f:4b:88:b8:f1:0d:f6:02:9a:99:06:
a9:ee:c2:1e:c2:8a:cb:f4:8f:58:9e:c1:be:1d:74:e6:a9:cb:
a0:b9:62:11:4a:bc:d9:fb:a1:8d:de:be:f6:8b:58:22:4e:8c:
a5:a0:4c:d5:83:ea:4d:10:a7:0a:49:b9:d9:e3:97:4a:fb:06:
ae:ac:9a:33:2b:eb:b5:88:f5:92:3e:22:2d:1e:db:a6:f7:38:
2b:0c:ea:7a:cb:47:43:ea:c3:6d:b4:5a:99:27:52:ca:12:e5:
23:c0:a3:00:e7:50:0e:15:ec:8a:0e:a7:f5:de:e9:79:68:9b:
33:fd:a0:d6:de:5f:b5:cc:e0:e6:f5:25:c3:cb:18:bc:01:df:
52:e0:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:53 2024 by rpki-client on console-fra.rpki-client.org