Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/gtH07e327q6VCBjsJeykYTpp5Hg.roa
File: gtH07e327q6VCBjsJeykYTpp5Hg.roa (raw, json)
Hash identifier: Ob5JHrdhwIcQUG7U8vmIg9n2nvd0AsWc5clESb/u+Hw=
Subject key identifier: 82:D1:F4:ED:ED:F6:EE:AE:95:08:18:EC:25:EC:A4:61:3A:69:E4:78
Certificate issuer: /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial: 0187844BA00C8837B95FA61F0015086E3580
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/gtH07e327q6VCBjsJeykYTpp5Hg.roa
Signing time: Sat 15 Apr 2023 09:42:41 +0000
ROA not before: Sat 15 Apr 2023 09:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.42.111.0/24 maxlen: 24
89.42.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:84:4b:a0:0c:88:37:b9:5f:a6:1f:00:15:08:6e:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Validity
Not Before: Apr 15 09:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82d1f4ededf6eeae950818ec25eca4613a69e478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:da:30:55:c1:d4:7b:33:a7:d1:8d:9d:e5:
e6:27:82:14:5f:d7:aa:7f:5c:4d:c8:a1:09:ee:4e:
73:45:03:ba:b8:a2:9e:e5:8c:43:5c:38:d5:9b:f4:
9c:e6:f7:68:04:07:d7:f2:76:0c:53:e4:f9:42:66:
72:47:d9:3a:5e:33:59:2d:be:7a:f7:6a:04:c1:8c:
5a:0c:17:9d:3e:ae:5b:27:49:dd:f8:f5:57:de:ee:
a8:68:bb:54:4b:3f:94:11:a5:fd:eb:96:76:5d:c6:
52:1d:96:38:3d:77:ba:3b:82:a3:aa:ab:59:e5:72:
e6:c8:e9:ab:05:e1:00:9e:6a:de:f5:5c:c2:55:9a:
c8:d7:5c:87:49:ae:4f:11:9b:de:d7:a1:13:25:4b:
c1:7c:62:3f:f8:43:2d:a5:a8:db:eb:f5:f4:29:50:
7f:a3:c1:8a:dc:e8:37:02:d7:b0:00:06:97:b1:7e:
37:18:81:c2:a3:2e:f5:27:1e:0b:50:96:22:49:31:
21:03:68:dd:33:b3:ce:28:73:a3:47:86:da:ee:b7:
af:49:00:5a:37:1b:e4:46:c1:b0:37:c6:e9:81:a2:
a9:c2:c2:1a:a8:7c:39:64:58:2a:3e:ab:4e:e0:25:
a5:06:cd:48:a9:ca:55:d8:5c:56:9a:e2:1d:4a:d5:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:F4:ED:ED:F6:EE:AE:95:08:18:EC:25:EC:A4:61:3A:69:E4:78
X509v3 Authority Key Identifier:
keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/gtH07e327q6VCBjsJeykYTpp5Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.110.0/23
Signature Algorithm: sha256WithRSAEncryption
74:7b:32:5a:e5:a4:bf:9a:d9:69:e9:e4:81:77:44:70:52:8e:
2b:3d:af:97:4d:20:6a:51:79:48:65:d0:40:cc:6d:ee:a2:6e:
7f:c1:be:1f:d1:af:a5:c2:9c:a5:9d:1b:30:9e:fb:90:05:08:
3a:a1:51:71:10:af:51:16:96:55:5f:be:0d:9b:a3:26:84:b2:
e5:8f:2c:f0:aa:9a:c5:03:bc:3f:17:62:bd:cb:f2:2d:c8:0c:
28:55:47:30:bb:3e:d0:68:e0:22:a4:66:91:a4:78:e0:53:1f:
2b:3c:28:f8:94:82:f7:de:7b:ca:00:da:b0:17:77:67:72:cd:
15:2d:c3:0f:11:47:27:44:c0:f9:ed:cb:f8:20:19:2e:61:b0:
1b:1f:36:53:5b:0f:6d:42:a3:37:6e:16:a8:6d:c5:66:f3:e6:
17:46:56:0f:fa:f3:63:23:2c:76:ef:b9:5b:15:28:a6:81:d1:
98:d8:83:80:60:c3:c2:9f:35:b1:0a:33:6a:f6:24:57:08:9a:
e9:5b:50:a9:23:3e:c0:19:21:10:b2:7c:59:d4:bf:4a:28:26:
5c:7f:f1:0b:75:5f:03:89:e3:55:5f:d1:e7:d8:25:ab:43:41:
8e:06:cd:f3:88:67:6f:4f:a9:87:c4:25:75:76:d5:22:00:46:
d3:5e:cc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:02 2024 by rpki-client on console-ams.rpki-client.org