Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/GZW6lMrGX4l_yS1TYMuehpbyHZw.roa
File: GZW6lMrGX4l_yS1TYMuehpbyHZw.roa (raw, json)
Hash identifier: k0VhOl4zC5eJhB6ybH5dVA0eFnnDiw7QE90RcFoo6sw=
Subject key identifier: 19:95:BA:94:CA:C6:5F:89:7F:C9:2D:53:60:CB:9E:86:96:F2:1D:9C
Certificate issuer: /CN=d51085c789f4a5a204404827d953676c85260a61
Certificate serial: 05550167
Authority key identifier: D5:10:85:C7:89:F4:A5:A2:04:40:48:27:D9:53:67:6C:85:26:0A:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RCFx4n0paIEQEgn2VNnbIUmCmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/GZW6lMrGX4l_yS1TYMuehpbyHZw.roa
Signing time: Sat 01 Jan 2022 10:58:00 +0000
ROA not before: Sat 01 Jan 2022 10:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199634
IP address blocks: 176.57.72.0/21 maxlen: 24
185.8.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89456999 (0x5550167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51085c789f4a5a204404827d953676c85260a61
Validity
Not Before: Jan 1 10:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1995ba94cac65f897fc92d5360cb9e8696f21d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:51:fc:85:7d:90:ee:51:f3:25:29:63:70:
be:e7:75:74:d0:12:64:70:c5:d7:f1:2f:c7:95:fd:
22:81:5b:8c:7e:1b:0d:82:ce:de:75:ea:25:43:10:
16:ee:4e:37:c7:dd:41:bd:d2:2f:ec:87:af:1f:81:
7e:d5:1b:87:d8:c7:42:3c:01:2d:0c:5a:ef:d0:86:
5f:c9:56:29:c9:08:0d:41:0a:0b:e4:ae:a8:18:e1:
08:bf:6b:4c:5f:87:9d:78:ca:bc:b0:c6:f2:30:cb:
d2:df:95:d4:b6:05:94:14:25:0a:8e:85:4f:87:c1:
84:34:42:0d:f4:4d:87:e4:5d:1c:67:a2:aa:ec:f6:
83:3a:3e:b2:bb:57:e9:ec:80:4c:72:1b:46:c7:ba:
27:b7:58:1f:ab:3a:d7:63:dd:3b:41:01:8f:89:2d:
98:25:4e:06:44:bc:85:47:e1:e7:92:c2:b6:00:40:
ff:1d:72:20:ef:d6:2a:04:ee:e2:70:5d:e6:3e:2c:
88:74:92:35:1b:e3:c4:ae:f1:58:73:25:1e:72:dd:
e0:f9:f6:df:da:7a:5b:9b:0b:bd:fd:bd:26:49:cc:
5b:e5:c3:32:e8:58:9a:c5:ec:7d:6a:71:c9:1e:31:
45:ea:56:aa:1b:dc:18:9a:23:3f:8b:ca:17:2e:d1:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:95:BA:94:CA:C6:5F:89:7F:C9:2D:53:60:CB:9E:86:96:F2:1D:9C
X509v3 Authority Key Identifier:
keyid:D5:10:85:C7:89:F4:A5:A2:04:40:48:27:D9:53:67:6C:85:26:0A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RCFx4n0paIEQEgn2VNnbIUmCmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/GZW6lMrGX4l_yS1TYMuehpbyHZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/341b8f-b1d5-4ee4-9e76-3ad92e21a144/1/1RCFx4n0paIEQEgn2VNnbIUmCmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.72.0/21
185.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:ae:4c:e6:91:50:ed:e5:db:e1:36:dc:da:3f:f5:d5:1d:e7:
d5:95:5f:1a:4e:52:c0:17:40:43:ce:40:d2:78:5a:f4:5d:5c:
2d:b7:94:a6:ae:95:af:5e:42:28:4f:b6:31:10:1c:b1:f2:ec:
25:4f:21:c4:72:b1:4f:05:30:0a:c4:34:ba:f7:cd:1f:33:2e:
80:90:7c:f2:0b:f1:75:cf:84:e5:5d:32:7e:24:a7:4c:e5:21:
bf:b0:77:51:13:13:10:7a:2e:97:a8:3f:17:8f:b0:b5:30:ab:
37:87:4b:03:db:c4:58:30:30:60:59:d0:e3:95:e7:1b:96:8e:
b3:ee:b0:a0:11:ae:85:34:c1:d0:c7:a6:7a:a0:ae:44:37:00:
4d:ac:b2:8c:df:7e:b1:d4:d5:6c:1e:d7:c5:d3:ac:6c:fe:33:
52:64:c7:af:8a:30:90:af:2b:7a:1f:7e:ac:f7:80:dc:a3:45:
ce:c6:1f:3d:37:fe:2e:61:37:71:58:a5:cc:a5:33:32:24:56:
0b:d3:56:ad:15:87:8a:cd:f6:28:97:7f:49:9d:95:5a:7b:73:
ac:bc:cc:30:13:d7:5b:c1:6d:21:65:ab:4b:af:05:0f:63:a1:
9f:88:68:65:fd:fa:37:b4:06:4d:bb:f9:fa:c9:29:bf:fb:d9:
16:85:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:21 2023 by rpki-client on console-ams.rpki-client.org