Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/jGPiSeMJqaMlfPF8cir7c4qAkbs.roa
File: jGPiSeMJqaMlfPF8cir7c4qAkbs.roa (raw, json)
Hash identifier: VF/Y5y6oERDtY+HF8dL08onodiHde22MashQx3rFiEY=
Subject key identifier: 8C:63:E2:49:E3:09:A9:A3:25:7C:F1:7C:72:2A:FB:73:8A:80:91:BB
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 018940022CB2274F47E5141F300499BA6DBA
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/jGPiSeMJqaMlfPF8cir7c4qAkbs.roa
Signing time: Mon 10 Jul 2023 13:33:51 +0000
ROA not before: Mon 10 Jul 2023 13:33:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.127.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:02:2c:b2:27:4f:47:e5:14:1f:30:04:99:ba:6d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: Jul 10 13:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c63e249e309a9a3257cf17c722afb738a8091bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:ee:74:7d:46:6b:21:b1:29:93:f2:fb:2b:
c1:9c:7a:57:46:74:18:40:3d:81:b1:64:32:ab:3f:
fa:8d:24:3e:04:b3:21:a1:11:17:a6:0e:bb:a8:4c:
10:56:e5:6f:b6:c1:4e:21:ba:5f:05:b6:b2:7d:16:
7f:10:4b:ed:5d:33:99:48:b6:17:c4:d9:81:5d:3a:
ba:a2:e4:57:46:9b:62:f8:c1:90:32:7e:3b:88:7b:
db:ba:36:12:f4:b6:6d:a7:11:85:ad:49:44:05:f2:
6a:68:f6:85:2e:32:b1:ed:4f:10:8f:ec:65:02:20:
e9:df:9a:3e:7b:10:e4:aa:4b:79:5d:83:4f:c3:cd:
d1:8e:38:f9:22:53:2f:21:83:a8:7b:0e:a2:a0:60:
80:ac:2c:fa:a0:31:bb:69:54:ca:95:bc:86:f1:f0:
d1:e3:45:91:bb:8d:cb:d4:59:ea:cd:6a:b5:86:2e:
9a:70:dd:2b:06:17:ae:eb:bf:f6:16:c7:43:74:a0:
48:70:c2:66:a3:19:07:f0:08:f5:99:21:39:f5:79:
63:e8:2c:a7:07:c5:b6:d2:9b:96:98:50:20:d4:5a:
60:ab:b2:93:ac:04:66:8a:e5:9c:d6:99:00:c5:21:
94:fa:2b:1d:42:b0:fc:97:da:1f:e2:b0:46:9e:78:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:E2:49:E3:09:A9:A3:25:7C:F1:7C:72:2A:FB:73:8A:80:91:BB
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/jGPiSeMJqaMlfPF8cir7c4qAkbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.164.0/23
Signature Algorithm: sha256WithRSAEncryption
32:d9:53:ce:f9:48:16:7c:1a:96:c4:8d:a4:98:90:7d:fe:49:
bb:eb:34:5c:60:b1:6a:23:97:fa:34:52:19:d6:fe:e1:e0:e9:
a7:5b:8c:09:45:b3:36:84:c0:61:6a:a4:ac:35:6b:0f:82:fd:
8f:32:20:22:12:8a:f4:05:db:3d:bc:d1:4c:48:fa:a4:43:bd:
16:ce:03:bd:e6:4c:ab:dd:22:c0:f6:3c:3b:76:07:f8:68:f5:
31:52:50:d8:a6:8b:f3:be:40:bc:59:30:54:ab:00:de:49:24:
7c:43:2a:2e:de:df:4e:03:ae:fa:5c:57:c5:fb:16:de:97:69:
80:75:54:26:af:24:a5:5b:51:7d:7b:ce:bb:a4:e6:d1:78:0a:
71:5f:96:79:40:b7:b8:e8:78:c5:8d:87:13:2e:9e:a1:6d:4f:
65:67:b8:1c:6d:e8:17:96:08:ba:e3:eb:f4:3e:aa:e3:35:90:
17:8a:8f:74:91:76:ba:22:47:f3:b8:c9:57:fa:f5:b8:49:e1:
8d:4e:53:1a:2c:e0:af:a2:6e:2e:8f:8a:f0:14:ce:3e:92:60:
ae:45:34:b0:14:11:5b:83:bf:2c:67:26:32:21:31:f2:ee:f6:
09:4f:51:d6:bd:ab:22:e9:40:9d:8e:31:e0:be:03:ac:ea:ec:
82:f5:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:08 2025 by rpki-client