Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/GKUIrfInLO7A0kjxtFXLajzfjN4.roa
File: GKUIrfInLO7A0kjxtFXLajzfjN4.roa (raw, json)
Hash identifier: xzg36mlHfESrd10ciKbeDURgEWXlzWC7lHurtxYeUqw=
Subject key identifier: 18:A5:08:AD:F2:27:2C:EE:C0:D2:48:F1:B4:55:CB:6A:3C:DF:8C:DE
Certificate issuer: /CN=83cbe56d14f2c3a2c65659b6d38a4c05838ded7d
Certificate serial: 0184AA6EAE41FE4D086EE6DF9ED12350B8BE
Authority key identifier: 83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8vlbRTyw6LGVlm204pMBYON7X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/GKUIrfInLO7A0kjxtFXLajzfjN4.roa
Signing time: Thu 24 Nov 2022 16:18:11 +0000
ROA not before: Thu 24 Nov 2022 16:18:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16276
IP address blocks: 45.133.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:6e:ae:41:fe:4d:08:6e:e6:df:9e:d1:23:50:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cbe56d14f2c3a2c65659b6d38a4c05838ded7d
Validity
Not Before: Nov 24 16:18:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18a508adf2272ceec0d248f1b455cb6a3cdf8cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:10:c1:b1:95:20:f3:59:c4:1d:b7:bc:1a:
49:72:d0:3b:10:0e:f3:09:7c:00:d9:87:94:3c:88:
4a:7d:f5:fb:1b:b8:2e:5f:cb:86:10:52:e9:32:70:
c9:10:c8:2c:eb:e2:a0:04:1f:48:35:29:7b:10:45:
15:3a:4a:e1:e0:25:96:58:6f:47:06:b3:e6:d3:c5:
42:9e:46:37:a8:33:88:88:fe:02:45:7f:c3:c7:7f:
6e:54:1c:2f:b0:ca:bb:31:91:46:4e:6e:19:25:67:
ab:27:7b:65:f2:0e:73:e5:01:63:0c:3f:c9:dd:90:
1a:5b:71:b3:8c:bd:68:db:64:5f:26:e1:3b:47:c6:
08:a9:b4:d4:e9:b2:fd:af:ce:da:56:0e:2b:81:16:
21:23:0a:f4:99:ff:ce:69:e4:83:0c:22:31:fa:66:
9f:c7:e8:ae:b9:f7:3d:a3:1f:98:38:ef:ce:fc:f5:
d0:56:70:72:63:75:34:a9:43:46:6d:1f:9b:c4:b1:
3f:ca:26:4f:8c:5a:b6:ea:3f:54:18:24:e4:74:10:
b8:b3:01:c3:9c:f3:78:9d:f8:8a:93:5d:0a:43:40:
fe:2d:3c:02:c1:4e:27:a6:c6:4b:5f:2f:9c:54:e9:
31:d9:57:be:b2:2b:ef:84:c8:22:8a:4a:13:64:9a:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A5:08:AD:F2:27:2C:EE:C0:D2:48:F1:B4:55:CB:6A:3C:DF:8C:DE
X509v3 Authority Key Identifier:
keyid:83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8vlbRTyw6LGVlm204pMBYON7X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/GKUIrfInLO7A0kjxtFXLajzfjN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/g8vlbRTyw6LGVlm204pMBYON7X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.251.0/24
Signature Algorithm: sha256WithRSAEncryption
84:14:1b:0b:56:50:0b:7c:0c:f5:c8:62:fd:b8:62:d7:7a:49:
6a:8e:21:4b:7c:fc:4b:d4:73:35:c3:87:16:e5:0a:c7:bc:28:
fa:3d:88:e2:20:1f:c7:f6:65:47:19:ba:de:5f:c0:2f:76:f0:
18:d6:20:bf:41:0c:ce:76:f6:3c:9e:28:79:72:6c:38:ec:de:
e7:96:d9:f9:34:47:4e:69:d6:56:18:7b:81:f9:ba:c0:67:69:
51:58:33:3f:c0:78:70:c3:3b:ce:c3:19:33:41:43:86:0d:ab:
5b:bb:97:86:e7:f0:5d:a3:8d:db:e0:3d:61:04:eb:77:02:e7:
83:40:dd:e3:c2:b3:46:3a:00:cd:d2:b0:63:df:95:32:da:e7:
c8:d4:06:6a:77:73:45:63:d9:da:ae:af:bd:a0:b4:40:18:8d:
8e:4f:9d:6b:d7:d4:84:96:ff:c8:f8:9c:4c:03:c5:6b:4b:28:
0d:8a:a4:55:97:03:90:c5:41:9c:f5:b4:42:74:b5:e0:f9:a4:
6e:db:20:69:5d:96:fb:3e:9f:93:bc:3f:a5:6f:2a:9a:ae:32:
e4:4d:ec:16:69:c7:75:7f:7c:cf:86:61:69:5c:bc:d4:cc:57:
8b:d3:13:c1:81:93:b0:33:25:b7:a2:e7:c2:c4:0d:7b:c4:4b:
83:aa:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:32 2024 by rpki-client on console-ams.rpki-client.org