Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/GiIGGOlW9NA667ZvkqjBHALUj5M.roa
File: GiIGGOlW9NA667ZvkqjBHALUj5M.roa (raw, json)
Hash identifier: iahH8m/K4E04alcZooVHm7VEiqs51798T0ZodDDuAcg=
Subject key identifier: 1A:22:06:18:E9:56:F4:D0:3A:EB:B6:6F:92:A8:C1:1C:02:D4:8F:93
Certificate issuer: /CN=28642ab1790b7f5f359068e9fbb72641c5413079
Certificate serial: 018770DF3267A10FFDFBB79FC6CA4953514F
Authority key identifier: 28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/GiIGGOlW9NA667ZvkqjBHALUj5M.roa
Signing time: Tue 11 Apr 2023 15:11:28 +0000
ROA not before: Tue 11 Apr 2023 15:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3561
IP address blocks: 185.218.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:df:32:67:a1:0f:fd:fb:b7:9f:c6:ca:49:53:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28642ab1790b7f5f359068e9fbb72641c5413079
Validity
Not Before: Apr 11 15:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a220618e956f4d03aebb66f92a8c11c02d48f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:05:c1:6c:df:de:2b:4d:81:27:aa:9b:b1:
33:4f:6e:2f:3c:2c:ad:ce:b0:2b:54:c7:96:8f:cf:
c0:c3:d9:98:9e:4d:60:14:ef:c2:4f:25:e0:00:1a:
9b:0a:75:28:e1:3f:b3:1c:14:0a:29:35:fe:b3:90:
96:92:02:da:91:19:01:d3:b8:6c:6e:17:4b:2a:3d:
6e:c6:64:5e:30:09:26:4a:03:76:81:26:01:49:c2:
ae:d0:80:96:79:ee:61:c1:4a:b7:0e:a4:1f:43:36:
d1:c4:54:08:ce:06:f9:21:9c:88:c1:d7:82:52:23:
c6:a1:1a:4e:a5:f8:22:08:09:cf:3c:f2:39:af:86:
c2:0b:9d:d7:5e:50:4a:ef:f2:76:ee:14:34:b0:c2:
ae:6b:b4:f9:8b:e9:82:62:02:53:43:05:b1:ac:4e:
8f:cd:6a:c8:9f:d4:0a:12:9c:30:bd:1f:14:4e:94:
26:cf:73:63:22:75:29:13:6d:2d:b4:2c:10:78:ad:
b0:bb:67:53:a7:da:33:78:83:bc:6b:a1:e7:66:35:
0d:2a:76:b6:4d:62:6d:ac:e8:59:64:5a:b4:72:59:
b1:6a:42:f4:a9:87:4f:bf:c6:1a:13:27:17:9a:4a:
6a:26:d0:19:25:fa:47:26:22:81:f1:9d:f9:d2:b4:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:06:18:E9:56:F4:D0:3A:EB:B6:6F:92:A8:C1:1C:02:D4:8F:93
X509v3 Authority Key Identifier:
keyid:28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/GiIGGOlW9NA667ZvkqjBHALUj5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/KGQqsXkLf181kGjp-7cmQcVBMHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.184.0/24
Signature Algorithm: sha256WithRSAEncryption
15:74:19:6c:1b:e2:88:c2:79:16:3b:79:24:79:b5:61:c9:7a:
63:21:fb:d0:84:1c:7d:1e:32:25:3a:0a:8e:ff:e2:3f:36:fd:
c6:c4:a8:03:26:2d:f4:2e:a5:5b:24:0f:a8:88:65:16:55:d5:
4f:9b:95:8f:db:a4:20:2a:65:d8:d0:2c:74:8b:04:8d:03:58:
4b:2a:7b:cd:e5:49:13:ba:f4:0f:fd:d0:86:d4:c9:45:73:8c:
d1:c8:0b:08:27:e5:67:b4:17:ea:de:0c:18:6c:ca:48:c3:fa:
3f:4e:84:49:1d:76:3a:01:24:79:9c:f7:d0:c1:aa:d0:a7:d9:
3d:91:4c:33:a3:c3:b7:2a:69:01:59:2c:95:7e:df:6e:70:e2:
09:e9:58:81:bb:8f:df:78:7c:fa:98:f7:d0:92:ac:87:0a:25:
d6:67:16:9b:17:a6:61:a9:0e:5e:83:22:7c:aa:f0:68:ac:b3:
e0:b6:ef:b1:e9:2f:b2:55:31:31:88:6f:cf:c0:d8:7d:6b:f6:
e3:76:e7:51:b2:ef:b5:30:b3:33:93:5a:5b:92:ad:b0:a6:09:
c9:82:51:e3:15:47:bc:8d:6e:8d:1f:d9:07:49:8f:c3:e0:f6:
1d:4f:20:c4:39:39:1a:55:f7:61:db:d0:27:d5:a2:5b:a2:65:
26:56:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:43 2024 by rpki-client on console-fra.rpki-client.org