Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/ghVCENEznnqpCuM6dDaLC34hRGw.roa
File: ghVCENEznnqpCuM6dDaLC34hRGw.roa (raw, json)
Hash identifier: JMroB7iL+Q+ev0aGo/nRO0JG6+fZSgsWb5X/MBsqtKM=
Subject key identifier: 82:15:42:10:D1:33:9E:7A:A9:0A:E3:3A:74:36:8B:0B:7E:21:44:6C
Certificate issuer: /CN=e28d01e984236c8118c546381cd9a0f9201c73d8
Certificate serial: 01856E2F8413688D8C6E069F0A3F30CDB02D
Authority key identifier: E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/ghVCENEznnqpCuM6dDaLC34hRGw.roa
Signing time: Sun 01 Jan 2023 16:34:45 +0000
ROA not before: Sun 01 Jan 2023 16:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28859
IP address blocks: 212.94.32.0/20 maxlen: 24
212.94.32.0/19 maxlen: 24
212.94.56.0/21 maxlen: 24
2a02:368::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:84:13:68:8d:8c:6e:06:9f:0a:3f:30:cd:b0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28d01e984236c8118c546381cd9a0f9201c73d8
Validity
Not Before: Jan 1 16:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82154210d1339e7aa90ae33a74368b0b7e21446c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:80:7b:da:a2:7b:47:09:4e:24:91:d6:39:
0b:e8:08:45:0c:aa:5e:89:87:6f:0c:2c:16:bf:2f:
c3:48:8a:95:f0:a6:4f:4f:47:a4:c8:f2:9e:32:da:
a7:84:5d:21:00:16:d9:d1:ed:9a:ae:13:6e:c8:06:
9e:98:79:65:66:6e:db:c2:cf:33:48:76:96:6e:76:
a5:13:95:d5:b8:8e:02:9d:d1:45:b3:ca:5c:9a:6f:
8c:10:e3:64:27:a9:84:50:6e:b4:77:ba:ab:d2:65:
7f:42:0c:5b:53:00:9e:98:09:de:d6:2b:96:61:5c:
bf:b7:ab:8e:60:13:73:6d:e0:bd:3c:6f:2b:c1:3a:
13:71:e0:09:6b:40:78:51:4e:e5:24:e4:00:75:09:
98:52:b0:a5:9f:7e:ab:29:26:d2:41:ec:65:53:9a:
0e:cf:90:9d:e2:55:af:da:9e:bd:8b:30:8e:fa:73:
b9:f5:71:6e:62:8b:1f:cc:30:18:24:37:90:46:cc:
f2:59:19:e2:7f:5c:f5:3e:71:0e:09:d2:62:b9:21:
fa:6d:1c:f8:a6:b1:40:0f:a2:02:45:95:99:bc:78:
98:c9:be:6e:a7:5f:5c:b7:4e:f5:0b:a0:d8:dd:65:
cf:c3:2d:27:9f:44:ec:d2:07:20:83:99:16:87:8a:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:15:42:10:D1:33:9E:7A:A9:0A:E3:3A:74:36:8B:0B:7E:21:44:6C
X509v3 Authority Key Identifier:
keyid:E2:8D:01:E9:84:23:6C:81:18:C5:46:38:1C:D9:A0:F9:20:1C:73:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4o0B6YQjbIEYxUY4HNmg-SAcc9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/ghVCENEznnqpCuM6dDaLC34hRGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/3a144c-4563-4cb6-a9ae-e941f767f842/1/4o0B6YQjbIEYxUY4HNmg-SAcc9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.94.32.0/19
IPv6:
2a02:368::/32
Signature Algorithm: sha256WithRSAEncryption
23:b2:6b:4b:e8:30:84:88:e7:a9:32:ed:b1:66:62:98:e3:c5:
de:2e:b8:af:b9:90:13:d2:bd:d4:98:78:08:70:51:50:36:f0:
5d:ff:54:ba:24:70:46:f4:c9:4f:8c:d3:ff:8d:79:ea:39:21:
72:3d:91:c9:75:6d:bc:75:8c:33:fd:56:b8:62:40:d1:04:d2:
ff:d3:4e:d9:f1:5b:cc:5e:41:13:a6:07:04:70:11:ae:8d:a8:
66:64:ed:44:7c:f3:86:0b:6a:24:c5:9d:48:62:1e:d0:b6:f3:
68:a3:42:96:f7:8b:19:a2:e9:1f:56:cb:8a:e1:69:12:13:ea:
7e:e2:d3:c9:f7:72:6d:ec:8b:c8:64:41:3a:e9:5b:55:b9:a7:
33:52:19:c5:fb:2e:48:2d:69:36:b3:f3:fc:f5:b5:14:b7:1c:
3a:b5:25:2c:41:cd:b9:ab:b2:25:6e:8f:8f:96:ee:85:ff:16:
0c:a3:e6:14:de:f6:9c:4b:a1:07:22:ea:91:53:e4:f6:bb:d9:
58:25:67:8c:00:1b:f6:7e:8b:91:08:c1:4d:2e:0f:d9:d8:23:
8c:d5:7a:5f:08:e9:03:5c:c7:30:d8:4a:e8:1f:bf:c0:90:94:
55:7d:5f:f0:11:e2:f8:47:a0:a5:8f:e0:bb:4a:4e:58:98:25:
b9:d3:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:32 2024 by rpki-client on console-fra.rpki-client.org