Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/gSo4Bo_hIbtgIA2MihWePlLZB7U.roa
File: gSo4Bo_hIbtgIA2MihWePlLZB7U.roa (raw, json)
Hash identifier: OOIQOuOuv2ldFAkazK62bvqRtMOScuR+HtE9LWzfDtw=
Subject key identifier: 81:2A:38:06:8F:E1:21:BB:60:20:0D:8C:8A:15:9E:3E:52:D9:07:B5
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01856DCAF8E6B723E7F002CFF438315F1A51
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/gSo4Bo_hIbtgIA2MihWePlLZB7U.roa
Signing time: Sun 01 Jan 2023 14:44:56 +0000
ROA not before: Sun 01 Jan 2023 14:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43991
IP address blocks: 194.61.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f8:e6:b7:23:e7:f0:02:cf:f4:38:31:5f:1a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Jan 1 14:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=812a38068fe121bb60200d8c8a159e3e52d907b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c5:d4:36:c3:77:ae:60:5e:c7:49:1d:37:54:
cf:6b:d0:7f:51:55:7e:7e:03:07:fc:80:7a:28:eb:
48:f9:49:2a:c9:10:75:66:11:e4:1e:62:fc:15:4f:
94:75:00:9b:a3:b8:ab:9c:ab:a1:60:02:2f:cf:69:
dd:91:8f:1e:53:6d:3a:d4:9c:1c:e5:36:d6:2d:c2:
d5:82:ee:b0:24:ba:f0:04:6c:5e:e6:40:30:0b:59:
d8:e7:22:91:0f:06:97:cf:db:f5:aa:8b:25:ab:b8:
c9:8f:22:03:29:cd:2b:13:44:a6:6e:70:b3:9a:47:
69:6c:ff:51:f1:e3:da:17:83:30:1c:a4:ce:9a:29:
05:2f:ef:78:83:cd:b4:72:55:a2:82:ce:2c:63:49:
dc:68:e7:56:d6:36:71:07:d0:d6:68:c9:71:a0:18:
b5:ec:7d:af:04:03:d0:c5:40:3d:8d:56:08:e9:4a:
dd:e9:de:90:69:34:ad:68:c8:30:a9:e2:f2:3b:12:
ca:a3:47:7d:d3:60:1e:10:c1:0a:4a:15:3c:0f:6d:
3f:e2:da:55:55:d7:2a:f9:76:47:b9:7b:40:f2:b4:
66:ec:a7:66:c7:36:e1:a7:dd:4f:e7:37:79:2e:38:
3d:ca:f3:12:3b:83:3f:0c:e1:91:76:a8:d8:34:02:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2A:38:06:8F:E1:21:BB:60:20:0D:8C:8A:15:9E:3E:52:D9:07:B5
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/gSo4Bo_hIbtgIA2MihWePlLZB7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ba:a5:c2:c3:c0:42:93:07:3e:d1:be:5d:75:31:67:a8:4e:
36:1f:fe:dd:cf:ec:98:b4:f7:65:70:a7:50:74:68:7d:d3:f5:
e5:39:af:b3:fc:24:cf:60:e5:41:11:0b:2e:13:37:2a:b4:e2:
c1:3b:50:5e:c8:86:40:80:a5:8b:6b:4a:8d:75:a9:1b:13:cb:
a3:04:c8:0b:11:b3:7a:7b:3c:98:28:f8:c1:dd:37:e8:7c:82:
9c:07:3c:20:22:85:a0:f6:70:2f:25:f0:3b:f3:18:eb:2f:4e:
5a:cd:83:72:6a:e4:a3:a7:69:9c:ab:8e:2e:8c:2e:c1:03:ef:
2e:e7:f2:8c:49:36:d5:38:1e:e1:c4:7e:e2:79:da:6b:fb:65:
85:e1:2b:d8:fc:bd:7a:11:36:0f:85:2f:c6:99:a0:18:24:27:
38:bb:db:f5:ac:3b:7d:51:c4:97:ad:59:67:32:42:91:0e:7f:
0e:5e:82:a6:8e:87:94:8f:e7:e3:d6:8f:a7:92:67:c7:49:75:
09:11:3a:d8:f4:0a:55:18:45:8f:e4:a3:dd:5a:19:3b:a1:10:
9c:a9:44:85:f9:36:31:7b:05:76:6e:d4:63:e3:23:0a:ed:56:
11:8b:47:5d:bd:51:7c:f1:7e:af:dd:6f:4c:e2:d6:e7:df:25:
41:9a:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org