Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/gaUa-y4DFYckRgTGUaq-T5DqUUs.roa
File: gaUa-y4DFYckRgTGUaq-T5DqUUs.roa (raw, json)
Hash identifier: /Gkh3DAabGQmJMgcSYPUUkVs1uMYBxlvD0uyhg5Dw9o=
Subject key identifier: 81:A5:1A:FB:2E:03:15:87:24:46:04:C6:51:AA:BE:4F:90:EA:51:4B
Certificate issuer: /CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Certificate serial: 018CC4929A2D9FFF5998A8328BE90238D991
Authority key identifier: 21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/gaUa-y4DFYckRgTGUaq-T5DqUUs.roa
Signing time: Mon 01 Jan 2024 10:29:51 +0000
ROA not before: Mon 01 Jan 2024 10:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2065
IP address blocks: 162.38.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:9a:2d:9f:ff:59:98:a8:32:8b:e9:02:38:d9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Validity
Not Before: Jan 1 10:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81a51afb2e031587244604c651aabe4f90ea514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:4f:ef:a8:81:c4:7d:5a:c2:dc:22:87:f4:
05:c4:ae:8f:70:9a:99:5b:8b:50:9d:c8:08:b1:e9:
74:47:3b:35:81:10:26:80:4e:5d:45:b3:4b:07:09:
d8:5f:4b:ab:8f:b6:a6:12:77:3d:e0:8e:b3:ab:31:
6a:d3:0a:c4:47:53:cf:27:f4:7c:ea:6a:8c:03:b5:
e0:29:a4:8b:15:1c:7d:98:0b:f4:67:75:63:b8:44:
1d:6b:0e:35:9a:8d:c7:1d:fc:ac:c1:d7:e6:65:cb:
84:d9:76:ec:9c:7a:9a:2b:2c:69:b0:d1:25:f5:34:
a2:08:d4:64:97:da:5c:a1:96:71:ce:13:7a:23:ca:
e3:c2:aa:58:b3:d3:c2:dd:d3:25:96:83:ce:e2:df:
45:a2:ed:85:27:a7:60:71:30:23:54:a0:84:f9:92:
92:70:f8:84:bf:3b:d7:19:c9:5d:cd:c4:4f:fb:00:
5e:0a:a4:fc:a5:d6:5d:c8:f2:29:9b:41:c1:d5:85:
8d:1f:f7:65:a2:4d:d8:63:27:1d:53:a5:3a:1e:74:
c4:0a:e8:91:8f:b8:d7:77:69:fe:99:a6:28:38:51:
5a:15:09:08:6d:e1:12:1e:45:5b:c8:08:6c:03:3f:
63:96:f2:fb:37:39:e5:10:f3:d1:9b:14:3d:c8:1b:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A5:1A:FB:2E:03:15:87:24:46:04:C6:51:AA:BE:4F:90:EA:51:4B
X509v3 Authority Key Identifier:
keyid:21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/gaUa-y4DFYckRgTGUaq-T5DqUUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:30:06:91:91:84:38:65:4c:6c:b8:19:d1:29:e2:a9:e2:bf:
e7:95:c1:b4:d1:e7:01:ab:6b:63:6f:25:61:20:14:68:e7:9c:
94:79:2a:87:27:0d:72:b2:5d:fe:bb:24:50:f7:cb:07:ce:63:
aa:4f:32:e3:c1:2d:c7:c3:b4:80:9a:dd:4b:50:e0:f0:48:70:
fc:aa:c3:fb:15:21:e7:92:cd:35:98:72:be:ec:f2:35:3c:0c:
e0:df:65:80:ef:6b:c4:62:bf:ef:76:47:1c:0f:99:17:a4:00:
68:8e:cd:ad:f0:24:36:ca:cf:fa:02:ef:68:72:3d:fb:61:26:
77:92:1a:e4:f8:fd:3c:f7:7c:cf:ee:c7:89:ef:ad:81:9f:5d:
f0:9a:06:2b:27:69:3a:ea:33:96:1a:ac:af:82:6c:59:d9:6b:
81:4e:2a:31:69:a2:91:9b:47:fd:f6:03:6b:80:99:b7:47:c1:
6e:d8:bb:8c:0f:b0:6d:b4:9a:2e:e7:d9:cf:6f:ee:29:2d:69:
79:c4:ca:3f:ad:08:25:6a:c8:c3:9c:4e:8f:1e:2a:ab:0f:a6:
9f:11:b4:7f:d5:92:80:f2:fa:53:0b:52:95:95:fe:49:1d:c6:
be:2b:de:65:cf:94:88:3f:c0:82:3b:ba:24:ed:86:5c:80:cf:
6b:8c:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:26 2024 by rpki-client on console-ams.rpki-client.org