Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/GgBdhLIl7ocwqxuNCjWIfcIDnfY.roa
File: GgBdhLIl7ocwqxuNCjWIfcIDnfY.roa (raw, json)
Hash identifier: f9DscG3VICQ1hdIT3HYy4+3lBwS4XzM9R7xwc+jfTsk=
Subject key identifier: 1A:00:5D:84:B2:25:EE:87:30:AB:1B:8D:0A:35:88:7D:C2:03:9D:F6
Certificate issuer: /CN=b1a3b0de59596a64edfa659da3b2abe8420668e8
Certificate serial: 01856C012F2ADF2378888B5D7FF267056452
Authority key identifier: B1:A3:B0:DE:59:59:6A:64:ED:FA:65:9D:A3:B2:AB:E8:42:06:68:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saOw3llZamTt-mWdo7Kr6EIGaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/GgBdhLIl7ocwqxuNCjWIfcIDnfY.roa
Signing time: Sun 01 Jan 2023 06:24:54 +0000
ROA not before: Sun 01 Jan 2023 06:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51487
IP address blocks: 185.236.248.0/22 maxlen: 22
185.236.248.0/24 maxlen: 24
185.236.251.0/24 maxlen: 24
185.236.250.0/24 maxlen: 24
185.236.249.0/24 maxlen: 24
45.65.64.0/24 maxlen: 24
193.84.92.0/24 maxlen: 24
193.84.93.0/24 maxlen: 24
185.200.76.0/22 maxlen: 22
185.200.76.0/24 maxlen: 24
185.200.78.0/24 maxlen: 24
185.200.77.0/24 maxlen: 24
185.200.79.0/24 maxlen: 24
193.84.49.0/24 maxlen: 24
193.84.48.0/24 maxlen: 24
45.65.67.0/24 maxlen: 24
45.65.66.0/24 maxlen: 24
45.65.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:2f:2a:df:23:78:88:8b:5d:7f:f2:67:05:64:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a3b0de59596a64edfa659da3b2abe8420668e8
Validity
Not Before: Jan 1 06:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a005d84b225ee8730ab1b8d0a35887dc2039df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:69:86:da:c9:ef:4e:77:b2:ab:52:6f:99:dc:
0f:73:8f:b9:80:24:4c:97:65:a1:e7:31:66:ce:d0:
fe:1e:6e:e5:c7:f3:d1:44:b1:c4:2c:ae:68:8f:50:
0b:58:c2:45:37:67:d6:c5:7c:78:44:49:1d:95:b9:
a0:fc:d9:91:8b:2f:44:c5:54:f6:4d:59:52:ef:3a:
89:63:63:41:be:d8:10:86:ce:51:6c:a0:2e:2c:98:
3b:5b:9e:8c:06:9d:ec:f9:14:b2:78:e6:aa:86:27:
05:ce:bb:21:fc:73:57:42:81:f3:2f:1f:63:58:bc:
73:9a:92:af:7c:7b:d0:c8:96:59:46:ed:d4:fd:ac:
56:b7:15:c5:2b:ba:80:5d:72:e8:e1:dc:30:a7:e4:
f3:fa:cf:d5:d7:05:07:bc:2c:5b:72:d4:8a:c2:24:
77:fb:62:5e:4f:23:7d:7e:8c:c8:a0:e0:60:2a:65:
60:b2:10:5a:d1:4a:45:b6:4c:29:f7:73:56:16:18:
68:02:c0:a1:d6:ae:3e:f1:67:30:0f:9d:86:1c:d6:
74:63:46:f9:39:ab:64:d5:a7:41:5c:f9:bc:b5:2d:
84:c3:6c:67:89:49:fc:cb:2c:a0:32:79:e4:c3:c7:
a3:b1:ec:5a:8a:0e:5d:25:6b:15:14:28:a0:9f:af:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:00:5D:84:B2:25:EE:87:30:AB:1B:8D:0A:35:88:7D:C2:03:9D:F6
X509v3 Authority Key Identifier:
keyid:B1:A3:B0:DE:59:59:6A:64:ED:FA:65:9D:A3:B2:AB:E8:42:06:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saOw3llZamTt-mWdo7Kr6EIGaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/GgBdhLIl7ocwqxuNCjWIfcIDnfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7275ea-af7a-4a2f-960e-fbbb5187910a/1/saOw3llZamTt-mWdo7Kr6EIGaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.64.0/22
185.200.76.0/22
185.236.248.0/22
193.84.48.0/23
193.84.92.0/23
Signature Algorithm: sha256WithRSAEncryption
52:08:55:16:cd:0b:44:8c:27:49:43:fd:ef:29:55:73:72:64:
0c:8a:81:4a:1f:79:41:df:4c:f1:c8:1c:e3:ce:7d:bc:70:31:
05:dc:5d:6b:78:79:5b:7c:1d:5f:13:95:92:e4:d8:a3:84:95:
43:6c:48:b3:eb:95:e3:17:55:a4:7c:ea:74:6d:29:22:49:da:
d7:2a:92:ac:7f:8b:92:e5:79:3f:ae:14:22:57:7a:64:93:09:
f9:18:fa:91:1c:0a:37:21:a2:3f:3f:00:4e:3e:17:64:4f:b1:
80:70:8e:8f:89:f2:3a:51:17:a6:c8:a0:5c:38:e0:17:70:a0:
d6:38:3c:ed:b4:2c:fb:b6:2d:db:8a:2f:ef:b9:26:93:eb:3b:
c3:8b:1e:22:56:7a:cc:52:1f:04:a5:26:f9:a3:8d:9c:8d:ac:
98:6c:e8:bc:42:0f:74:a5:08:18:67:c3:03:32:ae:7f:54:a9:
3c:db:f7:ea:34:52:e8:ed:56:36:5d:e6:2d:26:6b:7e:87:11:
d8:e1:b8:8f:14:83:82:d1:ed:56:7e:20:0d:bd:9f:cc:80:41:
ad:a7:24:ae:03:67:aa:26:ca:ce:29:10:b3:9d:d6:5f:43:2c:
5e:60:eb:04:8e:8b:67:1a:46:e9:73:38:79:f4:9b:63:0f:09:
68:e1:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:06 2024 by rpki-client on console-ams.rpki-client.org