Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/GI885Z-m1RACko9lPly0YVkSREc.roa
File: GI885Z-m1RACko9lPly0YVkSREc.roa (raw, json)
Hash identifier: /cmbvf7kCKPvkybtpMt7uBUt52pUEmvXFktWORXATas=
Subject key identifier: 18:8F:3C:E5:9F:A6:D5:10:02:92:8F:65:3E:5C:B4:61:59:12:44:47
Certificate issuer: /CN=23daf57a212bb7f320a2246f97959575d0e68ce3
Certificate serial: 018976C284558276FFBE042E9C4984271EA4
Authority key identifier: 23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/GI885Z-m1RACko9lPly0YVkSREc.roa
Signing time: Fri 21 Jul 2023 04:43:26 +0000
ROA not before: Fri 21 Jul 2023 04:43:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 176.116.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:76:c2:84:55:82:76:ff:be:04:2e:9c:49:84:27:1e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23daf57a212bb7f320a2246f97959575d0e68ce3
Validity
Not Before: Jul 21 04:43:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=188f3ce59fa6d51002928f653e5cb46159124447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:ef:74:37:ed:23:c1:d8:65:c6:92:8a:90:
23:8c:47:36:62:ba:af:0b:b0:e1:b8:04:af:d6:ef:
12:23:fa:8f:9b:04:32:f7:50:ba:1e:b6:0d:87:ba:
e6:9d:bd:fd:dc:a5:f1:04:91:a5:f3:8c:ce:02:52:
f4:0a:85:25:d9:ce:ac:9c:f3:ae:37:06:90:81:9b:
11:ac:21:22:05:2d:5e:f4:e7:e6:c6:38:51:54:50:
91:f7:02:85:61:66:7d:01:0e:d7:85:6b:f0:d0:f6:
d7:aa:78:62:6c:70:6c:ec:fc:22:e7:97:48:f3:9c:
46:19:5a:10:18:c1:d6:6d:b6:21:01:e4:0b:44:02:
b0:20:d8:00:0b:d8:63:1c:6a:84:34:c1:61:42:fd:
a6:41:c7:e7:6a:b1:8e:ba:ce:16:db:f4:e4:6a:ee:
b8:22:56:ba:ad:c3:16:19:96:b2:81:6f:21:fa:77:
e4:a4:66:9b:cf:05:f8:d7:4d:e3:6a:92:f9:a0:ca:
50:7a:0f:29:57:49:27:84:d9:53:a7:81:6e:f8:f5:
48:3d:2e:eb:64:2c:04:f7:8b:20:58:7c:76:15:20:
6d:08:f5:23:08:01:52:8b:1f:16:04:80:f3:b1:05:
16:8b:0c:90:c5:ca:26:d4:10:f1:7b:cb:5d:4e:df:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8F:3C:E5:9F:A6:D5:10:02:92:8F:65:3E:5C:B4:61:59:12:44:47
X509v3 Authority Key Identifier:
keyid:23:DA:F5:7A:21:2B:B7:F3:20:A2:24:6F:97:95:95:75:D0:E6:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9r1eiErt_MgoiRvl5WVddDmjOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/GI885Z-m1RACko9lPly0YVkSREc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f7c4f1-341a-445e-8e33-50cb88276ae6/1/I9r1eiErt_MgoiRvl5WVddDmjOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d7:8a:50:28:d7:dd:d0:e7:f2:e0:74:df:05:f4:88:6a:47:
d0:be:71:94:34:60:a1:5c:68:ce:f0:9b:75:b6:68:2b:0e:5f:
2c:ca:10:28:ee:7b:2b:fa:29:aa:00:b1:52:10:9d:37:c8:d3:
76:f5:77:61:86:2f:51:40:04:30:f2:39:89:bf:b0:f7:39:12:
6c:0c:5c:92:83:fd:ec:dc:f2:40:99:37:12:09:4d:db:ab:bc:
92:3c:db:4a:e7:a4:e9:c5:17:69:8e:02:7c:10:c5:b9:ae:4d:
bc:16:2e:3a:a6:17:f9:3a:76:e2:47:0e:ef:7e:6d:30:b1:f3:
8a:ad:de:f4:74:63:34:6a:61:af:01:a6:f1:34:24:98:8d:5f:
5d:cc:2c:47:74:0f:2e:18:82:2c:4f:fc:7a:ee:a3:68:81:67:
54:b6:9c:fd:ed:8d:5a:83:9e:1c:d1:42:ea:e5:39:05:60:0a:
aa:b3:f3:5c:44:91:e8:45:6b:6d:8d:8e:58:00:f6:79:1a:bf:
15:4d:c3:85:5b:ad:0b:14:5a:c0:53:41:ec:81:f8:bd:21:c8:
45:e5:f2:fb:83:9d:24:d7:dc:90:74:01:33:38:c8:94:4a:97:
ca:0d:30:cc:6d:60:d6:70:8d:f0:9e:b4:ab:b1:11:7d:00:a7:
cb:92:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:31 2024 by rpki-client on console-ams.rpki-client.org