Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/Glt8rrLzh1mWLkJwh-Qkih4RYKA.roa
File: Glt8rrLzh1mWLkJwh-Qkih4RYKA.roa (raw, json)
Hash identifier: SbYRlye4a4k3Xhe2h4kqb8SJj7cj4N75MX9VvZOEQ8k=
Subject key identifier: 1A:5B:7C:AE:B2:F3:87:59:96:2E:42:70:87:E4:24:8A:1E:11:60:A0
Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial: 018CC4252D72A47E9377CEB92A5B9E852088
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/Glt8rrLzh1mWLkJwh-Qkih4RYKA.roa
Signing time: Mon 01 Jan 2024 08:30:19 +0000
ROA not before: Mon 01 Jan 2024 08:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2852
IP address blocks: 147.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2d:72:a4:7e:93:77:ce:b9:2a:5b:9e:85:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Validity
Not Before: Jan 1 08:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a5b7caeb2f38759962e427087e4248a1e1160a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:56:85:84:f8:87:08:28:40:26:b7:1c:e9:
64:c9:53:9d:be:81:e5:10:78:3d:32:a6:b5:00:3e:
28:80:60:bb:fa:58:4b:25:32:62:3c:9a:bb:22:90:
98:cd:87:ad:6c:2b:62:19:c1:80:45:53:61:3e:5d:
20:16:58:33:3f:00:f0:4c:96:90:74:ab:9e:bb:72:
52:a8:21:39:f7:09:80:e4:25:8f:fb:89:c4:56:f1:
f7:07:62:96:31:73:73:5c:c3:9a:de:ec:c0:4e:19:
46:08:b1:46:a7:ff:eb:15:51:00:f5:cb:9a:98:20:
9f:ef:82:2e:d4:bd:85:fa:5c:ab:03:e5:d0:2e:6b:
21:c5:59:4a:ed:e0:38:c9:9d:91:7d:59:39:3a:d5:
e7:b4:62:8e:56:a9:8a:5c:9b:bc:07:4c:a3:aa:27:
bf:51:5e:8c:f6:9d:96:5f:1d:65:6a:ce:ef:96:42:
d7:59:7b:bc:fc:2c:6d:ce:4e:2d:94:22:be:f9:5c:
59:f0:0c:90:af:5c:08:a9:a6:e1:12:e1:66:62:f0:
4d:e4:23:f5:6e:8b:ef:1a:69:44:8a:ff:72:6a:7e:
47:cc:db:98:ca:25:90:b6:86:8c:9d:e8:a3:c6:93:
26:1d:46:c8:6e:4a:eb:7d:eb:37:28:6b:d3:69:4f:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5B:7C:AE:B2:F3:87:59:96:2E:42:70:87:E4:24:8A:1E:11:60:A0
X509v3 Authority Key Identifier:
keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/Glt8rrLzh1mWLkJwh-Qkih4RYKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:cc:20:be:45:b1:48:7a:d3:f2:3d:15:14:be:d6:b5:16:fb:
a4:d6:a0:91:76:0b:79:b1:21:2b:01:0c:2e:59:b6:42:c4:85:
03:69:0d:9f:39:4c:96:a0:8c:f5:a3:0d:32:4e:74:17:a2:08:
28:60:6a:62:a0:db:dd:dd:17:4e:b1:8e:47:ac:ca:be:c1:09:
fb:a7:25:4b:4b:b5:a1:c5:33:99:b7:0e:d4:1c:4a:11:5b:ac:
e7:26:bd:a2:a9:ba:d8:71:0c:1e:4d:3d:fe:b4:7c:c7:6a:b3:
11:f9:6e:ac:08:f8:b8:41:a6:db:09:62:12:fb:13:d9:f5:1e:
9c:e0:92:5f:76:92:c8:46:6d:e2:81:b6:36:38:45:0b:de:c7:
c8:22:a6:b1:e4:08:c3:54:52:99:7d:ac:cf:14:1f:52:30:da:
90:9d:56:7f:98:14:11:21:ef:68:ba:da:bf:30:c7:d2:ce:33:
7b:76:58:16:5a:c2:93:57:19:59:5b:cc:09:3a:58:4c:20:c9:
10:15:0a:34:71:a8:dd:6b:b5:d5:b2:65:ff:9d:36:7a:c4:c3:
1e:47:2c:cb:0e:22:60:b9:65:e3:b5:0d:d4:a8:c0:f3:90:94:
94:19:71:e7:5b:44:6d:ba:e9:1f:27:58:58:b7:03:54:9b:4f:
2b:2c:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:55 2024 by rpki-client on console.sobornost.net