Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/Gbv2nIYjbGDVwjOQvKUY0uju6RQ.roa
File: Gbv2nIYjbGDVwjOQvKUY0uju6RQ.roa (raw, json)
Hash identifier: qym9HN2JQ8rpZNNaW9846OiWkPiPDHC/vh1SdHiJbRw=
Subject key identifier: 19:BB:F6:9C:86:23:6C:60:D5:C2:33:90:BC:A5:18:D2:E8:EE:E9:14
Certificate issuer: /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Certificate serial: 018CCAA0B2A5AC37AACC3057F1ED6544FE01
Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/Gbv2nIYjbGDVwjOQvKUY0uju6RQ.roa
Signing time: Tue 02 Jan 2024 14:42:58 +0000
ROA not before: Tue 02 Jan 2024 14:42:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204978
IP address blocks: 185.233.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:a0:b2:a5:ac:37:aa:cc:30:57:f1:ed:65:44:fe:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589
Validity
Not Before: Jan 2 14:42:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19bbf69c86236c60d5c23390bca518d2e8eee914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:e7:a6:d1:f6:49:4d:7c:67:55:10:6d:12:
52:d0:b8:50:10:c2:ec:8f:31:fb:4b:1c:b0:da:1d:
f0:e7:bf:4e:c5:60:a2:da:b4:32:5b:4d:83:28:e2:
75:64:51:4c:1d:13:8a:90:fe:ea:ca:b8:de:c9:6f:
fe:a8:0d:01:4e:17:46:a6:48:39:55:63:32:27:30:
b6:ee:31:5e:60:95:e5:3d:8d:d4:03:0c:e6:cb:1f:
dc:c5:bc:68:29:bb:d5:09:5c:1c:ce:04:31:66:6a:
83:96:db:01:88:d1:f0:bc:d5:d3:87:8c:1d:f8:c7:
5e:aa:3e:47:75:2d:1a:04:dc:47:50:43:67:dc:8e:
71:7b:9e:1f:de:ee:0f:da:cb:90:f6:2e:da:df:84:
da:ae:a6:08:36:f3:40:43:34:88:bb:be:02:0a:d2:
4d:3f:1b:42:d0:e5:38:db:d5:f3:cf:b8:20:e8:e5:
6c:d6:d1:4a:c5:c3:03:0d:95:38:82:8d:e7:69:64:
96:ee:4d:a7:3b:17:11:56:6f:7c:e5:b3:f2:56:31:
36:78:37:0d:25:a2:48:fa:4c:79:fe:61:8a:f5:6d:
ff:c2:0c:27:5b:d1:2f:99:bf:d4:e0:18:11:44:e9:
ad:76:97:b8:16:1d:8d:50:e3:43:70:c6:13:9a:8c:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:F6:9C:86:23:6C:60:D5:C2:33:90:BC:A5:18:D2:E8:EE:E9:14
X509v3 Authority Key Identifier:
keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/Gbv2nIYjbGDVwjOQvKUY0uju6RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:b3:49:26:d9:b2:92:ec:65:7d:47:a2:c8:cf:5e:95:80:c4:
6f:66:07:a3:bd:f3:7a:c2:a3:af:34:ae:29:6f:ce:3b:97:83:
b4:69:6c:46:e1:7a:c7:06:9f:0b:4f:31:1a:56:82:02:a6:83:
15:f2:9e:04:bd:d8:80:8e:6b:77:a5:a4:cf:db:89:dd:86:d2:
c0:c2:42:ca:cb:07:6d:35:09:8d:c0:f8:67:71:af:73:03:45:
99:e5:a6:55:0f:33:99:df:77:54:52:5e:d8:16:ad:2f:98:24:
43:e1:17:4f:5b:38:ee:ab:8e:24:9f:70:1f:93:c2:b8:0a:6a:
92:cb:eb:a4:f0:e6:44:56:22:ce:6a:f9:2b:7b:6a:25:03:c0:
ad:91:37:0c:fc:ce:d8:36:9c:9f:19:16:dc:93:b5:09:85:d2:
fd:a4:8b:bc:41:84:3b:5a:53:e6:04:bf:ac:c5:22:0b:90:de:
9a:ee:df:ba:a8:bb:f4:12:48:98:b0:2d:cf:77:f7:58:f0:fa:
64:8c:b3:f2:64:39:5f:e3:be:92:e9:7d:61:3d:6a:72:67:66:
a9:d6:29:b2:76:75:fe:ad:cd:50:60:8d:58:ee:e8:64:ef:23:
f5:74:8d:78:7b:da:96:94:bd:cf:aa:bf:fe:ec:d5:34:25:b7:
4d:2f:26:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net