Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/GKVu_o75NTVrJhwXf9FnPlCzXwo.roa
File: GKVu_o75NTVrJhwXf9FnPlCzXwo.roa (raw, json)
Hash identifier: WpBKGVpR4WBr0PzwdzeCGKsuWoKCjSEs9PTiTT7yDMo=
Subject key identifier: 18:A5:6E:FE:8E:F9:35:35:6B:26:1C:17:7F:D1:67:3E:50:B3:5F:0A
Certificate issuer: /CN=aa563f5200a4933024e7b47d778619458568adb0
Certificate serial: 0185D4D6AE886FE1C79A657C7E444A5B00B7
Authority key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/GKVu_o75NTVrJhwXf9FnPlCzXwo.roa
Signing time: Sat 21 Jan 2023 14:58:37 +0000
ROA not before: Sat 21 Jan 2023 14:58:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 194.26.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:d6:ae:88:6f:e1:c7:9a:65:7c:7e:44:4a:5b:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa563f5200a4933024e7b47d778619458568adb0
Validity
Not Before: Jan 21 14:58:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18a56efe8ef935356b261c177fd1673e50b35f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:f6:66:d5:bc:77:e0:03:32:6a:d0:bc:5d:
b2:88:9b:10:83:c2:5b:38:8a:fc:ed:fb:f5:13:4a:
ba:e3:1f:d2:12:92:cf:03:22:3a:34:17:98:9b:bf:
67:36:1f:df:d6:a1:39:28:69:73:47:b1:1d:d8:c7:
13:d4:9e:e5:bf:c5:0f:b0:b3:96:23:85:2f:57:ee:
99:40:d5:8b:3d:bb:6b:09:35:4f:44:b0:c7:46:d7:
20:bc:a1:f3:04:cb:95:14:85:ae:0c:ee:c4:a7:bf:
57:06:5a:78:13:17:0c:5d:3b:10:c5:6f:bb:30:98:
0f:90:ec:22:6b:d2:db:2b:19:41:dd:31:3b:f9:f3:
4d:24:ec:6c:dc:c2:d7:c9:65:96:7d:ce:1c:65:56:
b7:59:63:0f:69:af:e5:18:80:12:e1:27:0f:dc:43:
11:e8:ea:c9:63:25:08:eb:69:3b:bf:13:05:92:b6:
1d:ea:26:6a:62:fd:c1:5c:ba:58:7e:4a:4b:60:e8:
4f:cf:72:49:a3:0c:62:99:47:9e:af:2c:e3:dc:b2:
dd:37:e2:09:4c:58:c4:2b:77:64:cf:fe:8e:34:a6:
97:8f:7e:80:74:c9:0b:cb:49:7a:03:9a:57:4f:1a:
fd:37:f2:2a:31:28:db:ee:53:1b:d6:98:2b:3b:b6:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A5:6E:FE:8E:F9:35:35:6B:26:1C:17:7F:D1:67:3E:50:B3:5F:0A
X509v3 Authority Key Identifier:
keyid:AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/GKVu_o75NTVrJhwXf9FnPlCzXwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:dc:d0:c8:65:cf:94:58:2c:af:fc:f9:7c:4b:09:58:1a:6d:
58:21:44:1a:57:7f:dc:69:50:f6:36:a9:43:2b:f4:7e:f8:67:
2e:3f:c9:be:a4:2f:93:c1:9a:ec:15:90:d8:ab:a3:79:d1:bc:
af:a1:1e:ab:90:15:00:e8:1c:8c:0b:66:85:1c:32:36:9e:51:
8b:61:9a:62:46:87:bf:7a:bf:35:f8:e7:35:e0:7a:3c:fd:6a:
bc:4d:74:8b:69:7a:9e:4c:56:d9:37:15:0d:e1:ec:79:bf:74:
42:0a:f2:ea:ae:3e:8f:9b:7e:79:82:55:3e:95:b9:46:57:d3:
c6:cf:6d:cd:9a:bb:17:0d:39:8d:3e:ae:99:c0:0a:ff:4b:b6:
dc:8c:98:7e:1b:b2:e5:a2:05:e7:68:b3:8d:1f:31:fd:db:00:
ad:c8:ad:5c:74:84:8b:84:91:88:41:8b:17:f7:ac:1f:2e:14:
a9:f6:c9:40:be:14:7c:31:cf:f7:2c:68:dc:c9:c7:cf:32:6b:
84:f0:69:b8:4f:32:c1:8a:8a:4a:d9:b6:d0:24:ae:c2:c4:e0:
d5:aa:8b:bb:41:e8:71:46:f8:0a:81:f3:21:a9:74:dd:6d:36:
8e:9f:f6:a9:b1:84:5e:4a:7f:e6:ee:f4:b4:02:86:ff:db:15:
e8:c7:ad:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXU1q6Ib+HHmmV8fkRKWwC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTYzZjUyMDBhNDkzMzAyNGU3YjQ3ZDc3ODYxOTQ1ODU2
OGFkYjAwHhcNMjMwMTIxMTQ1ODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGE1NmVmZThlZjkzNTM1NmIyNjFjMTc3ZmQxNjczZTUwYjM1ZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z72ZtW8d+ADMmrQvF2yiJsQg8Jb
OIr87fv1E0q64x/SEpLPAyI6NBeYm79nNh/f1qE5KGlzR7Ed2McT1J7lv8UPsLOW
I4UvV+6ZQNWLPbtrCTVPRLDHRtcgvKHzBMuVFIWuDO7Ep79XBlp4ExcMXTsQxW+7
MJgPkOwia9LbKxlB3TE7+fNNJOxs3MLXyWWWfc4cZVa3WWMPaa/lGIAS4ScP3EMR
6OrJYyUI62k7vxMFkrYd6iZqYv3BXLpYfkpLYOhPz3JJowximUeeryzj3LLdN+IJ
TFjEK3dkz/6ONKaXj36AdMkLy0l6A5pXTxr9N/IqMSjb7lMb1pgrO7aqjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBilbv6O+TU1ayYcF3/RZz5Qs18KMB8GA1UdIwQY
MBaAFKpWP1IApJMwJOe0fXeGGUWFaK2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxZX1VnQ2trekFrNTdSOWQ0WVpSWVZvcmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zMWYzOTctNDMxNS00NGYwLWJhZDkt
MjY0OWUxZmRhMGY1LzEvR0tWdV9vNzVOVFZySmh3WGY5Rm5QbEN6WHdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zMWYzOTctNDMxNS00NGYwLWJhZDktMjY0OWUxZmRhMGY1
LzEvcWxZX1VnQ2trekFrNTdSOWQ0WVpSWVZvcmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrfMA0G
CSqGSIb3DQEBCwUAA4IBAQBL3NDIZc+UWCyv/Pl8SwlYGm1YIUQaV3/caVD2NqlD
K/R++GcuP8m+pC+TwZrsFZDYq6N50byvoR6rkBUA6ByMC2aFHDI2nlGLYZpiRoe/
er81+Oc14Ho8/Wq8TXSLaXqeTFbZNxUN4ex5v3RCCvLqrj6Pm355glU+lblGV9PG
z23NmrsXDTmNPq6ZwAr/S7bcjJh+G7LlogXnaLONHzH92wCtyK1cdISLhJGIQYsX
96wfLhSp9slAvhR8Mc/3LGjcycfPMmuE8Gm4TzLBiopK2bbQJK7CxODVqou7Qehx
RvgKgfMhqXTdbTaOn/apsYReSn/m7vS0Aob/2xXox60l
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:01 2023 by rpki-client on console.sobornost.net