Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/gtpGCZSIWzmM5jhgwwaVMQDYzRE.roa
File: gtpGCZSIWzmM5jhgwwaVMQDYzRE.roa (raw, json)
Hash identifier: a3E7qSmhTXKZqFbusXI4X4eywgDMqIXkzrfSdJprIZ4=
Subject key identifier: 82:DA:46:09:94:88:5B:39:8C:E6:38:60:C3:06:95:31:00:D8:CD:11
Certificate issuer: /CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
Certificate serial: 0369534B
Authority key identifier: 6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/gtpGCZSIWzmM5jhgwwaVMQDYzRE.roa
Signing time: Sat 01 Jan 2022 13:05:21 +0000
ROA not before: Sat 01 Jan 2022 13:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38974
IP address blocks: 195.216.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57234251 (0x369534b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
Validity
Not Before: Jan 1 13:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82da460994885b398ce63860c306953100d8cd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:2a:9a:1b:f4:b6:88:e7:65:f2:a0:8c:a4:
5a:7c:f0:4f:e2:b4:88:97:d2:27:bc:df:ec:b1:a8:
8e:b7:b2:d7:e2:68:3a:d4:91:1a:49:e1:42:73:9d:
a8:d8:db:a6:4e:f9:0c:1a:f4:da:f8:6a:65:87:1c:
44:05:3c:eb:0c:41:c0:ae:78:99:64:58:aa:21:ac:
b8:99:3a:07:8a:32:89:06:84:a1:c8:e0:37:f5:1c:
45:f8:c2:30:3f:e5:c3:40:34:c7:17:99:93:0c:cc:
ee:d3:1c:8d:28:7b:7e:c9:ff:37:5d:98:e7:03:13:
e0:21:68:d4:b7:58:2d:a0:f6:03:ca:97:82:ee:9c:
97:89:1b:09:83:c6:26:87:7f:5d:c0:5f:7e:e4:5a:
65:24:15:a7:6d:41:d0:3f:50:d5:8c:b9:a7:8d:26:
0a:60:4d:2e:e4:c2:4c:2d:00:0e:28:70:2c:24:f7:
c9:ab:28:c0:7b:68:ea:18:e8:25:12:71:ac:90:4b:
b7:a9:fe:62:82:df:e6:2a:21:dc:54:87:55:03:8f:
0e:c7:72:ec:ce:b5:fe:74:bd:72:19:d7:9e:14:28:
2e:2f:47:7d:1c:67:82:fc:65:dc:33:ff:32:87:42:
1d:1e:14:d9:40:3f:00:b0:74:b1:5b:9c:1f:78:7d:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:46:09:94:88:5B:39:8C:E6:38:60:C3:06:95:31:00:D8:CD:11
X509v3 Authority Key Identifier:
keyid:6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/gtpGCZSIWzmM5jhgwwaVMQDYzRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/atvUqFey-UUjwLFIXMSAixqncUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.152.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:d7:3d:2e:93:45:c4:cc:8b:52:21:0f:6b:54:e5:16:60:34:
04:fe:8b:9d:64:89:23:56:ef:79:b7:58:f3:23:ba:dc:bc:9f:
90:80:af:60:b7:4b:68:cc:e8:c8:fd:6f:06:d2:a7:6c:61:7c:
59:73:bb:cf:1a:67:33:12:c2:85:0b:ce:c3:37:2b:8a:c8:ac:
10:a1:29:ea:f7:4f:f2:0e:1a:82:3d:38:9e:71:f4:fd:6f:c3:
91:53:91:cd:14:6b:ed:b8:e8:87:25:66:41:3d:bc:8f:d1:47:
65:0f:be:09:ce:82:1d:d3:fb:d2:a8:f5:4c:78:d8:df:58:84:
13:55:e5:eb:60:02:a0:43:8c:db:f6:6c:2f:3b:eb:f4:fc:86:
a8:f9:39:7e:44:cc:2b:5c:8a:62:f2:0e:39:69:fd:17:34:a0:
3c:b9:ab:fb:fc:f9:c9:05:53:a6:dc:b6:0e:02:d0:cd:8d:01:
1a:63:7b:3b:8c:d4:d1:c0:d7:49:37:9a:ac:96:ba:32:9f:69:
c8:06:31:b2:e0:94:59:fd:14:25:a9:9b:58:df:81:72:0a:06:
9e:d8:83:9a:c9:2a:77:68:ff:4b:db:28:59:c6:e7:c9:be:e4:
0d:05:aa:17:bb:1b:29:56:c0:10:1f:f1:d3:59:cc:5c:6a:f5:
ce:cf:79:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:12 2023 by rpki-client on console.sobornost.net