Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/GZu4yn4ESi88WYOU1FX-mSHFLG4.roa
File: GZu4yn4ESi88WYOU1FX-mSHFLG4.roa (raw, json)
Hash identifier: p7JbmuWeFq8+tXy9HvJctse+MK620Dfw+5qu8j3wKmc=
Subject key identifier: 19:9B:B8:CA:7E:04:4A:2F:3C:59:83:94:D4:55:FE:99:21:C5:2C:6E
Certificate issuer: /CN=a2bf6de589801fee3c21dadb7e480fc5c58fce8f
Certificate serial: 0188916C45666F11E4A522D2C1505C93AD5F
Authority key identifier: A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/or9t5YmAH-48IdrbfkgPxcWPzo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/GZu4yn4ESi88WYOU1FX-mSHFLG4.roa
Signing time: Tue 06 Jun 2023 15:56:11 +0000
ROA not before: Tue 06 Jun 2023 15:56:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 185.202.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6c:45:66:6f:11:e4:a5:22:d2:c1:50:5c:93:ad:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bf6de589801fee3c21dadb7e480fc5c58fce8f
Validity
Not Before: Jun 6 15:56:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=199bb8ca7e044a2f3c598394d455fe9921c52c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:ac:cb:39:e9:38:2a:47:90:60:62:90:2b:
ed:82:a8:d8:28:c7:20:3d:c7:56:fd:da:fc:ba:84:
5c:82:0d:c4:51:9e:65:b9:d8:5f:87:d9:99:ee:a1:
22:4f:bf:d8:a0:3e:df:1f:b8:05:54:68:82:35:fb:
08:7f:c5:4c:96:c9:21:7b:3b:f5:bb:e2:5e:48:b6:
ad:ea:65:03:27:65:a4:2f:41:7e:37:40:93:5f:6e:
9c:0b:e5:de:30:b1:e8:2f:08:70:4e:5a:1c:dc:dc:
92:e1:72:5e:be:68:d2:a1:e2:e1:9d:dd:ab:e3:cc:
99:83:f0:f2:49:3d:02:89:54:35:a8:a7:d6:23:4c:
02:78:1f:15:3f:ce:62:b2:b6:7c:ec:37:5c:cb:67:
ca:31:b1:5f:dc:c6:7f:b0:ef:ce:2a:30:76:2f:65:
b6:5f:52:4c:40:00:1c:b8:6a:de:4e:2d:37:8c:cb:
22:c2:24:b4:05:fd:ee:ac:65:c4:ec:4d:3a:dd:34:
a3:73:3c:b3:84:23:3b:7c:b4:34:d6:79:56:dc:14:
d0:b7:83:7a:89:8b:aa:a7:02:c2:3a:51:29:aa:c1:
ec:6d:ef:02:17:39:b2:62:ca:b1:c6:62:a2:ff:29:
ac:53:51:67:4e:5d:d4:e2:0d:83:01:69:17:21:e0:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9B:B8:CA:7E:04:4A:2F:3C:59:83:94:D4:55:FE:99:21:C5:2C:6E
X509v3 Authority Key Identifier:
keyid:A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/or9t5YmAH-48IdrbfkgPxcWPzo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/GZu4yn4ESi88WYOU1FX-mSHFLG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/or9t5YmAH-48IdrbfkgPxcWPzo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:2b:b2:25:5a:0c:55:a7:cd:ee:d5:7d:fb:59:29:0f:d3:5f:
db:d3:c4:37:6b:ed:78:27:6f:26:ad:44:ec:59:56:86:1b:7f:
d0:58:67:43:6e:ca:1d:97:ba:7a:db:5a:50:2e:a5:34:9f:13:
4b:02:04:e1:d3:0b:de:b6:b8:a7:98:17:b6:6e:eb:2e:69:90:
d0:53:d7:45:d7:fc:a1:34:d6:3a:9b:d3:39:5f:7e:bc:71:3d:
8f:60:a9:e4:9c:9d:44:f2:bd:bc:29:d2:61:21:1d:31:36:e4:
8b:ad:c8:44:0c:a7:42:04:e6:6d:fe:50:f3:10:66:52:2a:6c:
86:22:a5:63:df:05:eb:29:e4:f9:5a:54:01:04:4c:3e:a8:c6:
cc:63:de:14:67:d4:e0:c5:28:7a:54:7d:d9:b5:9a:81:50:b0:
13:c7:9c:10:5e:7e:6e:08:6e:66:f7:0b:43:3a:2d:86:6f:2c:
78:84:7f:e0:6f:45:91:86:ab:47:9f:b4:88:48:3f:31:22:de:
03:d7:97:cc:f5:c6:10:16:ee:c0:9f:1d:06:a6:0e:8c:2f:be:
2c:41:1d:6c:ed:5e:f4:0b:b4:41:a9:88:77:31:cc:fd:23:28:
3f:7b:a9:06:3c:61:68:e6:06:f6:03:5c:50:80:fe:b5:51:e2:
89:a5:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net