Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/GAwAhnhEUeBA2rEZ0olLS0vcp6k.roa
File: GAwAhnhEUeBA2rEZ0olLS0vcp6k.roa (raw, json)
Hash identifier: LE2d9xMGdkNoX72UoIfKNzK76cxen8GPilrDVX6EJWc=
Subject key identifier: 18:0C:00:86:78:44:51:E0:40:DA:B1:19:D2:89:4B:4B:4B:DC:A7:A9
Certificate issuer: /CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Certificate serial: 018CC348C631159D8961CA7422DCFF836E23
Authority key identifier: 85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/GAwAhnhEUeBA2rEZ0olLS0vcp6k.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.214.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c6:31:15:9d:89:61:ca:74:22:dc:ff:83:6e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=180c0086784451e040dab119d2894b4b4bdca7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:e8:b3:e3:55:ee:33:43:fd:a9:c9:8f:4c:
56:cb:87:1c:bb:fd:e2:71:c0:d3:7a:28:ec:78:6a:
e9:e9:b0:41:8c:3a:de:2f:4e:f1:5d:cd:28:e0:c5:
b0:72:20:f8:ab:66:4e:f3:c2:3d:f8:3f:2e:bb:d6:
cc:63:0b:ed:d3:e7:39:ca:29:00:06:3d:39:34:e9:
98:60:32:46:48:7d:cd:fd:07:33:5d:4c:b6:ed:e5:
f4:79:5e:1c:06:8a:74:40:5c:19:fb:18:33:2c:92:
98:ba:17:b6:d4:ab:77:87:85:d5:c6:b8:f4:26:87:
a6:2f:a5:91:ee:0a:38:0b:99:7e:86:f3:8f:b7:52:
70:ef:8b:05:bd:55:49:f3:ec:b8:75:be:79:2e:2e:
56:cb:35:f6:16:3a:36:d7:1f:ee:0a:94:98:37:b5:
c7:9f:4b:9d:d3:bd:e9:fd:29:a6:a3:82:fb:38:bb:
66:bc:81:58:53:bc:ac:8e:fd:1e:33:8c:f8:e6:5d:
51:e2:f8:e6:ec:3e:7c:02:14:70:07:2d:97:b4:54:
a6:a1:18:dd:92:fc:07:db:e6:0b:bc:9f:be:87:0a:
49:37:4f:8a:30:39:9b:8d:30:3e:98:08:f0:b3:ff:
93:e9:9b:0d:1d:8f:70:99:65:c9:3c:23:ff:89:d0:
82:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0C:00:86:78:44:51:E0:40:DA:B1:19:D2:89:4B:4B:4B:DC:A7:A9
X509v3 Authority Key Identifier:
keyid:85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/GAwAhnhEUeBA2rEZ0olLS0vcp6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.164.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b1:77:ea:a9:71:13:6b:e1:f5:1a:88:64:e3:45:1a:20:20:
54:51:6b:83:c8:a4:8a:75:dd:01:f7:7d:69:e1:d2:e3:b2:ab:
4e:8e:a4:7f:37:ed:6a:4e:4e:a4:a6:5f:c7:88:39:99:c6:13:
00:0f:46:ae:09:15:68:68:45:98:89:9c:19:33:ee:8b:17:e3:
c7:fc:68:3f:42:98:56:0a:ea:fd:32:bd:d2:18:f4:dd:eb:1b:
59:ad:93:c1:cd:b6:29:d3:e3:ec:39:82:d9:1d:11:31:f4:b2:
8b:82:75:23:c9:f8:fe:4f:7e:da:c2:3b:e6:76:9f:84:0d:71:
66:f6:e2:e8:c5:58:3c:b7:ee:ea:d1:0e:64:ba:4b:03:8c:5a:
74:b3:76:2e:ed:c4:af:31:db:c3:ff:4b:f3:cb:8f:ca:89:83:
c9:5e:c3:e1:f6:07:6d:7c:77:75:3b:48:51:e4:1a:9c:49:7b:
52:89:f1:20:4b:70:4c:25:ea:85:64:39:0e:4b:54:2d:ca:0a:
b8:d8:74:51:e6:ce:c6:81:c6:a3:fe:1c:76:87:6c:33:cf:b6:
42:d0:3d:fd:31:e1:3e:bb:da:d8:06:55:8c:d6:d7:2c:7e:39:
cf:14:68:46:6e:c1:e0:a5:b0:53:52:71:42:f8:3f:81:d7:e4:
ea:2c:0b:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSMYxFZ2JYcp0Itz/g24jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDlkOTJlMmRkOTdhNjE1MjQ0ZDU0OWNhM2Y1Y2M2MTU5
MzJjM2MwHhcNMjQwMTAxMDQyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODBjMDA4Njc4NDQ1MWUwNDBkYWIxMTlkMjg5NGI0YjRiZGNhN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Tos+NV7jND/anJj0xWy4ccu/3i
ccDTeijseGrp6bBBjDreL07xXc0o4MWwciD4q2ZO88I9+D8uu9bMYwvt0+c5yikA
Bj05NOmYYDJGSH3N/QczXUy27eX0eV4cBop0QFwZ+xgzLJKYuhe21Kt3h4XVxrj0
JoemL6WR7go4C5l+hvOPt1Jw74sFvVVJ8+y4db55Li5WyzX2Fjo21x/uCpSYN7XH
n0ud073p/Smmo4L7OLtmvIFYU7ysjv0eM4z45l1R4vjm7D58AhRwBy2XtFSmoRjd
kvwH2+YLvJ++hwpJN0+KMDmbjTA+mAjws/+T6ZsNHY9wmWXJPCP/idCClwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgMAIZ4RFHgQNqxGdKJS0tL3KepMB8GA1UdIwQY
MBaAFIVJ2S4t2XphUkTVSco/XMYVkyw8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVuWkxpM1plbUZTUk5WSnlqOWN4aFdUTER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jOGQ2MWItZTdkMC00NTY4LTk3NmMt
OGUxY2E4NTYzMWQwLzEvR0F3QWhuaEVVZUJBMnJFWjBvbExTMHZjcDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9jOGQ2MWItZTdkMC00NTY4LTk3NmMtOGUxY2E4NTYzMWQw
LzEvaFVuWkxpM1plbUZTUk5WSnlqOWN4aFdUTER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudakMA0G
CSqGSIb3DQEBCwUAA4IBAQAFsXfqqXETa+H1Gohk40UaICBUUWuDyKSKdd0B931p
4dLjsqtOjqR/N+1qTk6kpl/HiDmZxhMAD0auCRVoaEWYiZwZM+6LF+PH/Gg/QphW
Cur9Mr3SGPTd6xtZrZPBzbYp0+PsOYLZHREx9LKLgnUjyfj+T37awjvmdp+EDXFm
9uLoxVg8t+7q0Q5kuksDjFp0s3Yu7cSvMdvD/0vzy4/KiYPJXsPh9gdtfHd1O0hR
5BqcSXtSifEgS3BMJeqFZDkOS1Qtygq42HRR5s7Ggcaj/hx2h2wzz7ZC0D39MeE+
u9rYBlWM1tcsfjnPFGhGbsHgpbBTUnFC+D+B1+TqLAsJ
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:41 2024 by rpki-client on console.sobornost.net