Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/12e546-0000-45ec-b19f-dcbe28294241/1/GJVGmTSKDGaquZJPYCCKcL7ZSfY.roa
File: GJVGmTSKDGaquZJPYCCKcL7ZSfY.roa (raw, json)
Hash identifier: 7k+8OeAwJTAAwNpeNOdUz28077M6WRz7HStQPppIjvA=
Subject key identifier: 18:95:46:99:34:8A:0C:66:AA:B9:92:4F:60:20:8A:70:BE:D9:49:F6
Certificate issuer: /CN=974801a0c6f084154acba91154cb50dd08e5a2c3
Certificate serial: 018572CCBC793C8B0D1FCBB74F7E57EE7350
Authority key identifier: 97:48:01:A0:C6:F0:84:15:4A:CB:A9:11:54:CB:50:DD:08:E5:A2:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0gBoMbwhBVKy6kRVMtQ3QjlosM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/12e546-0000-45ec-b19f-dcbe28294241/1/GJVGmTSKDGaquZJPYCCKcL7ZSfY.roa
Signing time: Mon 02 Jan 2023 14:04:58 +0000
ROA not before: Mon 02 Jan 2023 14:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201704
IP address blocks: 212.63.96.0/21 maxlen: 21
37.98.200.0/22 maxlen: 22
185.65.184.0/22 maxlen: 22
89.42.164.0/22 maxlen: 22
2a03:1d20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:bc:79:3c:8b:0d:1f:cb:b7:4f:7e:57:ee:73:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974801a0c6f084154acba91154cb50dd08e5a2c3
Validity
Not Before: Jan 2 14:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18954699348a0c66aab9924f60208a70bed949f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:f1:24:88:31:b5:43:e2:6f:68:85:d9:61:
fb:c8:d8:7a:ad:a9:96:ee:a7:d4:1e:26:ec:e0:7d:
e5:67:c7:b8:e0:5b:1d:c2:7d:69:14:76:6a:2e:e8:
d3:88:96:de:91:41:b7:9f:c3:7b:75:c9:68:6f:3b:
63:b7:3c:d6:b6:1e:47:30:c9:6d:38:0b:b8:f3:26:
55:5b:a1:a1:76:09:53:51:8f:8f:f0:22:f1:ac:ef:
bd:98:71:85:9e:0e:c2:5d:09:a9:cb:90:8c:e1:92:
a4:db:0d:49:0a:91:a6:9a:38:39:70:e0:dc:a6:a5:
6f:47:5d:54:63:14:c2:d1:f1:a5:8a:b2:de:21:30:
41:a9:69:fb:c2:82:3b:6a:18:21:e1:07:7f:d5:5e:
67:66:69:00:b5:b5:21:d0:f6:fb:76:ab:21:ca:74:
d1:5e:35:65:c8:be:4c:e7:d3:43:78:48:fd:0b:dd:
d3:d8:ff:60:58:23:7a:d6:8e:32:ea:7f:f4:fa:c7:
f8:7f:32:b1:6f:e1:41:9a:b1:be:aa:b5:48:ff:a0:
ba:fb:6f:97:2a:de:bb:3d:2c:e3:0d:1c:ae:73:31:
88:b4:fd:c5:3a:e7:b2:1d:5e:13:a2:25:ed:5a:9a:
56:de:53:01:16:0e:59:bc:c9:2b:57:a7:89:63:f5:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:95:46:99:34:8A:0C:66:AA:B9:92:4F:60:20:8A:70:BE:D9:49:F6
X509v3 Authority Key Identifier:
keyid:97:48:01:A0:C6:F0:84:15:4A:CB:A9:11:54:CB:50:DD:08:E5:A2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0gBoMbwhBVKy6kRVMtQ3QjlosM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/12e546-0000-45ec-b19f-dcbe28294241/1/GJVGmTSKDGaquZJPYCCKcL7ZSfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/12e546-0000-45ec-b19f-dcbe28294241/1/l0gBoMbwhBVKy6kRVMtQ3QjlosM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.200.0/22
89.42.164.0/22
185.65.184.0/22
212.63.96.0/21
IPv6:
2a03:1d20::/32
Signature Algorithm: sha256WithRSAEncryption
4d:df:1c:f0:e4:91:5b:29:38:6a:52:0a:d3:1d:e3:b0:85:17:
0b:18:3b:fb:03:56:65:36:5d:0e:26:0d:bc:a8:ac:af:11:91:
2e:a8:f4:db:8c:d9:96:6b:d3:b3:19:6f:bd:9b:f4:ac:39:df:
4c:47:d9:2d:bc:40:56:1f:79:67:91:57:1e:ce:f4:6c:07:1e:
ed:b4:fe:8f:19:fe:da:e9:27:ca:34:a5:75:f7:46:60:c8:2e:
ee:40:62:06:28:57:4a:34:d9:fd:24:4c:24:ed:30:a4:ba:40:
10:d4:98:95:11:43:e8:bc:0c:2f:35:0c:1c:5b:7d:9c:88:64:
a4:4f:c8:6a:16:de:50:b5:db:d6:c4:01:5a:06:33:8e:28:b5:
38:38:34:1a:33:28:6a:83:53:1b:ad:e5:0c:bc:db:a9:92:a9:
52:d0:ed:c2:0c:d9:11:c2:5f:e4:ae:65:e7:59:b6:0b:7c:15:
e4:fc:0f:9c:3c:77:07:5e:df:f5:cb:26:34:1c:3b:45:0d:71:
05:12:d0:58:1d:3f:55:d5:4f:39:4e:9d:6b:bb:71:f5:b7:b0:
09:b3:fb:67:ef:55:f1:78:47:49:6b:ad:89:4b:a3:df:3d:93:
fc:1a:ba:1e:18:53:29:7a:31:c6:06:12:4d:71:6f:f7:29:09:
c3:54:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net