Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/zrlmGyE1PVo4ZDSDP3y4yeApU-8.roa
File: zrlmGyE1PVo4ZDSDP3y4yeApU-8.roa (raw, json)
Hash identifier: fD/RKcgbpmRa5rNyKDYmUd7TL2/lbF5Kdov4m2dysMo=
Subject key identifier: CE:B9:66:1B:21:35:3D:5A:38:64:34:83:3F:7C:B8:C9:E0:29:53:EF
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0190538BE137CB6446198D568278D41747BB
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/zrlmGyE1PVo4ZDSDP3y4yeApU-8.roa
Signing time: Wed 26 Jun 2024 07:56:34 +0000
ROA not before: Wed 26 Jun 2024 07:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 89.191.120.0/22 maxlen: 22
91.123.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:8b:e1:37:cb:64:46:19:8d:56:82:78:d4:17:47:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jun 26 07:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceb9661b21353d5a386434833f7cb8c9e02953ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:cb:55:40:09:43:9a:7e:e5:ab:64:a8:47:
8a:5d:ad:c8:3f:1f:3d:c8:88:a0:b6:ce:9e:d2:ee:
16:55:21:d2:58:db:61:45:e2:5a:f3:4d:e5:d9:03:
65:97:49:cb:37:7d:a1:ef:b6:31:93:3a:dd:b3:44:
0e:1c:f4:f4:0b:5a:66:e4:80:c0:0b:a9:40:a4:cc:
7e:8a:ea:b1:53:c7:b6:a3:1f:ce:4a:c3:a4:96:21:
10:34:a8:44:22:8c:db:e6:4a:07:0c:20:6b:4a:e8:
f0:79:67:a0:de:04:cc:b3:18:80:fd:91:4e:a4:ea:
6b:ec:e9:d9:bf:00:34:96:17:e2:3c:b9:be:54:f6:
fb:73:bd:01:2a:4d:6b:08:5a:f0:13:96:05:6a:bd:
7a:d5:24:5b:d9:46:58:eb:bd:f5:46:76:e1:d0:b5:
bd:2a:87:ca:32:dc:38:ef:07:5e:cf:24:43:ec:f1:
f0:d1:0b:16:90:c0:6a:65:9f:7b:10:8a:27:d2:8f:
fc:07:f3:42:62:6a:71:81:01:ce:e2:61:11:48:00:
ce:d5:04:36:ad:d6:a3:e2:12:b3:08:d5:49:93:2e:
d8:40:ec:21:46:c4:67:c3:c5:9e:e8:f5:fa:5b:6f:
2b:dc:cb:11:a8:40:5c:57:3b:40:cc:c2:89:e5:c0:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B9:66:1B:21:35:3D:5A:38:64:34:83:3F:7C:B8:C9:E0:29:53:EF
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/zrlmGyE1PVo4ZDSDP3y4yeApU-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.120.0/22
91.123.64.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:10:2c:09:f6:ee:f0:9c:de:1d:de:f5:91:82:21:79:b5:d9:
27:ea:0e:68:34:a9:f7:79:e4:c7:de:a4:e4:70:d9:98:57:fb:
90:6e:4d:02:6b:1f:67:48:52:98:13:49:cc:8d:98:32:82:24:
fa:9d:68:bd:cc:3f:1d:97:83:e5:39:6e:62:11:7b:05:19:70:
21:03:62:49:82:4d:6d:49:b6:5e:c9:78:15:cc:85:92:af:39:
fa:ed:38:47:42:4d:06:c0:ac:6e:3c:7d:87:52:9e:00:64:10:
38:8c:b6:76:cb:ba:a1:9b:26:e3:c4:36:20:86:db:8e:27:d2:
bf:a9:19:ad:37:78:66:e9:83:c2:25:84:ae:f7:b9:24:a7:fc:
14:54:a2:f0:51:44:6a:78:41:ad:07:1a:d5:82:e0:ff:78:5e:
6f:48:3c:0b:7d:c3:28:c5:87:bc:19:d6:a5:f0:4b:e8:95:01:
11:e9:11:b6:a4:27:46:27:81:eb:ff:84:3d:fb:5b:a8:54:f2:
58:25:8d:cc:c9:46:e0:f8:ba:d4:6a:75:12:15:c3:8d:84:dc:
ea:e7:f1:8d:ba:ff:2d:9d:b2:19:e2:b6:b8:eb:ec:6e:40:d4:
98:c2:f1:50:c3:5a:fd:d9:06:77:9e:26:39:a3:0c:97:0f:1a:
f7:91:00:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 10:40:55 2024 by rpki-client on console-ams.rpki-client.org