Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/ZLs-Ss4UalBRfVDqlRnKeXl_Yaw.roa
File: ZLs-Ss4UalBRfVDqlRnKeXl_Yaw.roa (raw, json)
Hash identifier: 1CYJ/vXoLz9fjosIzKUpy3VrUME01iyzRlXM2WjZLIg=
Subject key identifier: 64:BB:3E:4A:CE:14:6A:50:51:7D:50:EA:95:19:CA:79:79:7F:61:AC
Certificate issuer: /CN=0900ecb0ca64a78c33a69b0446eb5a8b4b1333a5
Certificate serial: 0DACCE33
Authority key identifier: 09:00:EC:B0:CA:64:A7:8C:33:A6:9B:04:46:EB:5A:8B:4B:13:33:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQDssMpkp4wzppsERutai0sTM6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/ZLs-Ss4UalBRfVDqlRnKeXl_Yaw.roa
Signing time: Sat 01 Jan 2022 09:58:30 +0000
ROA not before: Sat 01 Jan 2022 09:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57717
IP address blocks: 185.225.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229428787 (0xdacce33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0900ecb0ca64a78c33a69b0446eb5a8b4b1333a5
Validity
Not Before: Jan 1 09:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64bb3e4ace146a50517d50ea9519ca79797f61ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:1f:e4:ee:f8:80:f1:e6:26:96:41:a8:5b:
81:f3:2d:08:bc:05:e4:cd:43:b2:e3:6d:99:5c:37:
55:6d:f8:85:16:e5:0c:a1:b2:4d:da:55:49:29:8d:
28:e4:d2:3f:91:f8:9a:c5:60:30:e4:73:6c:4c:c6:
ab:0f:9f:b9:35:bc:25:e2:b3:4e:2d:86:a2:25:07:
ca:d1:8e:bc:49:a1:36:33:58:58:a5:bc:8c:1b:bc:
93:a5:49:28:75:58:d7:eb:9a:76:47:3f:ea:dd:3b:
5a:02:d1:2a:ff:22:36:4a:01:68:bb:54:64:02:c4:
d6:14:0b:ea:0c:46:b5:ff:87:3e:3a:37:f3:30:0a:
47:83:09:66:3e:4a:38:a2:70:48:7e:93:7c:c7:36:
8c:8e:6b:4a:10:ce:63:0c:ff:7e:0f:13:b6:c1:3c:
87:49:84:9d:a2:56:44:82:f0:aa:1a:24:47:ec:e1:
92:ae:48:82:8f:7c:e8:fe:1a:03:8d:65:20:e8:29:
7b:45:af:cd:b2:9a:67:e9:03:55:28:bd:ae:91:15:
95:1f:bf:01:6b:55:d7:da:c4:47:25:14:36:4e:ec:
c9:ea:0c:ff:c4:ed:4a:b1:78:67:54:fc:84:ad:09:
1d:95:8c:3b:31:20:7c:40:33:7a:c2:05:fb:32:e1:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BB:3E:4A:CE:14:6A:50:51:7D:50:EA:95:19:CA:79:79:7F:61:AC
X509v3 Authority Key Identifier:
keyid:09:00:EC:B0:CA:64:A7:8C:33:A6:9B:04:46:EB:5A:8B:4B:13:33:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQDssMpkp4wzppsERutai0sTM6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/ZLs-Ss4UalBRfVDqlRnKeXl_Yaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/CQDssMpkp4wzppsERutai0sTM6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.112.0/24
Signature Algorithm: sha256WithRSAEncryption
29:07:3f:d0:2b:57:99:4b:0d:84:01:84:3c:06:84:87:36:4a:
d1:8b:88:60:ce:e8:51:f0:22:8c:78:8c:f9:e7:df:92:10:0a:
64:ab:0d:1c:99:73:33:d9:b6:bb:8f:38:b0:0a:58:9e:08:c9:
ce:d9:18:3f:b6:d1:98:be:d5:bb:4c:6e:19:c6:e0:8d:33:79:
a6:d7:47:e6:60:7b:34:eb:14:01:08:78:c5:8b:71:9a:37:f4:
13:9b:41:d2:83:4b:73:4b:d7:dc:35:a4:f9:0a:af:dc:cd:07:
1d:4d:20:26:ff:8c:36:89:c7:86:c7:c2:a0:2d:83:cb:ab:f7:
9a:a2:d6:39:3a:ac:b0:7c:66:09:cd:cf:d6:fc:8c:8e:ae:2d:
8b:4b:31:cc:31:ef:57:e7:21:08:2a:f5:b1:40:d7:1f:3c:6b:
e5:6d:e0:34:cc:98:6d:f7:6e:cd:4b:cc:92:00:0e:33:a4:8e:
d6:8a:9b:36:37:20:f4:32:8f:16:52:70:7e:1e:85:70:1b:b3:
77:71:2c:1f:94:2e:69:35:41:b2:e9:e8:a9:00:8c:2a:a0:fa:
01:8e:b9:64:49:18:96:c2:e6:bb:80:fc:c0:3c:f7:5a:78:96:
a2:f4:70:8c:1d:1b:d9:f6:94:17:c5:ec:ce:6a:23:89:11:b3:
88:b1:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:14 2024 by rpki-client on console-ams.rpki-client.org