Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/ZErnldyyJojf4xmypiow055Wf8A.roa
File: ZErnldyyJojf4xmypiow055Wf8A.roa (raw, json)
Hash identifier: SurVJHyF+zIwYDB6Pe6qxdBdGYGz6vjWlbWT+YTsGpg=
Subject key identifier: 64:4A:E7:95:DC:B2:26:88:DF:E3:19:B2:A6:2A:30:D3:9E:56:7F:C0
Certificate issuer: /CN=33980d41e32a5616382e906840264945af02d67e
Certificate serial: 018570B09416A34185E5CE5D991C3345F5A9
Authority key identifier: 33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/ZErnldyyJojf4xmypiow055Wf8A.roa
Signing time: Mon 02 Jan 2023 04:14:58 +0000
ROA not before: Mon 02 Jan 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 94.103.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:94:16:a3:41:85:e5:ce:5d:99:1c:33:45:f5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33980d41e32a5616382e906840264945af02d67e
Validity
Not Before: Jan 2 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=644ae795dcb22688dfe319b2a62a30d39e567fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:e1:4d:d9:97:9a:d3:6e:33:46:8f:4a:76:
eb:d1:14:3f:44:ab:3d:50:c1:97:c7:5c:ca:8e:03:
dc:49:10:b7:6e:65:9e:3b:2d:0b:cb:ec:83:6d:e1:
b5:dc:ac:dc:b1:d5:24:81:2b:e3:99:dc:fa:6c:41:
16:49:f9:2d:75:04:0d:5c:ee:11:68:d2:54:8a:55:
7e:dc:13:cf:75:6e:5a:bc:48:7b:90:47:e2:c8:fa:
9f:1d:02:fc:0d:19:68:d6:cd:20:79:db:c2:80:71:
a2:27:0e:15:11:1a:eb:2b:62:c6:07:ae:2b:91:0e:
fb:82:24:8e:99:38:cb:ba:56:a1:42:93:1b:5a:8e:
3b:b8:ff:b6:c3:42:5f:d3:78:16:cb:a8:9e:d3:94:
67:87:d0:2e:66:1f:c6:a6:7c:a6:3e:f4:af:db:49:
aa:ee:23:4a:6d:10:5f:91:2c:27:22:d6:b6:50:11:
9d:72:4d:92:05:71:c1:72:62:ba:55:66:80:17:80:
a9:08:6c:6b:67:68:55:40:8f:4b:c7:fe:ec:6a:96:
f9:df:ac:91:43:b7:43:2f:16:3e:48:38:b1:93:1e:
fd:ee:cd:72:c9:ad:1f:c2:eb:7a:f2:4e:a8:7d:5f:
31:7c:f5:f1:a5:31:33:a7:65:c6:0a:8e:91:ab:62:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4A:E7:95:DC:B2:26:88:DF:E3:19:B2:A6:2A:30:D3:9E:56:7F:C0
X509v3 Authority Key Identifier:
keyid:33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/ZErnldyyJojf4xmypiow055Wf8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/M5gNQeMqVhY4LpBoQCZJRa8C1n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.177.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2a:bc:3e:63:3f:4d:bd:db:35:bc:5c:88:56:ea:2f:76:ce:
5f:7d:fc:6f:72:7d:8a:30:68:23:9b:20:2a:be:61:1e:5d:36:
51:7b:0a:7d:d5:a0:ea:70:6f:ef:3f:04:9a:b3:3c:db:2d:3a:
5e:58:3e:9b:d4:1b:97:25:3c:eb:6a:cb:7f:cb:61:fa:31:60:
e9:ff:7c:69:6e:01:58:b1:83:11:ec:87:67:b8:28:07:38:52:
0e:02:33:fa:10:94:4b:13:67:cf:9a:77:17:0c:7c:b8:21:bd:
c7:32:f0:37:20:c8:fc:03:5e:f7:23:e2:64:74:6c:73:25:e9:
20:f2:ca:d4:a0:25:a5:e8:cc:e6:d8:c6:29:85:ac:95:a6:e6:
9e:76:38:49:cd:17:cc:4c:38:bb:64:9f:11:ff:c7:64:bc:a6:
35:d9:d7:f4:bd:48:f3:62:ff:94:5b:78:84:4f:32:88:6b:9a:
02:da:48:da:24:8c:c8:db:0c:69:40:77:97:58:42:fa:75:d9:
34:f7:cb:ad:35:3c:58:a0:77:a0:54:01:68:78:97:7c:09:47:
34:8d:41:62:16:62:8b:52:65:77:ad:82:b0:8d:0f:a9:31:4e:
21:58:37:c1:a8:6b:be:d7:a5:0f:0a:ec:59:94:28:1b:16:b0:
49:b3:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:54 2024 by rpki-client on console-ams.rpki-client.org