Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/ZIkswJN2-dJ2FPV0rPWXBdzX650.roa
File: ZIkswJN2-dJ2FPV0rPWXBdzX650.roa (raw, json)
Hash identifier: igxxBXYxHFuHCh64iZO913ctsLW101cosBu9bubrcP8=
Subject key identifier: 64:89:2C:C0:93:76:F9:D2:76:14:F5:74:AC:F5:97:05:DC:D7:EB:9D
Certificate issuer: /CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Certificate serial: 1478BB69
Authority key identifier: 81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/ZIkswJN2-dJ2FPV0rPWXBdzX650.roa
Signing time: Sat 01 Jan 2022 12:01:56 +0000
ROA not before: Sat 01 Jan 2022 12:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203271
IP address blocks: 185.14.175.0/24 maxlen: 24
2a06:9080::/32 maxlen: 32
2a06:9087:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343456617 (0x1478bb69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81724e7b0cb233ae7e7f2eb3766959fc6827fb1b
Validity
Not Before: Jan 1 12:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64892cc09376f9d27614f574acf59705dcd7eb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:96:7b:71:8c:54:b7:29:2e:83:6c:ee:cb:
4a:fa:26:1d:87:09:18:de:3c:de:80:11:f4:4a:8a:
6f:e3:03:b6:91:36:a5:57:48:b8:85:a2:38:0c:e0:
0c:10:f3:0d:08:ea:93:c6:e4:99:60:5c:b6:87:94:
bf:af:b2:9f:a4:5c:f8:ce:28:b5:b0:9e:96:8b:b5:
b1:c5:93:10:8c:40:40:30:84:63:2e:5d:77:15:c7:
8b:ef:13:8c:a2:31:44:e0:87:00:eb:55:a7:dc:4e:
10:34:6c:c5:5a:6b:74:dc:fe:6b:fa:8f:65:4f:d8:
d4:8f:0f:d6:26:b9:05:8c:b9:0d:49:c3:61:39:a2:
85:13:1c:dc:58:f5:a3:4e:73:d6:3a:c6:4b:f8:97:
a6:4b:d1:81:b0:6d:81:23:10:7d:b4:bf:4c:d6:d1:
0d:ce:e3:c4:9d:d8:28:07:06:fc:ad:7d:16:b9:ca:
ea:d1:be:df:18:f0:7c:d5:c6:af:e3:a6:e9:18:36:
41:8f:24:db:06:69:28:cf:39:cc:f4:db:82:93:c4:
ab:76:9a:a0:74:2e:dd:ff:96:65:c5:6c:b6:96:5c:
47:2f:96:ee:e7:9d:be:77:64:48:c7:4c:17:cf:11:
a5:b7:4b:88:04:ab:49:0b:76:a1:39:e4:42:d6:d8:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:2C:C0:93:76:F9:D2:76:14:F5:74:AC:F5:97:05:DC:D7:EB:9D
X509v3 Authority Key Identifier:
keyid:81:72:4E:7B:0C:B2:33:AE:7E:7F:2E:B3:76:69:59:FC:68:27:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXJOewyyM65-fy6zdmlZ_Ggn-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/ZIkswJN2-dJ2FPV0rPWXBdzX650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/331659-30ca-4a88-a26c-440848c0cf71/1/gXJOewyyM65-fy6zdmlZ_Ggn-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.175.0/24
IPv6:
2a06:9080::/32
2a06:9087:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
93:2e:fc:c2:d5:92:d9:3f:4c:ff:b9:8b:43:6f:68:65:8b:0f:
3c:3d:8b:d4:d4:09:1f:4b:77:df:cf:d1:ff:79:71:28:c2:23:
27:46:05:32:5a:3b:f6:4f:ef:30:79:8e:f8:a5:b5:2e:80:d4:
d0:3d:7e:fa:3e:65:3d:bb:bb:e5:29:43:d9:30:02:cd:d4:50:
a2:00:f8:fc:8d:2d:cc:24:00:2e:2c:be:04:1c:c0:c8:36:1c:
42:c8:85:4f:63:07:fc:39:c0:ef:15:57:f4:6a:24:4b:b9:2a:
92:ba:2e:06:6e:48:fb:e1:66:f7:2d:47:2f:20:76:e9:7b:bd:
70:bf:ea:cf:3a:0f:0a:f2:76:a5:82:8d:b6:96:0c:7e:8a:6b:
4e:56:46:14:3a:9e:fa:e2:4f:29:25:15:c9:cf:22:a8:85:50:
c4:1b:cc:fc:71:7e:2f:80:40:7d:71:38:e0:f9:19:a9:f9:0b:
c1:00:d9:94:7a:05:ce:2f:72:86:a4:f9:32:ce:3c:56:1e:18:
9f:be:7c:e0:6f:13:53:f4:88:24:cc:af:8d:4a:35:0a:bb:71:
ff:a2:f2:1c:d6:94:11:ee:94:66:e5:f8:5d:8c:ed:dc:7e:83:
0a:74:f6:26:73:81:88:a6:f0:f0:a3:1f:9b:a2:fd:a1:af:5f:
b4:cc:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:26 2024 by rpki-client on console-ams.rpki-client.org