Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/ZDCC_tj2fjgBmj0xAv9sy3qduf4.roa
File: ZDCC_tj2fjgBmj0xAv9sy3qduf4.roa (raw, json)
Hash identifier: YRMN+I4RdIZw149YQcoLRFKhCY6L0qdO5oLUOHJf8X0=
Subject key identifier: 64:30:82:FE:D8:F6:7E:38:01:9A:3D:31:02:FF:6C:CB:7A:9D:B9:FE
Certificate issuer: /CN=40f16e506ae0ec6c41ef0437b855110474ba47dc
Certificate serial: 0186811B546056179E70AB4C7D7B8E10E2B9
Authority key identifier: 40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/ZDCC_tj2fjgBmj0xAv9sy3qduf4.roa
Signing time: Fri 24 Feb 2023 01:48:17 +0000
ROA not before: Fri 24 Feb 2023 01:48:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.145.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:81:1b:54:60:56:17:9e:70:ab:4c:7d:7b:8e:10:e2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f16e506ae0ec6c41ef0437b855110474ba47dc
Validity
Not Before: Feb 24 01:48:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=643082fed8f67e38019a3d3102ff6ccb7a9db9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:5f:8d:3d:6d:14:72:92:69:c7:59:44:fa:
71:a8:8f:c6:4e:2b:9a:55:94:b5:d5:e7:f2:4e:8d:
80:ad:fc:c5:04:a2:94:97:54:1a:4d:81:f7:d7:18:
4f:7c:8c:76:44:1a:92:d8:a1:9f:17:4c:f3:d1:ee:
8e:be:f1:23:74:31:f7:11:0a:93:a0:ca:1b:d6:c0:
bf:7a:7e:26:47:bd:7d:76:26:84:88:23:6e:66:99:
5e:08:0f:0e:9f:38:52:7b:6d:16:66:23:e7:9c:12:
59:1f:13:b1:93:26:ff:74:3a:50:25:c3:3c:9e:fc:
e9:77:0e:0a:e5:af:70:f8:77:f3:38:7f:7f:e2:73:
36:b0:c2:e7:fd:71:3e:07:19:d6:40:00:3c:68:da:
ba:ef:a8:6c:7f:fc:94:72:ce:41:be:12:89:12:72:
6e:48:93:87:b7:17:65:a0:0f:25:4d:db:2b:ef:c8:
c0:16:a0:f0:1a:19:38:d3:f5:78:9d:83:61:4a:87:
26:75:35:f9:f3:61:c4:e4:2d:bf:0b:47:72:31:fa:
ab:ce:aa:1e:f8:d9:60:42:2f:e5:cd:47:82:e3:a5:
b7:e2:70:b5:9f:ca:95:75:b7:9b:05:d7:bc:b8:6b:
2f:e9:58:cf:c7:4e:a5:e1:b2:7c:a4:92:0c:ac:4b:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:30:82:FE:D8:F6:7E:38:01:9A:3D:31:02:FF:6C:CB:7A:9D:B9:FE
X509v3 Authority Key Identifier:
keyid:40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/ZDCC_tj2fjgBmj0xAv9sy3qduf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:18:e9:72:42:60:99:e4:2a:f8:88:9d:17:f4:e1:e0:19:db:
2b:0b:01:ad:41:f0:91:2d:e9:39:6c:a6:8c:4c:91:62:f6:e3:
1b:27:ad:51:2b:bd:ef:92:cd:0e:17:7e:2c:62:ec:0e:6b:f8:
3f:26:7d:d3:01:66:b2:70:49:27:f6:67:d7:b4:ce:06:4e:57:
e8:b2:94:c2:9d:d2:d2:85:c7:24:07:65:97:b6:1c:0f:04:e1:
2b:ef:27:69:99:08:2b:89:f5:95:7f:11:27:50:34:9c:91:2a:
50:eb:c6:66:54:e4:f3:48:11:f9:85:ef:35:46:1f:74:b6:36:
29:09:21:6f:d1:5b:28:92:ec:ef:9a:c7:ae:d8:d0:7d:87:fb:
83:2d:ba:c6:2c:7c:91:61:9e:a6:8a:de:39:cc:61:13:54:c9:
75:d5:9e:56:6e:d6:45:27:aa:df:ce:24:b9:16:65:68:51:01:
67:b0:81:b9:5c:56:89:1e:aa:99:69:47:ee:d6:59:36:9a:62:
6b:c1:dd:0c:b7:67:37:5b:2c:23:11:ae:f0:c0:ef:bc:10:b3:
63:5f:bb:a1:17:38:ea:a9:6b:53:51:65:69:cc:48:0d:ff:29:
97:cb:2e:a2:64:a6:60:bd:9a:dd:d9:cd:70:01:a2:17:17:c1:
a7:0a:a8:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaBG1RgVheecKtMfXuOEOK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjE2ZTUwNmFlMGVjNmM0MWVmMDQzN2I4NTUxMTA0NzRi
YTQ3ZGMwHhcNMjMwMjI0MDE0ODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDMwODJmZWQ4ZjY3ZTM4MDE5YTNkMzEwMmZmNmNjYjdhOWRiOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2RfjT1tFHKSacdZRPpxqI/GTiua
VZS11efyTo2ArfzFBKKUl1QaTYH31xhPfIx2RBqS2KGfF0zz0e6OvvEjdDH3EQqT
oMob1sC/en4mR719diaEiCNuZpleCA8OnzhSe20WZiPnnBJZHxOxkyb/dDpQJcM8
nvzpdw4K5a9w+HfzOH9/4nM2sMLn/XE+BxnWQAA8aNq676hsf/yUcs5BvhKJEnJu
SJOHtxdloA8lTdsr78jAFqDwGhk40/V4nYNhSocmdTX582HE5C2/C0dyMfqrzqoe
+NlgQi/lzUeC46W34nC1n8qVdbebBde8uGsv6VjPx06l4bJ8pJIMrEsBqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQwgv7Y9n44AZo9MQL/bMt6nbn+MB8GA1UdIwQY
MBaAFEDxblBq4OxsQe8EN7hVEQR0ukfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBGdVVHcmc3R3hCN3dRM3VGVVJCSFM2Ujl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yZTBjOWEtNjZlMS00ODUwLTlhYmIt
Y2MzZWZlYzE4N2I5LzEvWkRDQ190ajJmamdCbWoweEF2OXN5M3FkdWY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yZTBjOWEtNjZlMS00ODUwLTlhYmItY2MzZWZlYzE4N2I5
LzEvUVBGdVVHcmc3R3hCN3dRM3VGVVJCSFM2Ujl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpHtMA0G
CSqGSIb3DQEBCwUAA4IBAQBbGOlyQmCZ5Cr4iJ0X9OHgGdsrCwGtQfCRLek5bKaM
TJFi9uMbJ61RK73vks0OF34sYuwOa/g/Jn3TAWaycEkn9mfXtM4GTlfospTCndLS
hcckB2WXthwPBOEr7ydpmQgrifWVfxEnUDSckSpQ68ZmVOTzSBH5he81Rh90tjYp
CSFv0Vsokuzvmseu2NB9h/uDLbrGLHyRYZ6mit45zGETVMl11Z5WbtZFJ6rfziS5
FmVoUQFnsIG5XFaJHqqZaUfu1lk2mmJrwd0Mt2c3WywjEa7wwO+8ELNjX7uhFzjq
qWtTUWVpzEgN/ymXyy6iZKZgvZrd2c1wAaIXF8GnCqiZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org