Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/PZ97G-WTKlHtSgxgSHLbe83cZ6A.roa
File: PZ97G-WTKlHtSgxgSHLbe83cZ6A.roa (raw, json)
Hash identifier: NKig4JJC3ZBChGxpebslSSlOYKfVrfZvuWzbYSVXwlw=
Subject key identifier: 3D:9F:7B:1B:E5:93:2A:51:ED:4A:0C:60:48:72:DB:7B:CD:DC:67:A0
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 0DAABF5D
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/PZ97G-WTKlHtSgxgSHLbe83cZ6A.roa
Signing time: Sat 01 Jan 2022 08:59:34 +0000
ROA not before: Sat 01 Jan 2022 08:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44568
IP address blocks: 83.217.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229293917 (0xdaabf5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 08:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d9f7b1be5932a51ed4a0c604872db7bcddc67a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:09:5a:93:0d:9c:b8:63:02:4c:62:e1:79:
11:31:70:e4:87:47:8c:be:17:25:2e:b3:65:b5:97:
9e:92:63:69:55:b6:93:41:42:58:4b:7f:b9:cf:19:
a7:d2:88:23:fa:19:19:88:03:95:ae:25:56:b8:f5:
62:d9:30:a8:c9:75:b0:f4:18:65:69:ac:28:21:38:
e8:ce:c3:58:dc:d9:9d:d6:02:f4:63:8d:1f:db:be:
52:ce:fe:a0:84:2c:7b:08:93:e0:2c:93:96:fe:cd:
52:23:8e:54:38:2f:c4:fd:a2:07:2b:c2:dd:00:67:
e9:bb:44:54:1e:78:d4:ef:8d:59:39:09:1e:a4:15:
73:d1:3f:a1:26:32:c4:77:26:34:89:e7:4b:40:b1:
0b:2f:6d:65:9b:21:59:a3:ca:b2:8c:fa:b0:75:7a:
af:45:33:c6:20:c4:08:d5:ab:f4:d9:7f:f1:56:88:
cb:59:bc:d7:47:7e:11:54:ee:5d:c8:3c:90:e3:df:
b0:e0:f2:49:b7:a6:5d:38:f6:bf:77:64:d6:e8:b5:
0d:12:57:09:0c:a4:91:07:b7:1e:4d:ce:5b:fd:3c:
7f:42:15:7f:32:fa:71:ef:f7:35:20:3e:d4:f9:66:
41:a0:0a:a7:e6:fa:cd:b3:32:5a:32:d9:1b:5f:11:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9F:7B:1B:E5:93:2A:51:ED:4A:0C:60:48:72:DB:7B:CD:DC:67:A0
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/PZ97G-WTKlHtSgxgSHLbe83cZ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.252.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f7:f5:11:a8:ec:bf:c1:d3:64:c0:0a:f4:26:1a:d8:70:5e:
73:ba:9c:6c:ca:c7:b4:9a:7a:4b:bb:2e:fc:3d:fb:db:b1:82:
a0:eb:cc:3d:6f:4d:90:c0:41:2a:ba:42:4e:7f:6a:80:a5:08:
37:d7:b3:b3:5e:0a:89:8e:c9:c5:3f:46:45:a3:bd:a4:43:72:
c2:5a:5c:bd:4b:df:f7:28:1f:c5:b8:3c:a3:dd:a1:e9:4d:91:
d9:50:49:b5:7e:68:9d:84:cb:2c:56:23:ef:93:10:9b:17:0c:
92:30:98:53:93:ba:4f:fd:a4:56:be:a2:41:cd:09:74:8b:f8:
0c:68:12:34:32:2e:1d:43:94:93:44:24:cb:4b:49:3d:9a:09:
bc:7f:d2:7e:64:b1:0a:02:9d:6f:43:80:1a:ff:1a:c9:cc:1c:
38:19:a2:27:66:98:88:42:25:3e:2b:16:9e:68:8f:9c:5f:25:
58:43:78:f4:65:2b:98:e1:c4:0e:8e:c3:89:0d:f6:3c:83:80:
0b:19:22:2e:f7:82:6e:be:fb:33:05:57:56:ad:cc:7e:2b:d3:
f8:45:53:96:82:ed:3d:df:f0:cf:77:6f:6b:61:49:28:3c:b4:
d4:4b:c3:b3:4c:c3:1e:28:ff:1e:d8:1a:35:79:27:12:bf:13:
86:ce:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org