Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/z7-WXnlPpRN3ijH5j2paD0s0ED0.roa
File: z7-WXnlPpRN3ijH5j2paD0s0ED0.roa (raw, json)
Hash identifier: BnqhE7Tr5CMh3nvV7gofx2uF8dGXQiTA3nwhFD8hLQ4=
Subject key identifier: CF:BF:96:5E:79:4F:A5:13:77:8A:31:F9:8F:6A:5A:0F:4B:34:10:3D
Certificate issuer: /CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Certificate serial: 087CAC44
Authority key identifier: 0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/z7-WXnlPpRN3ijH5j2paD0s0ED0.roa
Signing time: Wed 27 Apr 2022 07:40:08 +0000
ROA not before: Wed 27 Apr 2022 07:40:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47297
IP address blocks: 93.184.176.0/20 maxlen: 24
37.60.168.0/21 maxlen: 24
37.228.176.0/20 maxlen: 24
185.6.96.0/22 maxlen: 24
2a03:b880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142388292 (0x87cac44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Validity
Not Before: Apr 27 07:40:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfbf965e794fa513778a31f98f6a5a0f4b34103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:0e:98:ae:8a:f7:14:bc:9a:e6:da:c8:33:
f6:d0:48:d6:6d:08:20:d1:37:cc:f3:75:b5:7d:79:
89:9b:e4:ea:a4:ca:f4:f0:67:0c:39:0c:95:8c:b2:
f6:5e:fe:81:56:32:bb:03:73:7c:9b:66:58:22:3f:
d3:b7:76:c7:4a:74:ab:6c:42:21:80:67:9b:be:23:
00:8a:dc:98:e4:4d:7b:c2:c7:df:a3:9c:2a:b9:df:
6e:f6:28:a1:ae:6b:3f:15:8b:8d:e6:3f:f2:a0:38:
e0:dd:84:82:b5:4e:78:80:24:b9:50:0d:c1:61:67:
65:b6:02:44:50:39:1f:a8:ba:35:c2:ad:bc:b6:04:
74:06:70:25:71:4c:bc:bf:a0:ad:2b:89:d7:e3:d1:
6f:e1:30:36:50:fd:14:dc:a4:7a:c0:0e:38:af:c0:
46:43:34:ad:96:25:e4:11:a5:a0:1c:42:a1:61:8e:
16:de:48:3f:e1:bf:01:13:49:0a:59:65:62:9c:45:
e2:c6:4c:b3:69:50:10:9c:af:c2:ba:08:b2:ed:31:
af:fb:f0:b9:7f:0f:b6:7f:85:f8:9f:d7:01:77:c8:
b8:74:06:84:96:a3:12:b8:26:e7:09:ac:4f:da:7f:
02:ef:38:1d:dc:33:86:e5:7a:d9:74:c9:c9:53:da:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BF:96:5E:79:4F:A5:13:77:8A:31:F9:8F:6A:5A:0F:4B:34:10:3D
X509v3 Authority Key Identifier:
keyid:0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/z7-WXnlPpRN3ijH5j2paD0s0ED0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/DTAa1g5_Yz7hdEl12PsVdjfyBy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.168.0/21
37.228.176.0/20
93.184.176.0/20
185.6.96.0/22
IPv6:
2a03:b880::/29
Signature Algorithm: sha256WithRSAEncryption
69:c4:1b:87:a6:21:90:61:05:ba:0c:f4:04:e9:21:7c:c4:8b:
b5:65:ec:9c:98:ea:d1:66:5a:e3:8c:41:4e:e3:bc:24:b1:97:
68:a3:05:a1:b5:52:61:b4:cd:52:99:e2:67:e8:17:5f:b3:fc:
0e:74:a3:bd:86:0d:57:00:f1:f7:01:e6:5b:29:67:02:34:83:
6a:c8:22:9e:f8:d1:10:62:7d:13:6d:0e:d4:8c:3a:ab:41:d0:
d2:49:04:9e:22:4c:62:e6:f3:cf:cb:da:ae:88:cf:63:09:bd:
48:85:a1:95:a7:49:50:44:f2:f9:b5:f5:0e:73:b3:1b:10:22:
6d:b1:4a:c4:0c:ce:da:05:51:04:74:72:f1:7b:18:5d:79:d3:
5a:de:d7:6b:d6:29:e3:a4:60:8d:62:6d:51:4b:1a:81:04:cb:
36:b8:68:a4:91:fb:c2:08:4c:61:70:bf:60:89:32:fb:60:c3:
97:79:03:3a:d9:cb:4d:f6:b3:79:2c:ea:24:17:8f:21:d2:26:
9a:10:e7:bd:20:fe:72:68:59:fa:39:b4:75:d1:5b:ad:d0:f5:
c1:8d:cc:6f:2b:86:89:7a:e7:62:ae:34:b2:0e:81:d4:e0:87:
59:68:92:0b:e7:3c:7a:09:46:a0:67:d1:aa:09:55:a7:f2:f0:
22:06:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:03 2024 by rpki-client on console-fra.rpki-client.org