Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/cz4EsRf4zw6Nh5X51Pb-nd3Pu4A.roa
File: cz4EsRf4zw6Nh5X51Pb-nd3Pu4A.roa (raw, json)
Hash identifier: uZa9z2NVBpN+1gw9mgc/9RXHFYqc+MSnJER1P2zaJqQ=
Subject key identifier: 73:3E:04:B1:17:F8:CF:0E:8D:87:95:F9:D4:F6:FE:9D:DD:CF:BB:80
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018A791D85B7D154F405A4374818241F5BEF
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/cz4EsRf4zw6Nh5X51Pb-nd3Pu4A.roa
Signing time: Sat 09 Sep 2023 08:44:52 +0000
ROA not before: Sat 09 Sep 2023 08:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 185.212.174.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:1d:85:b7:d1:54:f4:05:a4:37:48:18:24:1f:5b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Sep 9 08:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=733e04b117f8cf0e8d8795f9d4f6fe9dddcfbb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:81:3c:1b:df:21:b5:e4:b3:46:ff:71:9c:
1f:e6:5b:06:9b:35:fd:91:13:d5:72:ac:c6:ff:5c:
57:50:03:ed:97:a7:65:54:06:b5:21:f6:88:2e:95:
d4:e5:26:dc:7a:32:cb:33:ac:ad:7d:65:31:98:8b:
e2:91:0d:c7:dc:01:57:c7:e1:9a:8b:08:ab:27:ab:
8b:01:35:43:32:86:ef:7c:d1:25:f0:f1:d9:b7:1a:
9e:35:2f:cd:23:cd:a7:5f:78:13:d3:e5:06:da:2c:
2e:82:5e:24:9b:c7:a3:4b:c3:54:33:30:a2:90:8d:
1d:37:08:cf:ba:77:e8:27:16:e5:d0:88:df:aa:1f:
ae:f6:2d:da:26:48:91:ca:6a:88:ac:e6:44:a2:4b:
75:44:ad:cb:d7:34:6e:f9:ef:74:2f:60:c6:ce:bf:
2b:e6:03:34:cb:31:8f:09:5c:45:11:fe:17:80:0e:
eb:a2:f9:71:8e:42:b2:6b:0b:4c:66:92:76:a1:d1:
20:0b:39:a1:56:99:30:bb:3a:fa:69:da:c0:d5:74:
22:94:ab:5d:6b:87:a3:af:b5:ed:b8:62:03:6b:7f:
02:1c:d1:94:55:24:b7:87:57:89:82:a9:4a:d4:be:
03:5d:de:d0:df:69:ca:93:6f:86:c3:e5:3c:9f:b4:
93:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3E:04:B1:17:F8:CF:0E:8D:87:95:F9:D4:F6:FE:9D:DD:CF:BB:80
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/cz4EsRf4zw6Nh5X51Pb-nd3Pu4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.111.0/24
185.212.174.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6d:b7:bf:49:d3:6a:46:37:18:eb:52:18:a0:4b:7d:ab:87:
b2:87:8a:3b:9e:9f:63:37:81:ac:c7:be:e8:64:40:d5:0d:6f:
db:54:55:14:d0:8b:15:54:8b:77:1d:d6:85:cb:f0:4f:3c:00:
1d:ba:03:30:dd:b7:07:59:69:40:d5:15:fa:98:28:87:0a:a9:
67:ee:e1:58:53:39:a5:be:9e:5c:aa:79:4e:7f:ed:ba:5c:08:
e7:36:01:95:5c:5c:9d:99:69:00:43:f2:c9:fa:6f:4e:c6:a8:
83:e2:20:40:86:5c:76:45:f0:0a:54:6a:92:8e:f8:bf:8e:6a:
d8:7b:13:1b:ac:c0:93:73:0d:1d:8a:42:63:a7:0f:2a:70:80:
9e:5b:46:7a:e7:c2:f0:d7:2a:cf:aa:8d:84:88:97:e4:e9:4f:
f0:e6:08:13:e2:f3:c9:07:bf:01:22:c4:c2:42:74:64:fd:cb:
bd:47:f1:c3:4c:39:f5:db:91:d5:43:69:44:1f:bd:b0:2a:0b:
a9:bb:37:ba:c0:d6:38:19:91:51:e2:88:1f:83:24:20:df:05:
bb:4d:cf:e4:34:18:df:82:2c:5c:f2:7e:a8:b0:e2:ad:1d:bb:
15:0a:ba:0d:3e:98:8d:d1:c2:cb:35:55:16:b2:db:54:95:5f:
28:a1:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:38 2025 by rpki-client