Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3109af-d37f-4331-9a5d-3a518bddf011/1/zvlrrPXRVajgnbR9vRmhmzNCSQI.roa
File: zvlrrPXRVajgnbR9vRmhmzNCSQI.roa (raw, json)
Hash identifier: c7mEL1X+VKW7m/aJmRBdFILt7BAqLLTaqsE/dwUXK0Y=
Subject key identifier: CE:F9:6B:AC:F5:D1:55:A8:E0:9D:B4:7D:BD:19:A1:9B:33:42:49:02
Certificate issuer: /CN=5da999f369e0f28c0bc2be8e7f2f88fe21f78ad9
Certificate serial: 06D710AB
Authority key identifier: 5D:A9:99:F3:69:E0:F2:8C:0B:C2:BE:8E:7F:2F:88:FE:21:F7:8A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XamZ82ng8owLwr6Ofy-I_iH3itk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3109af-d37f-4331-9a5d-3a518bddf011/1/zvlrrPXRVajgnbR9vRmhmzNCSQI.roa
Signing time: Sat 01 Jan 2022 07:55:03 +0000
ROA not before: Sat 01 Jan 2022 07:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205199
IP address blocks: 194.147.242.0/23 maxlen: 23
194.147.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114757803 (0x6d710ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da999f369e0f28c0bc2be8e7f2f88fe21f78ad9
Validity
Not Before: Jan 1 07:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cef96bacf5d155a8e09db47dbd19a19b33424902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:ca:24:bf:ba:32:2f:b3:cb:e9:88:e2:a8:
b5:a6:a1:15:fb:5a:1a:63:a9:a8:7a:73:fa:19:25:
1d:a2:4e:29:79:73:ad:f7:5c:c3:4b:6d:87:b3:c3:
d7:49:20:89:92:b4:15:47:8e:68:a1:38:35:1a:b2:
3e:dd:60:94:be:b0:d5:db:48:d6:67:01:81:77:7d:
94:b7:14:c7:c5:c2:7e:ad:c3:cc:8b:fc:27:27:ad:
f7:d4:69:3e:1b:a9:2f:46:1c:74:e4:4e:8d:a8:60:
af:c9:13:51:0b:b6:52:b4:5a:94:93:dc:c3:45:22:
09:c4:f5:99:72:09:4a:46:67:91:9b:94:b6:f6:c1:
53:12:36:a0:a3:92:72:f2:68:f7:97:ce:f4:57:62:
8b:23:36:11:18:c2:fc:ea:c0:1c:40:4f:a4:2a:8b:
10:e7:86:47:a8:67:ee:b2:ed:a5:12:2d:ac:b0:31:
f1:6b:64:4c:47:83:7e:c2:dc:26:7e:5f:91:bc:72:
fe:91:8d:0e:7a:30:b1:94:3a:78:1b:c3:c8:db:8d:
de:64:61:b9:e1:56:31:31:cc:1a:93:b7:4a:84:bb:
c3:4a:17:09:a0:ce:d6:ec:1c:89:be:83:7f:eb:8c:
ee:e4:0e:e6:66:7e:e8:73:69:8d:84:c0:3a:6c:82:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F9:6B:AC:F5:D1:55:A8:E0:9D:B4:7D:BD:19:A1:9B:33:42:49:02
X509v3 Authority Key Identifier:
keyid:5D:A9:99:F3:69:E0:F2:8C:0B:C2:BE:8E:7F:2F:88:FE:21:F7:8A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XamZ82ng8owLwr6Ofy-I_iH3itk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3109af-d37f-4331-9a5d-3a518bddf011/1/zvlrrPXRVajgnbR9vRmhmzNCSQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3109af-d37f-4331-9a5d-3a518bddf011/1/XamZ82ng8owLwr6Ofy-I_iH3itk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.242.0/23
194.147.250.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:8b:5c:45:de:24:28:61:5f:b7:1a:7f:f2:86:18:ff:88:52:
8a:ba:12:9d:85:c0:4d:6e:d7:46:40:17:7e:bf:e8:5b:79:44:
08:71:67:fd:ec:3f:7f:48:6b:83:6b:37:74:34:1d:33:fb:5d:
80:ca:e8:43:95:c0:79:56:d7:ff:1e:26:bf:6b:9c:09:f4:df:
6e:8b:67:fd:2a:de:aa:a1:f4:2f:7c:bd:7c:43:60:d0:b7:ef:
27:af:64:45:5a:b9:52:91:3a:dd:2f:36:68:e5:4d:db:b1:e1:
b8:96:5c:87:25:a3:b8:66:18:0a:cc:45:e3:2f:30:3e:be:b8:
36:4d:73:79:9d:b0:39:c9:d3:75:ab:0d:8c:7a:99:bf:89:9b:
4f:8c:24:29:8f:ca:8c:90:6b:95:d3:4b:32:6c:47:19:31:85:
a2:a2:c7:91:34:ff:4a:ab:07:b1:4b:b8:03:d4:57:cc:da:a2:
5e:1b:ba:b3:6e:a7:76:1f:d8:64:ca:e6:2f:3c:7c:8e:1a:dd:
ad:ca:33:d5:da:f9:98:fa:a5:12:2e:52:28:a9:d2:8a:54:06:
de:35:de:64:64:3b:8e:82:67:59:af:c1:96:03:94:d3:c4:40:
34:82:6e:b7:30:3b:86:f9:a0:a9:70:ca:79:e2:d6:58:43:80:
8c:56:15:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:43 2024 by rpki-client on console-fra.rpki-client.org