Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/zbSWAbQJhNFEfzYs-4Jzx3Snz4M.roa
File: zbSWAbQJhNFEfzYs-4Jzx3Snz4M.roa (raw, json)
Hash identifier: Wyionlb5M8PJ6wxtNQxDrS4T6qvnYV4+MjgFvkDawv8=
Subject key identifier: CD:B4:96:01:B4:09:84:D1:44:7F:36:2C:FB:82:73:C7:74:A7:CF:83
Certificate issuer: /CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Certificate serial: 0BA30430
Authority key identifier: 9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/zbSWAbQJhNFEfzYs-4Jzx3Snz4M.roa
Signing time: Sat 01 Jan 2022 05:00:39 +0000
ROA not before: Sat 01 Jan 2022 05:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209841
IP address blocks: 185.201.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195232816 (0xba30430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Validity
Not Before: Jan 1 05:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdb49601b40984d1447f362cfb8273c774a7cf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:47:ff:0c:6f:fa:ad:bd:9f:dd:08:e9:bd:
89:ff:ef:b4:da:a9:2b:cd:a5:61:70:6f:06:86:1a:
79:01:34:e1:51:83:19:15:cb:b8:70:a6:43:c0:2e:
0e:5d:0e:16:ef:4f:f8:f5:4b:88:79:ac:63:a7:b7:
d4:d3:60:fd:1f:3c:40:cc:8d:78:77:3e:6a:3b:a1:
e6:ae:b6:bd:18:dc:c8:cc:92:68:31:2e:6b:d9:e3:
33:6e:85:38:0b:fb:4c:63:58:1c:c5:0e:f9:45:bd:
b4:1c:8c:4a:56:b1:b0:18:cd:8e:59:2b:44:fc:3b:
0f:95:74:52:bd:6c:7b:5c:60:98:e7:f4:a5:40:ca:
5b:0e:e4:a1:a6:ca:c5:2c:06:d6:c5:00:0f:0a:46:
17:f8:7f:2b:c9:78:86:90:4e:7d:bb:2b:27:54:6e:
69:ab:12:27:7c:a0:60:b6:b9:02:b4:e8:ff:05:32:
72:ee:d0:d9:48:e9:0c:ec:db:60:94:d7:f5:e1:c5:
b7:7e:97:be:6b:47:b1:b6:34:6c:1c:37:ff:b8:ae:
61:ce:56:55:f3:19:31:d2:49:b0:c4:aa:e1:d6:c1:
00:4c:2b:b9:d0:b6:03:49:de:11:75:40:06:e9:bf:
b3:7b:05:b4:97:ca:6f:e9:7e:f7:e7:dc:89:88:b9:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:96:01:B4:09:84:D1:44:7F:36:2C:FB:82:73:C7:74:A7:CF:83
X509v3 Authority Key Identifier:
keyid:9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/zbSWAbQJhNFEfzYs-4Jzx3Snz4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.39.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d0:71:ea:80:c9:68:fe:36:86:3e:27:ba:11:4f:c7:f2:bf:
86:46:c4:67:4e:0e:74:c1:1a:23:d9:7a:d4:69:bb:1e:07:91:
12:6d:e0:9c:1b:21:ea:b3:90:a1:76:9b:0f:67:52:7b:03:2d:
43:a4:f4:37:03:b3:a9:c0:60:c7:4f:13:10:46:19:aa:41:5b:
c2:5c:8c:1c:6f:5c:d8:69:7a:67:ef:bc:74:90:af:7e:c6:03:
e5:9d:9e:3a:72:0e:a3:c6:ef:75:94:d2:a9:cf:ef:b4:d0:a0:
5d:5c:9e:0b:5a:82:bc:d4:54:a3:f8:f3:a0:df:da:0d:48:b7:
3b:09:89:0f:f4:be:a8:ea:32:2d:d4:a2:5b:42:74:f2:68:ed:
65:83:75:c9:d4:eb:da:8b:41:fb:35:b4:59:fb:3f:1a:76:df:
ce:10:4e:ee:26:74:3a:30:6c:f0:0c:bf:8e:ba:25:f9:c3:61:
5d:c5:8c:83:bf:f6:c3:69:0b:7e:20:b9:fb:2e:d1:40:32:73:
52:a7:d2:d0:80:fa:d4:c7:24:0b:a1:ea:ae:ed:7d:41:ee:e6:
a5:ca:d6:42:ef:5b:a2:4e:47:61:f3:78:d0:f3:5a:ae:ed:e7:
bd:5c:56:5b:ae:bf:41:2f:79:ec:c4:3b:ed:9c:84:72:f8:21:
a4:a7:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:13 2023 by rpki-client on console-fra.rpki-client.org