Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/Zab80bSAxOQkAHzjCNGDTVV3uGQ.roa
File: Zab80bSAxOQkAHzjCNGDTVV3uGQ.roa (raw, json)
Hash identifier: G9HVxv/rzJCrjWyje61tClNEKm+FLscuwhl/ucXu6iM=
Subject key identifier: 65:A6:FC:D1:B4:80:C4:E4:24:00:7C:E3:08:D1:83:4D:55:77:B8:64
Certificate issuer: /CN=265ca77090379a21985d5fe133f143b9568ec311
Certificate serial: 01855D967EA614FE3E920BDE1FCAD21B408B
Authority key identifier: 26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlyncJA3miGYXV_hM_FDuVaOwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/Zab80bSAxOQkAHzjCNGDTVV3uGQ.roa
Signing time: Thu 29 Dec 2022 11:13:41 +0000
ROA not before: Thu 29 Dec 2022 11:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202563
IP address blocks: 185.222.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:96:7e:a6:14:fe:3e:92:0b:de:1f:ca:d2:1b:40:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265ca77090379a21985d5fe133f143b9568ec311
Validity
Not Before: Dec 29 11:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65a6fcd1b480c4e424007ce308d1834d5577b864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:85:10:d1:36:da:ec:75:64:8b:f8:f0:1e:
a5:8a:ab:f7:9c:a9:71:16:a9:42:5c:4d:dd:ec:30:
86:42:a7:0a:b2:42:a8:0e:57:66:fe:15:90:47:58:
fe:b9:63:f2:94:12:b7:63:82:c6:49:dd:8a:c0:3d:
7d:b3:9b:a2:fe:1c:bb:03:8e:66:1a:cf:01:11:4d:
8b:88:15:4f:bd:e2:50:a6:55:ea:1c:35:87:8e:41:
d3:b6:31:e6:07:7a:db:55:c0:9a:fc:06:3e:c7:f6:
7a:0b:96:61:46:95:72:9d:8d:b5:b6:d8:6c:74:bd:
50:94:af:53:d1:0e:1b:c0:9c:38:a1:6f:ff:33:d5:
80:40:a8:8f:55:26:2d:40:e6:5b:97:aa:29:2c:c1:
cf:c1:fb:99:7d:d4:df:82:93:3d:d1:a9:8b:a3:89:
fb:30:0c:d5:14:ab:82:55:3c:1f:07:2f:e5:02:0c:
80:07:5e:88:c5:bc:73:fa:8f:a4:b7:32:7c:9a:6c:
43:e6:cb:e8:26:81:d6:e9:f6:a5:08:b8:e0:12:be:
8a:2c:89:47:1a:e7:56:ac:3a:f5:2b:84:6b:65:e5:
a1:d3:50:49:0a:17:d9:6f:57:9c:54:77:d5:9e:74:
1d:e6:6c:17:09:98:5b:50:1b:de:a8:68:39:52:11:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A6:FC:D1:B4:80:C4:E4:24:00:7C:E3:08:D1:83:4D:55:77:B8:64
X509v3 Authority Key Identifier:
keyid:26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlyncJA3miGYXV_hM_FDuVaOwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/Zab80bSAxOQkAHzjCNGDTVV3uGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/JlyncJA3miGYXV_hM_FDuVaOwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.4.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:cc:c5:34:ea:5c:49:74:4e:8e:85:6b:ac:6b:de:43:29:c0:
dd:3f:e6:80:ce:7d:5b:b1:6d:99:96:dc:c1:ed:2c:04:74:8f:
69:5d:f1:a7:7b:e7:e5:16:06:22:ee:19:d1:52:e2:43:38:5e:
c8:05:66:f6:9e:32:ba:86:c1:83:c7:28:d3:4b:5a:83:62:cd:
74:3e:6f:37:e9:20:86:a3:a2:ab:38:51:a1:a3:d1:32:c6:9c:
a6:9c:39:b7:80:ec:92:91:e1:e7:9c:4f:b1:18:30:79:17:c5:
ff:10:81:b6:88:0c:10:9c:ec:cf:87:c0:da:48:54:b3:8f:e1:
28:58:9a:98:a3:4f:33:90:a3:32:c8:e8:eb:e8:ef:8e:78:cd:
28:2c:72:39:b5:8a:1b:14:88:06:0b:2f:99:a7:ff:88:35:a3:
91:44:a5:fc:13:2c:2d:de:af:b8:06:14:75:c8:4c:fc:d7:75:
e0:12:24:f3:3f:3c:5f:09:7e:c0:d7:f5:9d:22:c9:9d:6d:eb:
4f:86:82:00:10:2c:16:85:03:7c:60:ce:11:b8:c4:fa:e8:a8:
d5:29:15:aa:ce:fd:ab:94:1f:c8:dc:92:26:e9:20:f8:19:1d:
f7:96:c9:04:ff:22:5a:2d:a5:03:61:e8:aa:53:9a:ee:bf:3f:
d5:f9:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:16 2023 by rpki-client on console-fra.rpki-client.org