Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/82ab60-910e-4772-a722-68948f1d3efa/1/zZhIG6tkTYxwdNl-p1stSRVWLlk.roa
File: zZhIG6tkTYxwdNl-p1stSRVWLlk.roa (raw, json)
Hash identifier: /hpCMciUmWgJNCr39PvP4ik78rvA4HgRP2tmrG/HNWw=
Subject key identifier: CD:98:48:1B:AB:64:4D:8C:70:74:D9:7E:A7:5B:2D:49:15:56:2E:59
Certificate issuer: /CN=300ab0a402e3ce413b4741cf3a0a36638e4c2699
Certificate serial: 0743014B
Authority key identifier: 30:0A:B0:A4:02:E3:CE:41:3B:47:41:CF:3A:0A:36:63:8E:4C:26:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAqwpALjzkE7R0HPOgo2Y45MJpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/82ab60-910e-4772-a722-68948f1d3efa/1/zZhIG6tkTYxwdNl-p1stSRVWLlk.roa
Signing time: Sat 01 Jan 2022 08:52:53 +0000
ROA not before: Sat 01 Jan 2022 08:52:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210009
IP address blocks: 193.148.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121831755 (0x743014b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300ab0a402e3ce413b4741cf3a0a36638e4c2699
Validity
Not Before: Jan 1 08:52:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd98481bab644d8c7074d97ea75b2d4915562e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:c2:6b:30:74:5c:02:a5:96:d6:d9:71:63:
16:0c:dd:66:91:af:f9:a3:08:48:a9:3e:0d:bb:d5:
38:4e:47:35:f4:2b:bc:05:11:82:1a:7d:1a:a6:71:
b4:24:f7:d0:ab:0e:d2:26:e1:ff:60:77:b4:bf:cb:
a8:d2:4b:e2:63:cf:45:31:11:9e:82:9a:8b:5b:c7:
d9:55:5d:39:1d:25:90:ce:89:25:f3:bf:3b:70:d7:
fa:e1:3e:2a:90:93:3f:a0:d6:20:44:4f:56:92:05:
b6:87:2f:fc:bc:2a:0d:e7:3a:5a:70:a8:58:e4:bd:
ad:a1:34:5c:ff:ed:da:ad:d1:02:2d:98:9d:f0:16:
a6:aa:95:8f:f5:1a:eb:5c:0d:e8:5f:c7:f0:3f:7a:
7b:f5:f3:3f:26:83:80:1e:ad:aa:ce:ad:e8:b0:df:
38:7d:ce:06:91:4c:41:b8:c2:6b:15:25:7f:82:38:
82:0a:05:d3:fa:aa:d8:2d:3e:ee:01:0b:95:63:af:
ce:9f:c8:0f:f5:4b:9a:8f:d6:5d:43:a1:c0:9f:bf:
0b:2e:77:20:4b:d4:49:fb:9f:3a:ff:b2:1c:dd:14:
f7:5a:8b:4c:64:7d:d4:c6:e2:8d:46:fb:57:72:21:
33:7a:3b:4d:f7:f9:87:01:18:63:13:85:6a:b5:03:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:48:1B:AB:64:4D:8C:70:74:D9:7E:A7:5B:2D:49:15:56:2E:59
X509v3 Authority Key Identifier:
keyid:30:0A:B0:A4:02:E3:CE:41:3B:47:41:CF:3A:0A:36:63:8E:4C:26:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAqwpALjzkE7R0HPOgo2Y45MJpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/82ab60-910e-4772-a722-68948f1d3efa/1/zZhIG6tkTYxwdNl-p1stSRVWLlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/82ab60-910e-4772-a722-68948f1d3efa/1/MAqwpALjzkE7R0HPOgo2Y45MJpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.76.0/22
Signature Algorithm: sha256WithRSAEncryption
47:bf:99:95:b6:bf:3a:fd:41:b8:73:da:c6:70:b2:c6:14:ae:
ca:fa:67:35:50:bc:5b:e3:84:a6:d2:ed:5d:38:3f:40:9b:fd:
6c:dd:4e:4f:9f:b0:6b:61:ca:38:f9:6c:b9:9d:ef:7d:11:9a:
be:8a:87:39:53:86:5f:89:ab:0c:4b:3e:60:a1:11:21:d2:59:
05:bd:ac:2d:df:7f:9e:08:79:0d:da:53:ad:c9:60:29:80:1f:
b5:57:34:c1:84:c5:59:19:de:e0:d0:88:4e:c7:50:7a:53:55:
66:27:0e:5c:42:50:a9:e0:38:33:93:eb:ff:86:07:a8:82:ec:
30:60:56:83:f5:93:e3:b1:12:40:f5:b1:74:5f:67:06:3a:36:
83:f4:1d:c2:cf:96:78:ba:a7:43:d6:5b:68:49:73:46:6a:a8:
a8:29:1f:96:ff:3d:6d:37:16:c3:db:bd:6a:54:b3:cf:45:67:
86:4d:49:63:60:ab:26:49:24:f5:5a:fb:a3:16:0e:56:87:89:
46:db:fd:e4:eb:9e:60:0a:35:f1:45:c9:be:0f:a8:8e:ea:fa:
4f:32:12:30:2a:45:15:29:c6:c3:5b:37:f2:9c:8e:fc:0a:9b:
16:b9:d0:70:d1:4f:bf:fd:dd:f8:0c:1f:75:66:09:61:0b:ec:
b0:e9:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:25 2024 by rpki-client on console-ams.rpki-client.org