Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZDyrfMjoNsRxVXtt2UHM8xXoErs.roa
File: ZDyrfMjoNsRxVXtt2UHM8xXoErs.roa (raw, json)
Hash identifier: ucnYTVe8SXyz/Isa6LAV8eQJgsiHYmcec/ZoetsX5wo=
Subject key identifier: 64:3C:AB:7C:C8:E8:36:C4:71:55:7B:6D:D9:41:CC:F3:15:E8:12:BB
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01835F0E8613554716A32C543C5A85549F40
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZDyrfMjoNsRxVXtt2UHM8xXoErs.roa
Signing time: Wed 21 Sep 2022 07:58:50 +0000
ROA not before: Wed 21 Sep 2022 07:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 82.118.27.0/24 maxlen: 24
212.2.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:0e:86:13:55:47:16:a3:2c:54:3c:5a:85:54:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Sep 21 07:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=643cab7cc8e836c471557b6dd941ccf315e812bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:74:45:4b:40:9c:1b:3e:c0:d7:a3:e0:2f:04:
24:0c:2a:1b:8f:d4:0e:54:56:a2:36:37:63:cd:bd:
0d:ef:9f:70:9c:78:5c:b9:75:ef:fa:16:73:d2:59:
93:c3:fc:ce:ae:5f:48:d0:a4:28:01:12:e0:85:d9:
c9:e3:a6:e8:8d:94:77:79:fc:f6:b0:6a:59:29:ba:
19:d7:36:1f:c4:83:de:4b:06:33:34:c0:1d:71:0d:
b8:40:f6:03:45:4f:65:d3:6d:dd:b4:f3:4a:82:a5:
78:ae:c4:af:88:f8:a6:6e:59:6c:9f:0d:fc:74:6c:
f3:ff:8f:36:53:0f:a7:de:89:d5:53:e4:d2:6f:b5:
6e:7c:89:fb:09:21:bc:14:c2:e1:5b:fd:7d:e8:30:
64:a9:7e:af:26:99:38:c6:72:c4:fd:c1:5e:40:5f:
38:37:4f:41:e4:d7:5b:5b:df:7f:44:1e:9d:c9:fc:
3e:d0:0b:f3:ce:dd:2e:2b:53:ba:ee:88:45:1f:97:
c7:1d:b1:a5:a8:23:75:9c:58:4c:9f:e3:e8:16:66:
74:db:9f:d0:e9:28:c9:5a:f9:75:a1:a8:07:b6:60:
6c:5d:6c:de:da:f7:77:78:72:f0:61:a3:6d:b6:e7:
e3:e8:b3:63:45:e6:28:ff:b7:87:6b:fd:ef:51:e3:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:AB:7C:C8:E8:36:C4:71:55:7B:6D:D9:41:CC:F3:15:E8:12:BB
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZDyrfMjoNsRxVXtt2UHM8xXoErs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.27.0/24
212.2.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c3:05:e6:ac:26:07:9e:57:d2:fb:6a:a2:11:34:57:f0:97:
fb:28:2e:8a:4f:d3:4e:31:e1:44:c2:0e:37:b7:3b:a0:f0:4b:
18:38:82:3f:11:c6:f4:5d:01:1c:cd:59:9e:7f:01:5c:ec:75:
b7:a7:54:8f:93:2f:ec:3f:65:3b:cb:4f:4e:47:49:d1:0f:4c:
84:61:6c:14:d4:84:ee:04:78:1a:fe:00:6b:43:1b:bc:55:21:
2a:be:f7:64:11:bf:2e:cd:08:66:f5:1c:8c:e5:57:dc:d4:c4:
aa:1c:37:d0:6f:67:2a:31:b0:21:c4:3e:b7:b8:90:06:55:f3:
1e:a9:79:3c:c3:55:d6:ef:44:d0:0c:eb:a8:34:22:a8:66:e5:
96:4d:87:2a:2c:40:10:47:6a:5f:f9:5c:1e:61:b4:f8:9a:a1:
02:ca:df:b3:0a:8d:c0:b7:b3:e2:5d:55:6f:d1:d9:e2:3e:78:
d7:40:1c:13:9c:17:8b:ec:2d:79:40:fc:d2:e3:63:4d:f2:cc:
9d:6e:18:6c:63:e7:c9:64:7d:bd:bd:2e:66:e7:54:42:b1:19:
ea:b8:5f:b9:da:bd:ab:99:a5:43:1a:97:e6:47:3f:8d:0a:3b:
4e:94:09:8e:c5:2b:bd:1f:33:2b:f1:9b:3a:f8:b3:2e:92:c2:
d0:a9:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:54 2025 by rpki-client