Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZP_-8-nj9CDsu4jCyZn-WqjByQs.roa
File: ZP_-8-nj9CDsu4jCyZn-WqjByQs.roa (raw, json)
Hash identifier: UPIwu579oGES2dQ6hNz1cZLQazIik8u4olEImahKbTM=
Subject key identifier: 64:FF:FE:F3:E9:E3:F4:20:EC:BB:88:C2:C9:99:FE:5A:A8:C1:C9:0B
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 04E19433
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZP_-8-nj9CDsu4jCyZn-WqjByQs.roa
Signing time: Tue 28 Jun 2022 14:33:03 +0000
ROA not before: Tue 28 Jun 2022 14:33:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.26.0/23 maxlen: 24
82.118.28.0/22 maxlen: 24
82.118.25.0/24 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
212.2.236.0/22 maxlen: 24
45.80.4.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81892403 (0x4e19433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jun 28 14:33:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64fffef3e9e3f420ecbb88c2c999fe5aa8c1c90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b0:26:14:8f:54:ad:ff:34:75:79:b5:ea:2a:
d7:7d:bb:f5:8b:8b:60:58:dd:83:1d:7a:e6:e6:93:
7f:7e:3c:89:8e:42:6b:89:23:8b:54:60:8a:7d:c0:
b3:a0:b7:0f:da:6b:2e:bf:3d:30:03:12:d9:d2:5c:
9e:39:db:03:a6:a6:52:0c:72:b1:68:87:26:93:20:
72:c7:07:af:1a:20:d2:3c:73:73:51:51:52:8d:c1:
0b:87:ab:58:b3:5b:af:47:25:3f:7d:d5:4f:c8:fe:
d9:bd:80:6f:ca:5a:9d:c4:2a:e9:d0:c6:25:0c:24:
d1:2f:84:c8:12:f5:8f:93:7f:ba:a9:92:78:5c:62:
bc:9b:da:eb:32:9d:24:e9:01:82:c5:1b:c4:6f:17:
8d:a2:ea:5a:52:a8:de:73:3a:56:27:c7:72:3d:78:
79:34:b5:da:59:78:6a:7f:6c:c7:b6:5d:f9:1e:9b:
ae:bb:9a:d8:41:67:29:8a:92:00:87:17:78:16:28:
b8:28:3b:4f:51:bf:9b:cc:57:b1:ff:5b:29:53:41:
58:01:a8:6a:7b:99:83:d5:7f:05:e9:84:b2:c0:65:
c5:51:93:f5:09:51:45:ec:61:e1:08:27:64:43:c8:
c5:ee:4a:b3:9c:5b:90:e4:28:2c:cc:f6:ce:22:c6:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:FE:F3:E9:E3:F4:20:EC:BB:88:C2:C9:99:FE:5A:A8:C1:C9:0B
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZP_-8-nj9CDsu4jCyZn-WqjByQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0-82.118.31.255
141.98.74.0/23
212.2.236.0/22
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a1:64:f8:96:1c:13:c4:5d:03:3b:25:7d:99:66:42:d1:a2:
26:d8:8f:b5:7b:98:ce:bb:75:c2:59:de:44:39:ed:9b:42:3d:
0e:9b:19:f3:f9:39:b7:27:39:11:16:38:79:4a:0e:5f:96:fa:
34:d2:b9:b0:22:4c:bd:8e:8c:0a:ee:7b:8d:ac:b8:36:c6:34:
f8:9f:5a:09:dd:51:31:fb:e3:a6:a2:22:f7:03:b4:80:af:73:
47:e7:9a:15:ef:60:24:34:b9:4e:32:8a:ce:3b:45:d5:2d:2d:
07:1f:b3:d0:76:41:7c:f5:7b:9a:e5:a5:3a:0d:c4:d7:b2:e3:
a8:ab:b6:6f:d7:17:a5:a9:7d:52:f9:c5:9e:06:14:a0:51:04:
81:53:31:61:04:73:c4:e1:be:7d:bb:02:0d:64:db:d4:9e:54:
d8:b8:b2:72:83:72:11:c4:e7:a8:ff:bf:fb:e8:5b:fa:ee:18:
e9:ca:06:31:96:d5:e2:f4:f6:ed:94:74:ed:8c:09:0b:2b:63:
ca:a5:5b:7c:12:cf:c2:a4:57:c7:94:f3:2d:19:b0:21:81:bb:
91:be:96:6e:c1:57:2b:57:c3:6c:30:36:a5:a2:e5:ee:a4:e6:
48:97:55:00:6a:52:f3:b8:01:42:ee:a1:43:b8:e7:d1:e8:c9:
d3:a7:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org