Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZeYPpIecnfEwgSJxGaL0897-u5c.roa
File: ZeYPpIecnfEwgSJxGaL0897-u5c.roa (raw, json)
Hash identifier: Ec88PnDeAjaqVRl/f04EuJ9FKdawzqKiXI5ZxT8vXNQ=
Subject key identifier: 65:E6:0F:A4:87:9C:9D:F1:30:81:22:71:19:A2:F4:F3:DE:FE:BB:97
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018536F0D3C0E661F14CB86DFD3D31EED97B
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZeYPpIecnfEwgSJxGaL0897-u5c.roa
Signing time: Wed 21 Dec 2022 23:07:10 +0000
ROA not before: Wed 21 Dec 2022 23:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 82.118.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:f0:d3:c0:e6:61:f1:4c:b8:6d:fd:3d:31:ee:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Dec 21 23:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65e60fa4879c9df13081227119a2f4f3defebb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:39:7e:db:06:7f:f2:d7:b8:b6:81:05:84:
96:6c:2e:1d:2c:1c:96:43:dd:87:7d:e1:b4:d1:89:
02:3c:79:80:50:dd:d7:72:81:ca:44:ff:d0:e8:68:
87:d4:9a:8c:b3:e7:df:a5:88:ac:84:06:3a:84:4c:
d7:18:f5:b1:79:84:1a:ea:cb:27:2a:df:ab:71:b6:
f2:d7:98:28:e1:99:4a:d1:ac:28:85:c1:11:7f:cc:
79:ac:e0:90:f7:28:72:20:06:f0:71:95:28:f5:c0:
53:1f:73:aa:71:3d:9c:d9:9a:60:02:5a:22:d2:78:
70:ca:e7:7e:ce:b6:db:df:24:30:ce:bd:8f:06:7b:
5c:f7:e2:33:a9:6d:a1:ce:bf:f7:cf:7f:71:6f:01:
39:ee:9b:3a:2d:d6:c4:a7:86:17:05:7a:59:3e:63:
f1:65:20:c9:38:c3:49:11:b3:9c:f4:3a:20:10:1c:
c4:14:85:2a:6c:05:39:73:a7:78:2e:da:f9:7c:5f:
9f:50:2d:27:ab:72:3e:9c:52:a4:91:61:9b:5b:66:
8b:6a:97:a9:ad:be:6e:5c:24:e8:ca:1b:28:17:ab:
6d:13:28:57:72:12:b9:47:1b:33:ae:ca:82:95:37:
a4:dc:2d:92:eb:5d:b6:cd:07:14:64:7f:de:f7:4a:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:0F:A4:87:9C:9D:F1:30:81:22:71:19:A2:F4:F3:DE:FE:BB:97
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZeYPpIecnfEwgSJxGaL0897-u5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.27.0/24
Signature Algorithm: sha256WithRSAEncryption
65:87:9f:e4:1d:23:a4:4c:e4:c4:db:cb:2c:2f:4c:89:4f:8c:
54:f7:46:6a:ed:f9:ff:cd:ed:a5:da:36:15:fc:5f:94:d5:3d:
5c:4d:bf:05:ca:12:aa:ed:f9:ed:9b:2c:60:03:52:e6:2c:6b:
28:1d:2d:fe:95:58:28:53:d4:4a:8a:6a:ce:68:49:85:11:72:
9b:35:47:f4:72:0e:ed:7d:b4:81:8a:47:22:4b:f3:f8:ae:72:
4b:de:22:3a:35:af:aa:c2:97:de:41:e2:13:a8:65:8f:70:3e:
ed:c8:53:63:02:4f:03:54:1c:da:47:ed:91:61:0a:95:ce:80:
83:2b:7d:1a:99:87:6c:21:a9:80:de:05:44:6e:8c:1b:af:39:
7a:69:d3:39:3a:c5:3a:30:b3:5b:2a:f2:ce:10:63:ea:d2:89:
11:35:0a:f4:0d:64:4f:b6:8d:5e:b1:ee:e0:1f:62:32:b3:7d:
cb:0c:70:84:45:d2:70:69:52:80:de:bd:7f:31:db:a0:c6:6c:
41:54:2f:80:77:fa:97:a8:08:77:9e:f7:c4:58:c3:83:48:ae:
18:e2:14:ee:d5:8b:40:8e:9b:18:69:56:40:52:73:96:ce:e9:
aa:ee:ec:72:de:da:fc:5f:54:97:be:00:f1:74:82:f3:ef:88:
24:99:1f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org