Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/ZE7kmM9b6Mi-2rR-qrVwyiKSzpU.roa
File: ZE7kmM9b6Mi-2rR-qrVwyiKSzpU.roa (raw, json)
Hash identifier: 116lx9S5FBb/4U7X39dkjPP9mW16EbRSnqQNV2Coir8=
Subject key identifier: 64:4E:E4:98:CF:5B:E8:C8:BE:DA:B4:7E:AA:B5:70:CA:22:92:CE:95
Certificate issuer: /CN=75359e8fd9057727f6633a4afe230e30f7f02e0e
Certificate serial: 0676D1F5
Authority key identifier: 75:35:9E:8F:D9:05:77:27:F6:63:3A:4A:FE:23:0E:30:F7:F0:2E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTWej9kFdyf2YzpK_iMOMPfwLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/ZE7kmM9b6Mi-2rR-qrVwyiKSzpU.roa
Signing time: Sat 01 Jan 2022 00:51:35 +0000
ROA not before: Sat 01 Jan 2022 00:51:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.84.26.0/24 maxlen: 24
80.75.213.0/24 maxlen: 24
80.75.208.0/24 maxlen: 24
193.37.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108450293 (0x676d1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75359e8fd9057727f6633a4afe230e30f7f02e0e
Validity
Not Before: Jan 1 00:51:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644ee498cf5be8c8bedab47eaab570ca2292ce95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:ee:78:0c:1e:cb:54:33:50:ac:ea:e3:e4:
a6:e4:24:1c:ab:e9:45:8e:2e:52:42:47:ad:45:e5:
32:bf:9b:ef:a5:bc:45:b0:0d:4c:1c:37:ee:b5:b0:
a3:25:df:17:80:a3:2b:c6:af:c5:30:3f:76:74:02:
5d:ed:27:09:bc:7b:5a:33:ea:66:32:60:ae:a8:69:
4d:f6:15:f6:8c:4d:ea:ef:ef:5a:c1:b0:1e:0d:1e:
5d:a6:c3:bb:ac:db:ef:16:27:dc:b5:86:05:9d:79:
9c:78:cd:f7:b9:1d:d5:a2:04:98:da:f9:8d:c9:78:
55:ac:0e:42:84:6e:7f:6f:d4:2a:58:2b:f2:0a:92:
72:e1:83:99:68:56:67:18:ef:63:7e:d9:da:e6:28:
7c:16:07:fa:ca:5b:f7:58:63:da:64:00:ce:f5:a1:
3f:96:26:7d:6a:5f:79:79:65:b0:50:31:e2:4c:13:
cb:3b:a3:f2:4a:ee:53:60:1f:62:72:dd:b6:15:37:
0a:08:52:8f:e2:7b:01:ce:bf:67:b9:05:1b:6b:b4:
95:4a:35:db:93:5f:c5:1e:e6:5e:24:8d:41:f2:27:
16:8a:56:99:9c:e0:6a:30:91:76:2b:5a:6d:42:d0:
dc:a7:61:44:0a:d3:55:da:7a:59:4f:c4:3f:db:30:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:E4:98:CF:5B:E8:C8:BE:DA:B4:7E:AA:B5:70:CA:22:92:CE:95
X509v3 Authority Key Identifier:
keyid:75:35:9E:8F:D9:05:77:27:F6:63:3A:4A:FE:23:0E:30:F7:F0:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTWej9kFdyf2YzpK_iMOMPfwLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/ZE7kmM9b6Mi-2rR-qrVwyiKSzpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/dTWej9kFdyf2YzpK_iMOMPfwLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.208.0/24
80.75.213.0/24
193.37.39.0/24
193.84.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2c:63:9d:f9:b2:d8:65:96:7d:af:bf:fa:3f:67:c5:55:12:
df:9c:ad:64:cd:d2:71:ea:f2:f4:4f:05:c4:ca:ee:0e:c4:e9:
ee:53:bb:6f:8c:d9:63:4d:bb:27:49:9a:b4:7a:59:6a:3d:a9:
1b:f6:ab:16:19:f5:60:c1:5a:19:3c:fb:02:29:87:d1:27:57:
06:3f:1a:6d:33:23:1e:2c:9a:6d:aa:cb:6e:6e:42:c8:4e:46:
27:a2:93:85:ae:14:18:e8:19:79:e1:64:70:a6:dd:3b:00:5d:
c0:f1:30:4d:fd:78:f1:7a:8a:bc:75:19:e2:5e:77:c0:74:6a:
34:96:10:51:62:6f:eb:88:fe:62:f8:49:df:e0:32:e4:d8:b5:
f7:bf:28:ae:ce:11:dc:05:36:21:e3:a7:f7:ae:85:48:e6:dc:
7d:62:20:38:81:ba:ef:e4:a1:f2:d9:0c:5c:74:24:55:5d:d1:
d8:36:5c:c5:e1:2e:9d:9e:3c:cb:83:26:f0:87:0b:a0:27:26:
37:5b:1e:fc:7f:5c:eb:4b:df:33:d5:57:25:aa:4e:94:33:9c:
18:5e:9c:39:39:39:9f:7c:7b:3f:09:a7:70:32:5f:70:58:34:
81:80:fb:ed:3a:8d:5c:b8:11:7e:70:b6:ca:81:5c:0e:e4:fa:
31:61:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:07 2024 by rpki-client on console-ams.rpki-client.org