Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZMesbh3anw4R442D5o06p3e6zlA.roa
File: ZMesbh3anw4R442D5o06p3e6zlA.roa (raw, json)
Hash identifier: Yx/xVld+wPVspgLW4ClxCUkTsl85FYOQl34sbVgqdO4=
Subject key identifier: 64:C7:AC:6E:1D:DA:9F:0E:11:E3:8D:83:E6:8D:3A:A7:77:BA:CE:50
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01838CD7129CDF4FF289432D7822C9C40392
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZMesbh3anw4R442D5o06p3e6zlA.roa
Signing time: Fri 30 Sep 2022 05:20:48 +0000
ROA not before: Fri 30 Sep 2022 05:20:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 193.176.129.0/24 maxlen: 24
194.113.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8c:d7:12:9c:df:4f:f2:89:43:2d:78:22:c9:c4:03:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 30 05:20:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64c7ac6e1dda9f0e11e38d83e68d3aa777bace50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0c:83:0a:e1:a6:8a:5c:8f:70:b6:71:48:45:
31:37:16:a2:eb:d5:eb:a0:61:ed:11:79:7d:9e:03:
c8:c6:64:9f:0f:63:16:79:56:c0:64:a1:98:71:ff:
f4:11:6a:88:a5:e0:f2:07:05:3f:32:2b:6f:52:8c:
bf:89:b6:29:af:75:f0:7b:2d:0d:9f:14:22:60:41:
2c:80:35:ca:cf:36:b7:2f:ac:af:fb:cd:07:bc:00:
9e:4a:f4:62:84:aa:a2:89:36:cc:7d:13:29:fa:f5:
2e:af:91:a1:09:f1:18:6b:d3:2a:f6:a8:fb:4b:cf:
24:42:d4:34:5b:74:2f:f4:8b:90:b4:03:c4:a4:e0:
b5:fa:1b:ca:89:5b:a5:1c:b3:0f:f7:2f:9d:e5:80:
2c:fe:8e:95:8d:fe:cd:a2:ec:9c:70:80:45:bd:6c:
31:82:f9:54:68:a1:4c:e8:72:5a:94:92:e6:03:5a:
48:e9:0a:f6:64:7c:00:47:7e:90:2f:ed:3e:da:57:
cf:f4:1a:03:0e:2d:9b:8e:6b:7a:f9:b6:72:2e:32:
1c:3e:b9:2d:49:2a:b1:c6:6e:a1:bf:c8:0c:56:0c:
16:4c:8c:96:cf:b2:9d:51:b1:99:fd:57:ae:d9:09:
81:7b:8b:1b:db:e6:bf:52:fc:c4:34:f5:e5:e8:36:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C7:AC:6E:1D:DA:9F:0E:11:E3:8D:83:E6:8D:3A:A7:77:BA:CE:50
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZMesbh3anw4R442D5o06p3e6zlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.129.0/24
194.113.223.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d7:6a:e2:aa:9d:9d:58:34:67:29:fd:06:30:2f:c9:41:99:
37:aa:c8:42:32:0d:e6:25:cb:fa:bc:f5:a2:47:54:eb:1a:b3:
bf:42:d3:f9:d5:9e:36:b2:2f:df:9f:fd:07:d0:d5:80:a6:be:
68:3e:d3:f1:3a:61:58:b8:ff:8a:de:0d:3c:cd:b3:b4:a7:82:
f1:bd:ec:c7:f4:1a:f0:6c:2c:c3:35:71:5e:aa:79:bc:d9:c7:
72:ea:3b:bb:4e:ea:24:f3:0d:45:a7:b9:dc:47:50:74:6a:35:
6e:17:06:48:ad:2a:3c:a0:48:09:5c:0b:6d:2b:e8:dc:d1:4f:
6f:ae:92:98:90:61:d5:96:8d:76:e5:87:2f:d1:9e:84:71:09:
ba:95:4b:45:1e:c6:a7:bb:74:71:0c:c8:98:28:4c:e9:85:ba:
83:3a:f0:3b:ca:90:78:50:88:d3:a1:dd:27:e3:c9:33:62:f7:
40:0d:77:38:fb:c0:08:9a:31:23:63:c4:83:3e:8d:80:76:04:
80:7b:44:b4:f4:90:f6:c6:0a:77:e0:6d:1e:d8:f6:50:d8:5f:
1c:b2:af:c5:32:52:8e:1a:af:a3:78:15:0a:f9:d9:cf:fe:df:
51:0a:ef:0a:24:38:56:f9:5d:bd:60:26:3e:f7:72:fb:b4:ea:
9c:7d:96:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org