Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/zu2clvGVrEazPEBBVCLVoEqXHDM.roa
File: zu2clvGVrEazPEBBVCLVoEqXHDM.roa (raw, json)
Hash identifier: BW7N2dgho94jpm0xylYsqChCLhudMoeLKvq8xyu9Of8=
Subject key identifier: CE:ED:9C:96:F1:95:AC:46:B3:3C:40:41:54:22:D5:A0:4A:97:1C:33
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 04D84777
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/zu2clvGVrEazPEBBVCLVoEqXHDM.roa
Signing time: Thu 09 Jun 2022 06:02:03 +0000
ROA not before: Thu 09 Jun 2022 06:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 91.199.163.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81282935 (0x4d84777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jun 9 06:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ceed9c96f195ac46b33c40415422d5a04a971c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:ca:f4:7d:37:ca:a4:b0:5c:21:2e:28:48:
f9:92:a6:d0:16:39:fd:ed:a5:09:28:71:2b:da:c4:
07:4a:71:2f:41:e9:b3:34:a0:87:f4:9f:c7:b3:15:
75:4d:28:69:7c:9b:90:fa:80:2a:3e:ad:90:89:9e:
38:11:b9:0d:49:a6:7b:c0:23:70:4e:f2:29:81:53:
2c:c1:23:dc:bf:4e:70:68:2c:09:da:66:b6:85:4e:
e3:75:97:c9:65:ff:71:27:4e:8f:58:4f:db:74:87:
a6:c4:44:00:23:87:0c:00:0c:e7:39:7b:53:e6:f6:
f1:10:1f:8c:0c:ab:29:95:d9:ac:a9:7a:55:66:da:
68:2b:0d:2f:a5:da:d7:c4:ee:86:8d:11:21:26:fc:
4a:ec:d3:71:77:75:ed:7c:52:d4:8e:77:09:81:f7:
cc:83:f7:dc:37:65:13:6b:c4:6f:b0:79:5e:a8:bf:
35:de:f1:0d:97:15:25:f8:49:f3:5d:e5:b9:72:f8:
55:e9:d2:e7:14:a7:36:a2:12:18:10:25:e1:ea:27:
30:8a:45:76:93:30:52:59:36:62:3c:f6:fd:2e:e2:
4f:6c:aa:d7:60:3d:2f:18:ae:0c:2f:97:8e:b2:2b:
dd:44:f6:fd:d9:3d:2a:d0:f4:2d:23:0c:8b:62:88:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:9C:96:F1:95:AC:46:B3:3C:40:41:54:22:D5:A0:4A:97:1C:33
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/zu2clvGVrEazPEBBVCLVoEqXHDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.199.163.0/24
193.142.22.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4a:1d:44:0f:59:62:58:74:2c:10:df:54:d4:48:ce:6d:39:
94:43:1c:93:f9:e0:22:2d:d2:90:ab:70:f5:06:2c:1b:98:12:
f8:27:87:61:91:a3:8d:ae:cc:f0:0a:2f:40:b0:2d:ec:e2:d7:
3d:4a:77:19:54:99:ac:e9:31:13:0b:63:4f:a7:63:f3:b2:5b:
4e:5f:18:a8:d3:15:f6:3d:38:4b:8d:98:33:4f:ca:0e:5e:20:
7b:6b:25:a1:f3:7c:18:09:cc:8a:9e:75:80:f4:e1:aa:66:bc:
1e:79:c3:b4:f4:73:7b:f9:2f:14:b6:fd:2a:22:fd:5b:e3:a7:
4f:16:52:15:8e:ee:8f:f9:d8:3a:2a:25:2f:e9:0a:97:97:c5:
b3:8d:f6:08:40:e5:d3:10:56:ad:e4:49:a4:78:c1:4b:fc:b1:
b4:1d:24:56:1e:eb:bc:af:ec:3c:81:54:32:e4:7f:da:1f:d6:
02:1f:3d:e8:4f:f2:12:47:1d:6f:77:27:ee:4b:03:e7:57:d8:
ac:4c:c9:58:90:7e:5c:e6:c6:b1:63:95:5e:6e:fa:0e:7f:7e:
91:55:46:d6:18:f3:90:1c:18:1d:ea:3e:94:cb:31:80:ce:73:
77:02:b5:57:4e:8a:5e:29:55:1d:97:49:45:63:ee:32:1c:7c:
66:ee:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:45 2023 by rpki-client on console-ams.rpki-client.org