Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/ZGmFNPrMB-BXEGM4PjsKL6XfuzQ.roa
File: ZGmFNPrMB-BXEGM4PjsKL6XfuzQ.roa (raw, json)
Hash identifier: /AMkyQANbJL2qULrOUJ1wGKwrbV1LK9B6IruvrHeUWs=
Subject key identifier: 64:69:85:34:FA:CC:07:E0:57:10:63:38:3E:3B:0A:2F:A5:DF:BB:34
Certificate issuer: /CN=dd2f415e120caf5ea318c327c3818f5493f7e0e5
Certificate serial: 0185E99A2C116D39C7FF209501DACC59D4C5
Authority key identifier: DD:2F:41:5E:12:0C:AF:5E:A3:18:C3:27:C3:81:8F:54:93:F7:E0:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3S9BXhIMr16jGMMnw4GPVJP34OU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/ZGmFNPrMB-BXEGM4PjsKL6XfuzQ.roa
Signing time: Wed 25 Jan 2023 15:44:33 +0000
ROA not before: Wed 25 Jan 2023 15:44:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 193.33.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:9a:2c:11:6d:39:c7:ff:20:95:01:da:cc:59:d4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2f415e120caf5ea318c327c3818f5493f7e0e5
Validity
Not Before: Jan 25 15:44:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64698534facc07e0571063383e3b0a2fa5dfbb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:c1:c2:e5:33:82:ce:e8:22:31:b8:49:25:
d9:01:19:aa:51:22:bf:58:b1:c5:a6:00:88:20:a2:
52:a8:ac:39:55:4c:ff:77:23:bf:2d:fc:18:1a:d6:
4a:ca:9c:6c:58:2e:d3:be:dc:37:78:28:93:ca:49:
78:1b:fd:69:27:37:3a:23:69:87:a6:75:61:12:19:
50:31:65:05:b1:c7:c5:cb:9f:26:e2:a4:d5:1b:bd:
3b:66:6b:e3:93:63:7d:94:3d:f9:8f:0b:65:aa:63:
e6:64:d5:47:a0:47:28:35:3a:5f:64:63:a8:86:20:
d4:59:b1:76:a5:8b:03:9e:ff:2c:e2:6b:4d:ea:82:
c3:37:bb:7c:a3:9a:e3:2b:4a:87:ca:fc:e7:a1:79:
2b:a0:e4:4f:bf:63:37:42:f8:0f:10:d1:f1:5a:eb:
b8:61:46:92:92:67:53:55:91:6a:44:53:74:79:7a:
13:9b:42:84:0b:aa:06:a8:25:0c:20:b6:96:12:49:
c0:f3:b9:66:b1:04:a9:e7:b8:23:9c:4d:ad:b2:df:
15:b1:f8:0e:83:b8:c0:95:cd:3f:d2:0f:71:65:8b:
14:9f:0c:63:59:3e:53:3f:6e:c7:1a:eb:76:c8:a2:
28:89:9f:00:74:ab:6a:db:63:d6:d7:99:7d:47:67:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:85:34:FA:CC:07:E0:57:10:63:38:3E:3B:0A:2F:A5:DF:BB:34
X509v3 Authority Key Identifier:
keyid:DD:2F:41:5E:12:0C:AF:5E:A3:18:C3:27:C3:81:8F:54:93:F7:E0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3S9BXhIMr16jGMMnw4GPVJP34OU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/ZGmFNPrMB-BXEGM4PjsKL6XfuzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/89d64e-81a2-4bef-9cc1-4e70d55fb841/1/3S9BXhIMr16jGMMnw4GPVJP34OU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.52.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:75:fd:59:e4:e6:52:22:38:9b:94:6f:83:95:46:4f:0d:10:
d7:67:2b:8b:fe:50:cf:c4:81:07:60:d8:40:1d:94:c2:32:ea:
4b:91:86:2f:e0:f1:28:90:89:07:51:d8:57:00:0b:de:76:5b:
a2:89:6e:55:41:58:9a:f6:99:d6:8f:97:0a:e0:d7:82:eb:a7:
3b:38:02:fa:28:7f:f2:d1:91:36:e2:53:4c:e6:44:7c:be:d7:
08:c2:1e:7c:df:df:c3:13:69:f6:6a:05:42:e8:a8:bd:d0:20:
7f:78:44:14:e9:86:f6:bd:e8:11:7d:8c:fc:17:6f:c3:24:da:
67:9e:5d:57:11:e4:60:46:b8:f9:0b:1d:b8:c4:1a:05:d0:e2:
ba:2f:28:52:53:27:83:68:e0:b3:ba:ea:d5:6c:1e:54:65:9a:
d5:e5:27:1d:2d:50:15:0a:38:50:67:42:37:94:2b:76:a7:13:
af:51:98:ca:4b:b6:0f:13:82:65:3b:8b:84:f8:bc:60:ac:18:
64:56:ba:ea:66:1c:e3:ae:a1:56:c1:9b:51:1c:b1:28:17:09:
0b:99:ea:49:df:d5:fd:13:c4:d9:ef:6e:8b:3e:48:e0:2e:ca:
ef:51:2b:c7:3e:ed:64:6a:bc:2b:06:7d:1e:79:fe:16:b8:3d:
8f:bf:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:36 2024 by rpki-client on console-fra.rpki-client.org