Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/ZkF2TZbmwPNUMd_QyuEzA2h4cT0.roa
File: ZkF2TZbmwPNUMd_QyuEzA2h4cT0.roa (raw, json)
Hash identifier: xX3PmWdLdWLXjLXJ5Fy+SWovaw/Wu6QVy5ZNeI/DtCk=
Subject key identifier: 66:41:76:4D:96:E6:C0:F3:54:31:DF:D0:CA:E1:33:03:68:78:71:3D
Certificate issuer: /CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Certificate serial: 02BE3C4C
Authority key identifier: 71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/ZkF2TZbmwPNUMd_QyuEzA2h4cT0.roa
Signing time: Wed 22 Jun 2022 08:57:44 +0000
ROA not before: Wed 22 Jun 2022 08:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.81.38.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46021708 (0x2be3c4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Validity
Not Before: Jun 22 08:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6641764d96e6c0f35431dfd0cae133036878713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:1f:ac:9e:74:72:de:cf:b8:5c:f1:5d:36:
53:0c:f5:27:30:3f:a6:b9:d7:fc:9e:3e:17:ab:6b:
04:8d:ec:24:f6:7d:5e:1e:a0:27:c6:c1:af:f4:7c:
23:e7:f8:c9:d7:62:36:9c:d4:71:a4:24:a1:04:b6:
8a:0e:cc:b1:21:8e:e0:c1:d1:05:84:04:61:85:e2:
6b:e6:37:b3:6c:d5:5e:d7:f5:9a:23:04:69:2d:3a:
95:d7:84:51:e5:18:fe:f7:d0:23:3e:06:8e:5b:11:
2c:ed:a2:98:56:b3:d4:e9:c2:74:24:11:73:54:ca:
25:60:bf:a7:64:e6:d4:3a:13:33:ca:b8:f5:e6:af:
3b:81:f9:3f:88:e9:3e:58:d1:64:6a:ec:2f:b0:4d:
e3:26:1c:c1:9f:a0:48:7b:03:46:40:3a:0d:5d:47:
b3:b7:91:05:15:19:e1:9c:3b:9e:67:fc:56:0a:71:
6c:18:f4:a5:6f:f1:0c:b3:66:7e:59:61:b4:a5:d4:
61:20:d4:56:cb:26:13:01:d4:59:3f:b4:b7:00:02:
11:d8:81:36:ab:e1:64:ae:cc:bd:5d:29:0b:72:35:
46:b3:5b:51:61:74:a6:65:dc:81:34:2c:3d:fd:e3:
cf:4d:42:1c:88:35:e9:2f:19:75:0a:b1:65:70:10:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:41:76:4D:96:E6:C0:F3:54:31:DF:D0:CA:E1:33:03:68:78:71:3D
X509v3 Authority Key Identifier:
keyid:71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/ZkF2TZbmwPNUMd_QyuEzA2h4cT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.38.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:4b:b9:96:91:4b:1f:39:39:7f:01:5f:04:e8:ad:67:d2:bf:
34:fd:86:d2:dc:7c:75:91:3c:0c:2f:ba:e2:c2:b3:f6:32:77:
ed:97:67:48:a2:dd:3a:40:15:4e:d9:9e:da:92:ea:4a:92:33:
b4:33:27:0e:e2:00:41:9a:bb:3d:ff:75:59:f4:4d:1e:6d:d1:
33:f6:12:d5:27:4b:4f:6e:1b:62:37:af:14:4d:1f:fd:1b:b8:
41:b9:55:cf:22:fe:a3:23:ec:00:0f:31:05:8f:45:a8:92:e3:
6e:31:6a:e1:f1:b0:a5:f1:55:71:77:7f:aa:56:3f:7e:46:af:
8c:d9:dd:97:1a:c2:67:0a:26:ea:5a:3d:3c:fc:2d:c1:8b:f7:
52:b5:bd:e2:f5:ec:1d:49:38:41:4f:1d:f7:dd:a2:23:d7:18:
12:06:5c:df:d0:46:2b:a5:2f:4e:4f:fb:36:11:07:49:e9:e3:
26:a0:21:09:b1:8d:13:4d:96:38:e0:01:07:81:5d:59:6e:5e:
20:83:e3:20:8d:92:95:71:86:7b:fc:5a:cc:a5:99:80:c9:52:
45:1d:73:17:9f:02:54:6a:07:19:5d:e6:36:18:53:a3:0f:4f:
61:78:8f:ec:8a:3b:39:22:44:44:6d:6d:fc:ff:4d:30:01:5c:
55:a7:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org