Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/3zv_OAcmfli89nZN13IB8xhtGg4.roa
File: 3zv_OAcmfli89nZN13IB8xhtGg4.roa (raw, json)
Hash identifier: Wfw/3+k3SOE4Zs/9IJtsHWZejkmict5PxeQX2u9pCI0=
Subject key identifier: DF:3B:FF:38:07:26:7E:58:BC:F6:76:4D:D7:72:01:F3:18:6D:1A:0E
Certificate issuer: /CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Certificate serial: 0184EFF9DE35B584F03BF510F6CDB3CEC541
Authority key identifier: AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/3zv_OAcmfli89nZN13IB8xhtGg4.roa
Signing time: Thu 08 Dec 2022 04:24:00 +0000
ROA not before: Thu 08 Dec 2022 04:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61316
IP address blocks: 185.10.208.0/22 maxlen: 22
193.33.212.0/23 maxlen: 23
2a03:6540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:f9:de:35:b5:84:f0:3b:f5:10:f6:cd:b3:ce:c5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Validity
Not Before: Dec 8 04:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df3bff3807267e58bcf6764dd77201f3186d1a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:e3:10:ed:80:59:75:40:71:c5:41:f4:49:
f6:55:59:41:5f:28:de:10:fb:90:90:f6:37:61:ee:
3d:07:87:a8:53:16:5c:80:cc:ea:4a:f0:57:10:bc:
27:fb:98:76:3a:87:f8:06:7b:0f:9e:85:41:bb:ed:
b5:27:c5:a2:eb:f7:76:58:af:a5:80:94:ae:d0:24:
b7:75:21:a5:cc:59:87:6e:04:f9:ea:83:e9:ac:2e:
e0:5b:b0:2a:0e:f4:9e:ae:c4:87:b2:22:86:20:09:
45:5a:59:67:f1:07:db:8d:fd:7f:29:f8:56:73:0d:
b6:c9:51:e5:f9:bf:39:95:57:34:ec:32:43:e7:47:
a5:dc:3d:6b:50:f1:9a:ea:49:d2:64:bd:6a:82:9a:
06:dc:16:24:56:5a:2b:e7:8c:79:b3:70:6d:db:66:
a0:78:c3:9f:f3:30:19:af:0d:9a:4f:13:b4:e1:0e:
e7:21:62:76:b3:60:e8:26:2c:00:39:e2:ef:52:e7:
2c:ca:37:cf:56:90:73:6d:05:a1:ed:e5:88:fe:ae:
45:24:3a:e0:76:57:cc:2e:c3:69:6f:53:b5:c8:45:
ea:63:a1:6f:a3:f1:1b:74:b7:0d:3f:25:a3:27:8a:
5f:29:e4:4c:3c:1a:09:7d:9f:cb:2c:c3:49:4e:77:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3B:FF:38:07:26:7E:58:BC:F6:76:4D:D7:72:01:F3:18:6D:1A:0E
X509v3 Authority Key Identifier:
keyid:AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/3zv_OAcmfli89nZN13IB8xhtGg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/rIDr0ZpiboFuGNE-6zvCGuhpFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.208.0/22
193.33.212.0/23
IPv6:
2a03:6540::/32
Signature Algorithm: sha256WithRSAEncryption
d6:e6:67:98:62:d9:fb:de:73:f8:79:66:68:16:c2:1e:b2:b9:
cf:01:8e:96:13:ad:b6:1a:5d:95:fc:83:5e:f3:da:4c:1e:ac:
98:1b:17:c5:af:8f:f9:c2:04:e1:5c:82:65:cb:71:7c:d6:2f:
dc:ca:b9:03:ae:88:35:4a:30:00:6a:1f:78:8f:0d:40:0a:b6:
a1:64:d2:87:10:87:63:17:37:c3:a6:ed:6c:26:27:56:98:6f:
df:44:79:e7:66:bd:79:4b:2f:04:87:88:9e:e5:f5:45:4c:f9:
53:5f:7e:16:94:67:fb:bc:a1:e5:f4:a0:cf:9c:83:d4:49:8c:
87:70:0c:ae:62:c7:7a:a5:9b:6d:bd:5a:a1:9a:d2:83:d4:58:
96:d6:60:70:6d:fb:dc:10:22:aa:50:cf:ca:e2:9c:58:c4:82:
bd:37:c7:4d:37:a0:24:12:7d:71:0c:af:b9:05:5e:b3:17:61:
c5:96:d2:a1:20:06:65:1c:c6:a4:fc:e0:3a:b9:c2:23:70:b7:
24:32:32:c1:58:6e:52:e0:f9:ad:54:10:8b:62:fb:1d:a5:cc:
8a:35:6a:59:67:6e:6c:74:99:19:dd:d9:7a:71:2d:9e:37:19:
75:cd:7f:ed:b8:50:b0:c5:dc:38:ea:24:87:12:df:59:08:15:
a3:2a:1b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:45 2024 by rpki-client on console-ams.rpki-client.org