Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/ZukEJfLyHvCNh-7GHMZTvTdTtMQ.roa
File: ZukEJfLyHvCNh-7GHMZTvTdTtMQ.roa (raw, json)
Hash identifier: YqJt1D+BKWfPe0wtjgUGQfXfcNQf04jtHlCUNDJvt/E=
Subject key identifier: 66:E9:04:25:F2:F2:1E:F0:8D:87:EE:C6:1C:C6:53:BD:37:53:B4:C4
Certificate issuer: /CN=8d00a003cd5e8948e1b12d267d0ea567a2211677
Certificate serial: 0124FA23
Authority key identifier: 8D:00:A0:03:CD:5E:89:48:E1:B1:2D:26:7D:0E:A5:67:A2:21:16:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/ZukEJfLyHvCNh-7GHMZTvTdTtMQ.roa
Signing time: Sat 01 Jan 2022 01:00:56 +0000
ROA not before: Sat 01 Jan 2022 01:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 130.255.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19200547 (0x124fa23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d00a003cd5e8948e1b12d267d0ea567a2211677
Validity
Not Before: Jan 1 01:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66e90425f2f21ef08d87eec61cc653bd3753b4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:02:46:4c:3a:67:69:ea:a0:09:74:2b:ff:
89:68:77:7f:2f:e0:20:6c:d3:c1:22:f2:5f:77:b5:
da:94:05:f9:37:06:65:40:25:ed:8b:5c:c9:4f:d9:
9c:f3:14:cb:dd:8d:c0:9f:15:0d:4b:e9:2f:8e:86:
ed:a0:b1:c0:25:b6:56:83:65:75:77:13:16:cc:7d:
d1:08:ad:8d:37:b3:c9:4d:c0:85:5a:54:22:6b:53:
60:de:f2:fe:48:9b:ef:c7:13:bc:0b:3f:b5:98:d2:
06:8e:f9:96:87:e7:af:97:3c:63:b6:75:1e:33:6c:
a3:7d:b7:f0:2f:29:d3:df:27:31:7e:76:98:4b:dd:
0e:15:f3:70:aa:b1:b6:b2:9f:e9:da:37:fe:ab:2b:
08:c4:30:06:f2:c4:84:66:33:b0:82:50:b9:ab:08:
d1:32:39:a9:5f:44:67:1c:92:97:2e:93:90:62:f2:
c9:fd:ce:d5:1f:68:7e:7d:0d:86:4f:be:9b:e2:fc:
62:d0:bc:c3:8a:c9:28:7f:89:5f:73:56:a0:68:6f:
bb:16:e1:7a:ec:f1:ce:8b:7b:2e:c5:0f:07:28:e6:
88:1f:61:52:00:e3:75:4f:84:97:29:9d:9c:3f:14:
40:43:81:d2:78:56:26:a9:bc:35:f3:5b:a9:00:4f:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:04:25:F2:F2:1E:F0:8D:87:EE:C6:1C:C6:53:BD:37:53:B4:C4
X509v3 Authority Key Identifier:
keyid:8D:00:A0:03:CD:5E:89:48:E1:B1:2D:26:7D:0E:A5:67:A2:21:16:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/ZukEJfLyHvCNh-7GHMZTvTdTtMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:42:b9:f2:9e:f6:d5:95:77:ef:ed:90:fc:2a:4e:26:ef:05:
86:9c:5c:f0:3f:75:40:9f:d6:f5:f1:b0:7a:bb:93:69:db:d4:
5e:ad:77:82:80:93:b5:81:71:15:7c:c0:52:03:b2:a5:e3:12:
1c:7d:ab:ae:54:84:28:37:53:ca:c7:2e:17:de:c0:17:75:97:
02:82:3d:62:60:15:0e:19:a2:ff:93:bb:11:6d:7c:78:e0:6d:
25:33:c7:6d:ee:1b:90:3b:fc:1b:d4:9f:ef:aa:8c:79:19:7f:
1a:4f:22:7a:ff:9c:f0:11:4e:51:f7:d3:e1:b1:6f:de:d2:ca:
d2:fd:48:0b:7e:9e:96:35:00:06:26:82:69:85:c0:00:e7:23:
dd:1e:00:cd:2f:4f:91:44:a3:aa:db:7e:f0:ad:73:21:59:56:
24:b0:f4:dc:47:d6:b1:c0:5f:6e:74:08:fd:f8:74:4d:ea:85:
90:51:fb:6e:bb:b1:2a:3f:ff:71:01:83:07:8c:85:37:12:d6:
82:b2:7e:ef:c0:2f:d2:12:c9:5d:94:fd:33:d3:7c:64:cc:23:
06:3e:5c:b8:fb:3f:2d:14:1c:6e:e3:e9:3a:5c:27:5a:e1:9a:
33:e3:79:c4:4e:4c:76:9c:9c:83:30:17:3f:83:d9:9c:a2:01:
15:be:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:26 2024 by rpki-client on console-fra.rpki-client.org