Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/zbRlpr1CfNLzgdm1-uM9D38FqEA.roa
File: zbRlpr1CfNLzgdm1-uM9D38FqEA.roa (raw, json)
Hash identifier: NkvJ4ulvpfu72bCxp06EElCh0B0QX0ncaWQ9WOkoL9U=
Subject key identifier: CD:B4:65:A6:BD:42:7C:D2:F3:81:D9:B5:FA:E3:3D:0F:7F:05:A8:40
Certificate issuer: /CN=9e0a82ec78e8d005308e53bb6d1dc4db58e7014e
Certificate serial: 01856CAEFD12F1BF5B80E13B485F475F3A33
Authority key identifier: 9E:0A:82:EC:78:E8:D0:05:30:8E:53:BB:6D:1D:C4:DB:58:E7:01:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngqC7Hjo0AUwjlO7bR3E21jnAU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/zbRlpr1CfNLzgdm1-uM9D38FqEA.roa
Signing time: Sun 01 Jan 2023 09:34:45 +0000
ROA not before: Sun 01 Jan 2023 09:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 193.201.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:fd:12:f1:bf:5b:80:e1:3b:48:5f:47:5f:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a82ec78e8d005308e53bb6d1dc4db58e7014e
Validity
Not Before: Jan 1 09:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdb465a6bd427cd2f381d9b5fae33d0f7f05a840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:00:e1:c4:30:ba:53:f6:a7:1b:52:d7:8e:
19:88:fa:5c:e1:9c:0c:b8:10:7b:76:3b:d6:da:dc:
79:b4:3c:47:4d:1b:a1:84:07:f4:5f:12:c7:de:0c:
8e:93:c8:1c:ef:db:f7:fa:c8:5a:a0:88:b0:cf:c2:
55:a0:25:93:23:b3:dc:1b:88:ff:bb:e0:bf:35:71:
fa:e5:e0:f6:52:ac:ca:c5:67:db:6d:47:2c:05:5c:
92:8a:9c:76:a6:8a:fb:f7:bd:99:8c:8c:b5:cd:b4:
1c:37:54:bf:cc:9e:ea:8f:67:14:aa:c7:05:c6:71:
2a:ae:66:8d:33:8a:74:0b:0b:a2:1f:72:10:ca:f9:
b9:cf:92:f3:a4:5b:71:19:1d:99:e2:13:9d:38:0e:
14:94:49:1a:97:91:24:b5:83:05:d2:25:c7:32:f6:
dd:fb:25:99:3f:e9:0c:de:df:ec:a9:c5:80:8b:57:
cf:cf:ed:0e:11:63:8c:b2:c2:c1:f7:21:43:b6:91:
14:12:7d:30:2b:2e:7d:1c:92:d0:34:26:4c:cf:59:
7e:a3:22:5b:7e:13:a9:63:e0:b1:f9:62:2e:6a:42:
8a:7d:8d:52:54:57:e5:53:0e:54:97:93:f1:2e:55:
3c:50:98:d6:64:3d:27:27:63:44:d6:4a:d9:86:07:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:65:A6:BD:42:7C:D2:F3:81:D9:B5:FA:E3:3D:0F:7F:05:A8:40
X509v3 Authority Key Identifier:
keyid:9E:0A:82:EC:78:E8:D0:05:30:8E:53:BB:6D:1D:C4:DB:58:E7:01:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngqC7Hjo0AUwjlO7bR3E21jnAU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/zbRlpr1CfNLzgdm1-uM9D38FqEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/ngqC7Hjo0AUwjlO7bR3E21jnAU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.9.0/24
Signature Algorithm: sha256WithRSAEncryption
45:77:2a:9c:47:6e:6e:ff:c9:78:e2:c6:9c:05:bc:3e:cb:97:
31:a4:b4:b3:5a:61:bf:5a:e7:ae:5b:19:79:54:2e:1e:6e:97:
fe:50:f7:3e:39:ab:a3:28:ec:25:e8:e1:64:49:fa:fa:6e:c3:
38:5d:24:98:b9:52:89:4a:94:36:9b:53:08:86:94:44:d7:f2:
3f:f7:fc:f6:c1:d7:df:42:a1:b8:0e:63:16:4b:1e:62:d3:66:
a2:80:5c:7c:d1:d3:98:e7:0b:c9:94:38:f1:cf:22:d3:cb:9c:
64:66:0b:2f:d9:0c:23:4d:be:43:aa:f7:8a:8e:56:ed:c8:88:
30:05:ac:77:a6:39:24:35:a5:ee:3f:29:06:b4:56:11:ed:37:
b7:77:c9:22:28:1e:f0:70:c6:2c:0b:c9:e9:ee:f9:9e:52:93:
3b:83:17:c3:86:b1:f3:77:52:75:83:87:aa:52:69:fc:e4:97:
d1:d8:89:2b:ee:ef:59:f2:e1:97:7a:4d:68:08:5e:99:6c:40:
d2:4e:ef:12:86:d8:85:63:e2:a9:86:b8:82:99:4f:47:da:01:
c3:99:e8:36:77:40:3f:16:58:af:89:99:e3:8f:33:72:c4:71:
73:40:94:dd:c3:8b:89:a9:0c:05:89:ae:b4:7f:85:92:ce:49:
da:d5:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 13:39:40 2023 by rpki-client on console-ams.rpki-client.org