Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/920566-e957-47e5-99f9-59a0f63c6682/1/dz-qHK8LwrJI2rcilaVGO_oeeL0.roa
File: dz-qHK8LwrJI2rcilaVGO_oeeL0.roa (raw, json)
Hash identifier: icxO1ENco8reqZkvl/aXfFt6iJJrTlkKJw7dhBbo36I=
Subject key identifier: 77:3F:AA:1C:AF:0B:C2:B2:48:DA:B7:22:95:A5:46:3B:FA:1E:78:BD
Certificate issuer: /CN=a88100464b1826c3c445a91c84e2f230e63ddb2d
Certificate serial: 0144A445
Authority key identifier: A8:81:00:46:4B:18:26:C3:C4:45:A9:1C:84:E2:F2:30:E6:3D:DB:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIEARksYJsPERakchOLyMOY92y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/920566-e957-47e5-99f9-59a0f63c6682/1/dz-qHK8LwrJI2rcilaVGO_oeeL0.roa
Signing time: Sat 01 Jan 2022 14:01:40 +0000
ROA not before: Sat 01 Jan 2022 14:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.109.132.0/24 maxlen: 24
185.109.134.0/23 maxlen: 24
185.109.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21275717 (0x144a445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88100464b1826c3c445a91c84e2f230e63ddb2d
Validity
Not Before: Jan 1 14:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=773faa1caf0bc2b248dab72295a5463bfa1e78bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:b4:d4:e7:24:cc:17:d7:55:25:24:66:ad:
47:ac:4c:04:50:c9:58:39:ed:d6:d0:6a:93:c5:b6:
ad:b6:ee:bf:bb:7d:38:e2:2a:56:0f:35:6f:13:ea:
38:45:89:2d:ff:46:f5:ec:26:f4:65:59:98:bd:8c:
4f:cf:c3:ad:ff:0b:cb:2d:b4:2f:d3:3e:20:5b:97:
63:c0:c2:b3:99:0f:ca:24:27:84:b5:03:ed:49:3e:
a0:a2:41:cc:b9:2f:fb:f1:cf:1f:fe:dd:bb:c1:01:
d3:61:c5:64:27:3a:4b:11:cf:0a:87:ce:ca:83:27:
c1:a4:bd:77:04:b1:7e:ab:e1:f9:90:7b:a0:9b:e4:
75:1e:d4:48:80:03:0e:82:41:82:f3:bf:de:be:36:
f6:51:d0:43:30:eb:52:b1:ab:09:31:24:6b:9f:dd:
81:07:32:c2:e3:26:54:1e:1a:ed:fc:a0:01:71:84:
3c:9e:a1:fa:06:4d:36:27:90:47:8f:5b:53:27:fc:
2e:31:4d:c2:0f:eb:44:81:84:d3:8c:9c:a9:36:9d:
38:5d:5d:9f:04:35:4b:e0:bf:8d:95:2c:1e:a5:28:
90:9d:06:fb:f9:18:12:6f:03:a1:cf:d2:99:a7:77:
69:41:b5:2a:ec:59:80:f1:64:ba:61:86:66:2d:b2:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3F:AA:1C:AF:0B:C2:B2:48:DA:B7:22:95:A5:46:3B:FA:1E:78:BD
X509v3 Authority Key Identifier:
keyid:A8:81:00:46:4B:18:26:C3:C4:45:A9:1C:84:E2:F2:30:E6:3D:DB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIEARksYJsPERakchOLyMOY92y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/920566-e957-47e5-99f9-59a0f63c6682/1/dz-qHK8LwrJI2rcilaVGO_oeeL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/920566-e957-47e5-99f9-59a0f63c6682/1/qIEARksYJsPERakchOLyMOY92y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.132.0/22
Signature Algorithm: sha256WithRSAEncryption
45:7c:f6:ce:e0:97:1c:ec:67:8b:3e:2a:e4:90:2f:55:d9:b7:
e5:73:0c:77:7b:39:cd:57:24:38:b8:1a:cc:8e:36:37:49:e8:
f8:13:b9:e1:b7:41:97:48:ba:67:3e:49:f7:31:d1:bc:1d:08:
37:e7:eb:ce:c6:45:68:08:b4:42:b7:0f:2c:f5:88:a2:9a:b4:
be:40:cf:89:8f:e6:55:6d:a6:6e:a3:af:e2:94:e8:50:91:49:
2f:59:a6:27:7d:ef:30:f4:7b:42:8c:d1:40:6d:cf:ea:de:c8:
1e:53:c1:fb:8d:bc:46:4e:7c:63:fe:da:0a:8b:b1:26:6f:bc:
b5:98:13:77:36:bf:08:b3:67:0c:c5:83:49:61:a2:db:b7:3c:
e5:dd:76:cb:f9:37:6e:c3:2e:54:2b:b8:b3:9c:e8:9f:a2:87:
68:a3:d2:ff:4c:e6:e6:39:90:c4:43:73:2a:49:f0:2e:23:ba:
c1:c6:0d:d0:0a:be:cf:ee:85:b9:02:d3:ef:41:f0:49:09:a4:
7a:d1:b5:72:fd:ec:35:16:3f:f0:4b:e5:1b:b0:71:ad:ac:4c:
e7:44:6c:9c:d3:08:80:f0:6a:50:3a:d2:16:70:d9:82:66:ae:
1c:9e:55:d7:96:50:89:d1:24:59:d6:95:51:5f:1b:9c:12:d8:
30:33:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:09 2023 by rpki-client on console-fra.rpki-client.org