Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZCZ683IkpFRukcD2zY77TJzSECM.roa
File: ZCZ683IkpFRukcD2zY77TJzSECM.roa (raw, json)
Hash identifier: F2QolRzXh7EaiDe1UyWyoUlnYKiWNYjI9vABEQ4t8es=
Subject key identifier: 64:26:7A:F3:72:24:A4:54:6E:91:C0:F6:CD:8E:FB:4C:9C:D2:10:23
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 16370129
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZCZ683IkpFRukcD2zY77TJzSECM.roa
Signing time: Fri 21 Jan 2022 17:23:54 +0000
ROA not before: Fri 21 Jan 2022 17:23:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 185.121.168.0/24 maxlen: 24
185.99.132.0/24 maxlen: 24
185.195.239.0/24 maxlen: 24
185.99.133.0/24 maxlen: 24
2a06:a006::/32 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:1280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372703529 (0x16370129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 21 17:23:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64267af37224a4546e91c0f6cd8efb4c9cd21023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:95:f1:5d:bf:ec:96:53:ab:86:89:cd:b5:
2b:5d:54:20:53:0b:80:3d:df:1f:dc:e8:be:e1:12:
46:e4:c1:fd:a7:1c:8c:44:d1:2e:e8:61:da:71:7d:
a3:e9:cc:39:b7:9d:6b:8b:86:e8:f6:f1:8a:fb:ae:
2d:d2:3a:26:bc:ae:bb:89:bf:22:fe:46:d5:df:3b:
62:54:35:4c:da:b4:65:da:27:c9:4f:6c:e8:34:b3:
67:f5:4e:37:49:93:b6:24:29:c9:20:8e:36:b5:fe:
22:a7:4b:45:8f:cb:55:ff:b5:5c:f5:38:d2:15:8c:
93:8a:02:56:92:0c:4d:bc:8a:9e:03:fd:9f:03:46:
ee:c8:2e:d9:d3:72:6e:e8:1d:8e:29:4a:5e:c3:51:
87:d8:c1:1f:ce:ab:c1:1c:c6:e8:87:c4:70:bb:a4:
63:13:5c:87:e1:c9:0e:b3:dd:4f:32:0c:d2:e2:59:
33:b0:fc:e6:51:15:5a:eb:7e:28:27:38:7f:04:52:
e7:89:f1:28:63:f1:c0:30:60:90:e6:d3:96:a1:4a:
25:64:1d:29:4f:20:d6:02:4a:10:7b:f8:bf:78:2d:
4d:21:2d:4d:a8:b1:72:d2:c4:05:ae:b9:e2:38:0b:
eb:52:af:49:4b:f1:6f:9a:30:5f:84:ac:6d:3c:b5:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:26:7A:F3:72:24:A4:54:6E:91:C0:F6:CD:8E:FB:4C:9C:D2:10:23
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZCZ683IkpFRukcD2zY77TJzSECM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.132.0/23
185.121.168.0/24
185.195.239.0/24
IPv6:
2a06:1280::/32
2a06:a004::/32
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
58:31:f9:fc:09:41:04:7f:70:40:7e:1b:a9:c9:10:41:38:8e:
70:01:37:50:8a:69:5f:02:8d:93:de:d6:7c:06:79:ac:5f:84:
63:aa:f4:43:dd:c5:05:da:6e:3d:8f:60:47:54:8e:09:9e:22:
aa:d3:23:b4:ab:2c:58:b8:5b:73:db:10:08:0f:b6:e5:7d:46:
cc:55:4d:b6:49:1a:64:a2:b9:37:ad:73:72:bf:ad:b2:db:2e:
57:e5:40:07:cd:96:2e:c5:43:a7:17:be:95:6e:e8:cf:73:50:
ed:41:19:af:dd:85:18:f9:42:70:c9:5d:5f:fa:1c:1a:3d:85:
2b:dd:a6:3f:9e:91:f4:4b:47:98:0d:31:61:1c:40:64:51:4b:
cc:02:2f:1d:74:1c:2a:85:41:7f:c7:1e:73:23:ca:ab:05:8c:
21:8d:9f:b8:74:24:f7:5d:fa:bd:e4:45:72:f8:75:10:79:f8:
33:07:1a:2e:b2:95:f4:5b:13:84:ed:ec:9f:bb:8f:af:39:60:
78:6f:dd:bf:db:cd:ff:ab:01:7a:d4:51:da:a5:ab:03:fa:01:
09:73:99:dd:7c:81:84:b9:ee:d8:87:cd:19:21:f7:53:56:65:
17:d2:71:fc:73:21:e2:08:35:fd:9e:aa:1e:5c:f0:09:2c:f6:
05:f5:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-fra.rpki-client.org