Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/ZG-5WaBSa3BQnwXapvkKmOVz5-k.roa
File: ZG-5WaBSa3BQnwXapvkKmOVz5-k.roa (raw, json)
Hash identifier: CGmb0eJ7L8p01mGAPk6+ymCo47P4A7RwSy6P7619QL4=
Subject key identifier: 64:6F:B9:59:A0:52:6B:70:50:9F:05:DA:A6:F9:0A:98:E5:73:E7:E9
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01835B73AA902E86764DA9D98A4DD1A3741A
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/ZG-5WaBSa3BQnwXapvkKmOVz5-k.roa
Signing time: Tue 20 Sep 2022 15:10:50 +0000
ROA not before: Tue 20 Sep 2022 15:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50058
IP address blocks: 31.6.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:73:aa:90:2e:86:76:4d:a9:d9:8a:4d:d1:a3:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Sep 20 15:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=646fb959a0526b70509f05daa6f90a98e573e7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:2b:4e:04:b2:f1:b1:a4:11:91:54:a4:b8:
7c:f8:6c:ce:15:9b:bf:f8:a4:4c:b7:51:aa:ab:0b:
2b:4f:2a:95:d0:56:f4:e0:cb:c1:27:b9:e8:44:08:
11:4d:5b:e4:57:1c:63:8e:e7:bb:15:7e:a1:26:3b:
b5:43:48:ee:36:73:be:9a:f5:74:fc:a7:54:17:cd:
ee:30:bb:d2:75:f0:dd:5c:18:93:e6:fc:29:00:2d:
d3:c6:95:8e:a4:ac:0e:90:81:b0:fe:12:07:37:52:
8c:f1:1e:99:fa:64:2b:c8:48:7c:e1:cc:b4:eb:59:
84:9b:09:01:a4:3e:53:e4:35:8e:27:3a:a0:7a:0a:
cd:ce:17:74:8b:46:a3:44:fb:23:fa:31:fd:38:81:
27:b4:56:a5:1e:77:95:c5:e1:a5:5f:6c:41:e0:ab:
50:a4:22:63:38:71:b8:fe:86:3d:aa:53:69:ec:90:
a0:8c:0b:c9:32:7f:bb:b3:f3:6e:33:ca:4b:42:a0:
e3:c6:a7:1e:8d:c8:f6:c2:42:4e:d9:3d:62:6c:75:
b1:6f:ce:e0:bd:5b:b3:6b:f7:77:e8:94:17:de:77:
3c:15:a6:68:01:7e:e3:2e:75:fe:fc:28:36:4f:38:
18:91:92:16:6f:2d:3d:d4:31:07:e6:e7:8e:d7:07:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6F:B9:59:A0:52:6B:70:50:9F:05:DA:A6:F9:0A:98:E5:73:E7:E9
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/ZG-5WaBSa3BQnwXapvkKmOVz5-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:82:53:74:19:dd:02:67:d8:65:b4:b0:2b:8e:fc:d0:4e:ef:
1b:1c:2b:69:5f:24:26:18:52:46:f8:5a:c4:2d:03:3b:30:10:
aa:9b:23:d0:57:5f:b1:dd:f3:8f:13:11:d6:95:5b:65:0b:a0:
ee:47:5d:16:f8:f2:0c:b0:3a:95:b0:6a:85:6b:6e:56:fa:f6:
ff:73:28:be:3f:98:e2:01:e2:2c:6a:3f:33:a3:6e:fb:96:00:
7f:d6:34:02:7c:4a:2b:3e:cc:bd:a5:44:4b:18:7b:f3:81:d4:
0f:84:dd:45:35:8f:7f:07:e4:4f:68:d1:2b:37:da:78:72:a7:
b0:64:71:25:0d:fc:10:56:c4:6c:78:51:5d:b2:bf:48:ff:93:
b4:2e:31:b7:f7:e2:5a:10:e3:98:17:a8:0b:37:61:1d:c1:4a:
82:75:fb:ad:35:45:9c:c9:df:58:3d:ce:1c:55:cf:a6:47:1a:
d3:a2:56:35:85:87:71:b0:91:52:86:ba:fa:76:d0:9c:2a:4c:
96:f2:23:28:68:4a:c0:ca:37:e3:59:a7:cc:8c:ed:b3:a5:5d:
60:d1:4e:66:26:35:8b:a0:47:a6:14:dc:36:3f:ad:bc:3b:42:
07:d7:1e:01:45:db:88:61:98:f1:26:dd:f6:29:23:ff:7e:59:
2d:4a:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org