Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/ZkW-OjiaGvB-Ksgs6wVKuFvvAHQ.roa
File: ZkW-OjiaGvB-Ksgs6wVKuFvvAHQ.roa (raw, json)
Hash identifier: i8cLaFL9jAwT04octwczd06gyY5BkBZ/01n+hTJMcww=
Subject key identifier: 66:45:BE:3A:38:9A:1A:F0:7E:2A:C8:2C:EB:05:4A:B8:5B:EF:00:74
Certificate issuer: /CN=43931de6e91b40f4b2bb201253e57a86741105a5
Certificate serial: 02D1BEDF
Authority key identifier: 43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/ZkW-OjiaGvB-Ksgs6wVKuFvvAHQ.roa
Signing time: Sat 01 Jan 2022 15:06:38 +0000
ROA not before: Sat 01 Jan 2022 15:06:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39640
IP address blocks: 103.23.62.0/23 maxlen: 23
89.34.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47300319 (0x2d1bedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43931de6e91b40f4b2bb201253e57a86741105a5
Validity
Not Before: Jan 1 15:06:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6645be3a389a1af07e2ac82ceb054ab85bef0074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:b2:78:08:62:e4:96:2f:b7:b3:91:c4:6c:
d7:ce:a3:10:3d:8e:81:76:c4:12:76:44:22:c0:7f:
d5:1d:60:40:67:60:fc:60:00:49:0e:f2:1f:c8:29:
ab:76:be:c4:34:64:d1:36:aa:1c:e2:4b:43:56:53:
2a:e8:cc:8c:5b:a7:f1:67:74:70:35:05:8a:4b:55:
5b:05:8c:cc:5f:47:6f:c3:f8:e9:ff:f9:d3:43:a3:
09:f5:b9:46:e7:8b:2e:76:92:22:34:3b:8d:5e:c5:
51:04:33:8d:ad:04:80:42:96:97:93:2a:ed:b0:49:
42:67:80:45:2d:3b:31:a7:0f:92:2f:c3:45:78:a1:
92:c0:90:25:59:52:d5:f0:48:93:9f:c5:48:c3:e8:
15:4d:3e:8d:95:ee:f7:2a:22:ff:63:c9:d5:9d:9b:
c0:5d:3a:4f:32:ab:78:14:d2:e4:3b:72:c9:37:df:
86:9f:16:87:ae:f8:39:00:20:0d:32:fc:2e:4d:e0:
64:57:0a:43:8e:4c:96:39:aa:34:4a:c5:5b:19:6c:
94:4c:b5:2a:d9:52:4c:ca:14:25:0b:e8:e5:3e:78:
3c:a0:e4:70:37:29:6a:f2:7d:ca:9b:22:bb:9c:d3:
76:7d:8b:01:10:a3:4f:86:0d:1f:6f:58:5b:37:75:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:45:BE:3A:38:9A:1A:F0:7E:2A:C8:2C:EB:05:4A:B8:5B:EF:00:74
X509v3 Authority Key Identifier:
keyid:43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/ZkW-OjiaGvB-Ksgs6wVKuFvvAHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.76.0/24
103.23.62.0/23
Signature Algorithm: sha256WithRSAEncryption
81:96:4f:8e:64:86:49:ed:97:fb:32:a0:f0:56:67:71:93:3f:
7f:5d:26:b4:1c:7d:39:d8:b2:e5:de:e5:a4:78:83:b7:d4:9f:
5f:cb:fc:3d:16:c4:19:5a:9c:ef:db:52:d6:dd:fa:f4:d0:af:
e3:c3:f1:45:79:42:60:ac:a6:01:4f:14:8d:19:ba:ee:12:c0:
ba:ba:2c:c9:6a:98:ac:88:00:92:f7:88:29:dc:93:50:bb:36:
82:56:99:55:db:41:04:21:85:ca:e4:7d:45:33:8c:74:c6:48:
7b:1b:ea:a8:af:2e:1f:4e:37:4d:44:3f:b3:1b:36:ab:f8:ee:
1a:b1:ec:72:23:9c:a0:d1:c9:af:c5:cc:48:a0:ae:22:ec:ed:
13:11:39:a5:36:3a:13:81:39:bc:a6:4e:b8:f3:b3:9d:b2:76:
1d:8a:88:16:be:29:6b:4d:fa:7b:60:e3:7b:d8:99:47:04:1e:
a7:a4:a5:f5:73:14:0c:f2:f9:3a:a4:7b:e9:b1:68:e0:5c:02:
46:90:20:56:7b:cf:22:d7:c1:00:38:79:9b:9b:f9:c3:a4:08:
42:a1:47:03:61:76:f0:d6:60:90:43:4d:9c:81:f7:28:e5:97:
da:0e:a1:d9:07:a5:f6:9a:23:01:53:f9:64:81:d1:fe:cd:3b:
96:b5:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:43 2024 by rpki-client on console-ams.rpki-client.org