Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zt9LlStbnbEZYBRow_zsFhoRpZA.roa
File: zt9LlStbnbEZYBRow_zsFhoRpZA.roa (raw, json)
Hash identifier: wHXefK++NcgSDc9+7aB0JEx5iNqBP1z+eYxT4u9xtNQ=
Subject key identifier: CE:DF:4B:95:2B:5B:9D:B1:19:60:14:68:C3:FC:EC:16:1A:11:A5:90
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01828DBF5141C67D873A790732D91F30EB49
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zt9LlStbnbEZYBRow_zsFhoRpZA.roa
Signing time: Thu 11 Aug 2022 16:31:41 +0000
ROA not before: Thu 11 Aug 2022 16:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 45.12.81.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:bf:51:41:c6:7d:87:3a:79:07:32:d9:1f:30:eb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Aug 11 16:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cedf4b952b5b9db119601468c3fcec161a11a590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:87:29:b1:71:02:f7:f2:89:ca:08:66:b7:0c:
19:2c:0e:63:74:88:f9:59:54:6c:ea:87:97:25:2c:
cb:a6:36:73:92:74:67:70:26:89:6b:54:0b:3c:39:
31:75:26:b8:08:98:92:d6:36:05:63:86:0a:19:d0:
82:16:50:ef:72:e2:cf:89:b9:30:70:59:8c:c5:b9:
01:51:02:ea:dc:3a:d2:21:2a:48:11:03:5e:46:5e:
7f:fe:d0:af:e9:76:16:c7:58:39:75:b6:3a:52:69:
a6:ec:05:7d:f9:85:e3:49:86:86:d7:79:90:47:90:
74:59:96:00:81:77:3e:3b:30:69:36:35:71:9c:58:
22:5b:89:fc:b2:57:c7:32:25:2a:04:2f:ce:1a:4d:
44:d5:52:0f:18:32:fd:48:4d:77:9c:60:21:68:58:
f5:a3:51:1b:7a:15:58:2c:d3:bf:24:bb:4e:b5:6c:
97:27:96:43:53:2e:01:d1:3a:5c:b6:44:e0:0d:41:
04:94:3b:9e:70:7d:79:d4:49:18:75:44:79:18:c2:
4e:90:94:af:f4:f7:1b:10:51:51:01:89:ab:2a:ec:
f4:4b:7d:bb:d0:1c:46:aa:16:1d:a7:91:8f:7e:de:
3f:ed:ab:01:80:3f:e0:a3:4b:8e:85:22:fc:ba:d7:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DF:4B:95:2B:5B:9D:B1:19:60:14:68:C3:FC:EC:16:1A:11:A5:90
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zt9LlStbnbEZYBRow_zsFhoRpZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
45.87.173.0/24
Signature Algorithm: sha256WithRSAEncryption
88:92:83:93:84:25:af:51:1c:59:0a:2a:21:53:91:1f:5c:42:
f6:8b:5a:84:f4:f4:7d:7b:7a:97:fe:59:fc:b4:4e:65:65:81:
76:78:ec:9e:f3:93:0c:d9:13:93:3f:19:05:19:3f:1e:91:6f:
b7:5e:1e:cb:d0:a7:83:96:81:81:55:2d:ca:1f:bc:36:3b:af:
70:31:51:3c:79:5e:7e:c8:47:ff:49:05:0f:45:4f:3a:66:be:
98:ab:e3:f0:bd:05:91:bc:a5:b2:08:05:11:7d:1b:68:b5:0f:
91:2e:de:e4:8f:59:19:28:e0:e1:b7:21:2d:22:cd:bc:c4:30:
93:d4:93:62:98:d0:a8:86:fe:58:ad:58:a2:fb:af:dd:dd:2e:
64:8d:2f:de:d7:73:40:f3:a3:91:ac:78:8a:98:6a:cd:21:34:
dd:0c:60:52:54:a1:a0:81:f3:61:00:a7:fb:ff:4c:3b:2c:9b:
fa:06:b6:2e:0d:66:5d:80:8e:37:d1:17:ee:32:37:20:40:3e:
a7:33:f0:74:91:7b:7a:f7:7c:d5:7c:b4:be:11:2d:b5:2e:37:
34:92:e1:8b:fb:c4:4b:b5:66:48:c1:70:24:aa:fc:4e:a7:b5:
e4:f8:bf:e0:18:dc:ba:d2:9c:96:c0:04:98:3a:96:05:fc:6f:
5c:aa:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org