Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/z-lcYJaUBi73q6-ihcmtsftlNDY.roa
File: z-lcYJaUBi73q6-ihcmtsftlNDY.roa (raw, json)
Hash identifier: ZpcIYpos3Yctza/e+Lhc5GgO16RgBQey9Tt1J5VMtX8=
Subject key identifier: CF:E9:5C:60:96:94:06:2E:F7:AB:AF:A2:85:C9:AD:B1:FB:65:34:36
Certificate issuer: /CN=cfa349e3b6ac2fa262413c20cbc41d6a53743193
Certificate serial: 074EA745
Authority key identifier: CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6NJ47asL6JiQTwgy8QdalN0MZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/z-lcYJaUBi73q6-ihcmtsftlNDY.roa
Signing time: Mon 31 Jan 2022 10:00:48 +0000
ROA not before: Mon 31 Jan 2022 10:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204287
IP address blocks: 194.61.112.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122595141 (0x74ea745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa349e3b6ac2fa262413c20cbc41d6a53743193
Validity
Not Before: Jan 31 10:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfe95c609694062ef7abafa285c9adb1fb653436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:4e:49:d1:10:f5:88:35:a6:f6:37:63:ea:
2c:83:35:a3:1d:5c:0f:ed:d7:3e:84:b3:13:10:e0:
ff:db:71:1f:ce:3c:b8:75:08:09:56:1f:c1:a4:cf:
7c:af:e7:af:b3:66:dd:61:3b:ea:42:ee:96:17:67:
da:51:27:46:e9:2e:87:2d:d7:a5:32:34:f4:c1:fd:
62:e8:10:4c:ad:53:30:28:37:88:e7:28:88:cc:89:
d7:31:de:61:22:df:91:10:d5:d8:37:54:42:6d:c9:
8c:c3:1b:3d:b9:09:51:48:ba:3a:d6:ed:61:4f:46:
fb:8d:e5:9b:a7:ec:21:7f:b8:ea:3c:d9:bc:67:39:
04:3b:38:b2:59:07:a5:d1:67:42:8e:8e:68:a6:50:
5f:c8:65:41:b4:c0:84:84:b1:52:e6:73:07:79:55:
a4:61:b2:de:d7:f2:c4:9e:1c:89:a2:b1:a8:97:25:
fd:06:b1:4c:0b:f3:08:59:65:a1:80:ac:61:c6:bb:
a7:c6:52:3a:3e:d3:15:d7:2e:34:3b:c7:c0:bf:f5:
f8:5d:8e:1a:93:32:2e:01:4d:6a:ba:f1:c6:18:12:
54:47:7e:46:a1:fa:f9:72:9a:a0:61:2e:d3:52:f2:
9e:2d:c7:b0:62:37:c2:46:9e:fe:5c:b9:c3:c0:19:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E9:5C:60:96:94:06:2E:F7:AB:AF:A2:85:C9:AD:B1:FB:65:34:36
X509v3 Authority Key Identifier:
keyid:CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6NJ47asL6JiQTwgy8QdalN0MZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/z-lcYJaUBi73q6-ihcmtsftlNDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/z6NJ47asL6JiQTwgy8QdalN0MZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:e2:ac:fb:0a:93:b8:bb:24:99:ac:89:41:06:f1:34:4d:3e:
ef:b8:04:3b:d1:bb:01:89:37:81:32:c3:1b:33:57:39:d2:05:
0a:29:d4:07:47:6f:57:bf:24:d4:f6:5d:d0:24:a5:32:e7:43:
55:e4:98:b3:8d:6f:ca:91:4f:dd:39:1e:ba:2e:46:bb:9b:7c:
24:4d:8e:c1:e4:73:d1:7c:3a:28:ee:d4:7d:e8:94:e3:25:f1:
19:dd:83:dd:18:a3:53:45:94:f7:29:0f:44:7f:1c:b1:ea:e7:
f4:42:65:b4:08:ba:28:84:8d:05:bc:6a:25:17:aa:ef:32:56:
8e:7d:fe:06:f1:b1:dd:e2:9d:62:3d:a3:15:66:99:aa:11:96:
5a:5f:89:72:90:a8:21:f9:62:d0:16:86:65:af:b4:47:d0:35:
2b:2a:09:49:c4:f1:27:18:6a:c3:46:03:10:91:75:94:7f:6d:
3b:d4:ef:64:a7:dd:5b:e5:ff:92:bf:e7:0a:f0:7b:cf:3b:8d:
06:cb:24:78:d7:78:8a:ca:bf:ea:9f:af:2c:da:14:2c:98:8b:
e4:c6:b6:18:83:67:e1:b8:10:48:4c:0f:fc:ab:cc:63:8e:92:
68:24:60:5a:0e:10:19:fe:be:57:29:e9:5e:84:01:10:28:cb:
c7:1c:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:31 2025 by rpki-client