Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/Zt1GOT5ixArkg-EhZPaiaR2gE9s.roa
File: Zt1GOT5ixArkg-EhZPaiaR2gE9s.roa (raw, json)
Hash identifier: wup8CddPAELnHgB1Jeosy79Fxwd310xqpsqInH5MOX4=
Subject key identifier: 66:DD:46:39:3E:62:C4:0A:E4:83:E1:21:64:F6:A2:69:1D:A0:13:DB
Certificate issuer: /CN=65789ab4d903b2c73f79b2f66ed86a43a9640340
Certificate serial: 0124A63E
Authority key identifier: 65:78:9A:B4:D9:03:B2:C7:3F:79:B2:F6:6E:D8:6A:43:A9:64:03:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZXiatNkDssc_ebL2bthqQ6lkA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/Zt1GOT5ixArkg-EhZPaiaR2gE9s.roa
Signing time: Tue 22 Mar 2022 16:04:50 +0000
ROA not before: Tue 22 Mar 2022 16:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57866
IP address blocks: 5.44.251.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19179070 (0x124a63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65789ab4d903b2c73f79b2f66ed86a43a9640340
Validity
Not Before: Mar 22 16:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66dd46393e62c40ae483e12164f6a2691da013db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:05:c0:6e:9c:01:98:45:c3:90:e8:9d:4d:
95:24:f6:56:03:70:e5:92:90:de:2b:35:99:ce:10:
41:a4:23:8c:46:c2:0b:19:19:e5:3e:c6:33:84:da:
f1:4e:67:72:e9:84:34:9c:b6:25:29:52:a2:2d:db:
95:b1:ad:92:92:ee:f4:25:4e:ce:70:62:83:c2:07:
b7:9d:ca:9d:02:11:3d:1c:b7:08:1c:cb:6a:8a:35:
3c:9f:a2:4e:07:8d:06:56:4f:05:fe:7b:16:f7:86:
9b:4c:f6:20:85:e6:2a:42:b7:85:de:92:73:2c:cf:
8f:23:48:5e:58:6b:60:10:89:df:b9:3b:a7:ba:66:
be:81:a1:5f:63:17:b5:89:3d:89:c5:b0:3d:0a:57:
3e:bf:70:c3:4e:26:48:1e:12:80:2f:29:5b:77:a6:
54:a7:98:77:60:e8:10:c6:6d:c8:19:fb:da:e4:ec:
6e:47:02:f2:89:dd:09:6c:32:b9:95:98:2c:32:b2:
31:bc:a0:8a:40:81:a5:4e:3e:d6:36:40:ac:b1:6b:
17:5d:11:75:19:d8:1a:c3:03:7f:d2:a9:19:be:4e:
d5:b4:7b:42:43:07:28:21:ee:98:55:ed:b2:dc:6f:
52:fc:53:73:eb:81:67:8b:d2:6e:12:0a:81:a1:10:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:46:39:3E:62:C4:0A:E4:83:E1:21:64:F6:A2:69:1D:A0:13:DB
X509v3 Authority Key Identifier:
keyid:65:78:9A:B4:D9:03:B2:C7:3F:79:B2:F6:6E:D8:6A:43:A9:64:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXiatNkDssc_ebL2bthqQ6lkA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/Zt1GOT5ixArkg-EhZPaiaR2gE9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/ZXiatNkDssc_ebL2bthqQ6lkA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.251.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:8c:a2:aa:08:dd:eb:ae:c7:d3:b0:de:66:ba:f6:1e:36:30:
ff:42:c8:d5:e3:6b:8b:f2:d0:cd:dd:0c:ef:ff:b2:92:2d:a4:
e0:0d:39:4c:a6:4a:94:be:68:90:57:6f:44:5a:3d:e8:e9:bf:
7c:1f:15:5a:82:dc:8b:99:66:8c:75:2f:37:9c:15:a4:98:bc:
ab:0c:7e:f0:cc:85:6b:74:ca:63:f8:59:b5:84:97:98:8f:b2:
77:04:fd:14:43:d1:4c:76:24:17:b1:60:0d:c0:59:4b:b2:33:
56:0d:26:d6:29:10:5f:68:ec:2e:08:25:22:21:d2:bd:bd:25:
70:9e:a3:38:48:ca:7f:71:7f:ca:69:76:26:79:93:be:d8:22:
48:f5:23:60:2a:1d:75:fd:f2:cc:b6:51:ca:05:92:f5:8a:ae:
a8:c8:8c:aa:f2:b9:83:07:23:13:2f:59:1f:e7:03:23:c0:15:
a3:79:66:68:ce:c9:a2:11:71:5d:30:4b:53:a6:8c:b0:f2:16:
0a:6d:fd:98:b4:54:70:d6:71:f6:63:84:1a:70:c4:24:8b:cb:
af:59:ff:da:3a:34:4a:17:c1:13:e9:03:b0:3c:fc:82:d1:f9:
22:59:6f:80:a6:e9:bd:79:71:0b:4f:60:8c:a8:c5:68:e0:10:
4b:c3:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:32 2024 by rpki-client on console-ams.rpki-client.org