Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/ZGZ7sHCWfpqlK4W31B2ABwxkMPY.roa
File: ZGZ7sHCWfpqlK4W31B2ABwxkMPY.roa (raw, json)
Hash identifier: FJoeT4nDvKsP3jzPyA99E7eQq4hwnmztbhxovINA220=
Subject key identifier: 64:66:7B:B0:70:96:7E:9A:A5:2B:85:B7:D4:1D:80:07:0C:64:30:F6
Certificate issuer: /CN=72b708f840a7544a2d7cb8cd07e22568373ad034
Certificate serial: 0956364B
Authority key identifier: 72:B7:08:F8:40:A7:54:4A:2D:7C:B8:CD:07:E2:25:68:37:3A:D0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crcI-ECnVEotfLjNB-IlaDc60DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/ZGZ7sHCWfpqlK4W31B2ABwxkMPY.roa
Signing time: Sat 01 Jan 2022 03:55:44 +0000
ROA not before: Sat 01 Jan 2022 03:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51254
IP address blocks: 185.133.124.0/23 maxlen: 23
185.133.124.0/22 maxlen: 22
185.133.126.0/23 maxlen: 23
2a05:25c0::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156644939 (0x956364b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b708f840a7544a2d7cb8cd07e22568373ad034
Validity
Not Before: Jan 1 03:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64667bb070967e9aa52b85b7d41d80070c6430f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:1f:81:76:83:6c:14:f8:50:b7:01:ce:58:
e3:0a:f4:52:68:b6:aa:f5:ea:ee:6a:fb:8f:b1:0f:
04:56:8a:a8:0a:3c:50:39:63:88:ad:e9:aa:85:f9:
67:3d:30:42:bb:8e:70:74:85:d9:37:33:3c:fe:d0:
91:f0:99:ad:0f:21:f4:7f:43:a7:85:f3:19:5e:c3:
a5:85:64:9c:79:ff:b5:31:78:ba:00:cb:5c:00:16:
9f:bb:33:af:a2:f1:a7:36:6c:14:02:11:99:1c:aa:
1b:bd:55:aa:49:63:ff:9c:d9:81:ab:21:4c:aa:05:
8b:60:6c:9c:19:a8:bd:2c:3a:20:e4:33:03:8b:1c:
2a:ce:e3:dc:57:53:22:cd:9b:7c:41:e7:b6:a3:e8:
c5:94:31:ea:84:eb:b7:46:16:b8:77:70:99:4a:8a:
0f:3f:e4:3c:1c:7b:55:29:d1:df:b4:1a:1d:49:a2:
3e:19:5c:51:a0:74:a4:1b:68:82:89:d2:31:72:f8:
26:45:31:fd:d7:79:bb:56:fd:ba:46:2f:6c:bc:d9:
b3:fc:ea:1a:f5:5f:a9:6e:ea:db:0e:e9:b9:44:d5:
ce:75:b1:60:54:79:0d:99:e9:9e:3a:97:a2:1b:9d:
eb:6c:9e:fc:bd:83:3f:bb:6e:9a:59:e3:05:ff:46:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:66:7B:B0:70:96:7E:9A:A5:2B:85:B7:D4:1D:80:07:0C:64:30:F6
X509v3 Authority Key Identifier:
keyid:72:B7:08:F8:40:A7:54:4A:2D:7C:B8:CD:07:E2:25:68:37:3A:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crcI-ECnVEotfLjNB-IlaDc60DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/ZGZ7sHCWfpqlK4W31B2ABwxkMPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d9e0e2-55c9-4be5-bdbd-b08ac2c01573/1/crcI-ECnVEotfLjNB-IlaDc60DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.124.0/22
IPv6:
2a05:25c0::/36
Signature Algorithm: sha256WithRSAEncryption
7b:6b:02:37:0c:13:f2:a6:7c:0e:c3:8d:48:c1:66:91:f7:be:
0a:61:e2:1c:a8:ad:06:79:5b:ca:ab:73:9e:5c:68:92:d1:a8:
6e:26:0a:6d:24:9c:bd:25:d3:3e:52:ea:d2:e3:ce:67:ef:ac:
33:f2:0d:52:e0:01:2d:a1:38:d0:30:81:f8:a5:41:f6:d5:ab:
c6:e0:4b:c5:b0:01:72:98:ee:bf:0e:c9:84:b9:61:62:66:76:
eb:8e:9b:f8:21:3c:7e:0d:4b:39:01:9d:ef:30:3e:84:71:e1:
65:67:b0:8c:24:f8:2b:d4:7b:49:4b:88:60:8a:07:1f:b1:cb:
f1:4b:1d:1c:d2:2f:31:f4:44:ff:2c:8a:bd:ba:34:fe:58:43:
21:5d:13:14:b0:15:ab:85:29:2a:5f:54:ac:aa:55:ce:f6:a8:
73:09:db:ab:76:5e:ac:58:59:c0:5a:58:13:c8:52:92:61:50:
af:6f:ad:89:4c:4c:97:e5:38:ca:07:65:9a:0c:8a:50:d8:c0:
e5:ea:9b:07:75:19:65:d3:d4:26:88:2e:89:36:50:61:34:9d:
f2:ec:f7:ed:c9:a3:18:9c:6e:06:7e:16:b6:bd:2a:8f:e2:dc:
01:84:1b:f8:0d:ed:a5:61:cb:cb:15:eb:27:f2:ad:4e:c5:fc:
ce:54:6a:06
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIECVY2SzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MmI3MDhmODQwYTc1NDRhMmQ3Y2I4Y2QwN2UyMjU2ODM3M2FkMDM0MB4XDTIyMDEw
MTAzNTU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjQ2NjdiYjA3MDk2
N2U5YWE1MmI4NWI3ZDQxZDgwMDcwYzY0MzBmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAObbH4F2g2wU+FC3Ac5Y4wr0Umi2qvXq7mr7j7EPBFaKqAo8
UDljiK3pqoX5Zz0wQruOcHSF2TczPP7QkfCZrQ8h9H9Dp4XzGV7DpYVknHn/tTF4
ugDLXAAWn7szr6LxpzZsFAIRmRyqG71Vqklj/5zZgashTKoFi2BsnBmovSw6IOQz
A4scKs7j3FdTIs2bfEHntqPoxZQx6oTrt0YWuHdwmUqKDz/kPBx7VSnR37QaHUmi
PhlcUaB0pBtogonSMXL4JkUx/dd5u1b9ukYvbLzZs/zqGvVfqW7q2w7puUTVznWx
YFR5DZnpnjqXohud62ye/L2DP7tumlnjBf9GqlkCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBRkZnuwcJZ+mqUrhbfUHYAHDGQw9jAfBgNVHSMEGDAWgBRytwj4QKdUSi18
uM0H4iVoNzrQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NyY0ktRUNuVkVvdGZMak5CLUlsYURjNjBEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvZDllMGUyLTU1YzktNGJlNS1iZGJkLWIwOGFjMmMwMTU3My8x
L1pHWjdzSENXZnBxbEs0VzMxQjJBQnd4a01QWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
ZDllMGUyLTU1YzktNGJlNS1iZGJkLWIwOGFjMmMwMTU3My8xL2NyY0ktRUNuVkVv
dGZMak5CLUlsYURjNjBEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEArmFfDAOBAIAAjAIAwYEKgUlwAAw
DQYJKoZIhvcNAQELBQADggEBAHtrAjcME/KmfA7DjUjBZpH3vgph4hyorQZ5W8qr
c55caJLRqG4mCm0knL0l0z5S6tLjzmfvrDPyDVLgAS2hONAwgfilQfbVq8bgS8Ww
AXKY7r8OyYS5YWJmduuOm/ghPH4NSzkBne8wPoRx4WVnsIwk+CvUe0lLiGCKBx+x
y/FLHRzSLzH0RP8sir26NP5YQyFdExSwFauFKSpfVKyqVc72qHMJ26t2XqxYWcBa
WBPIUpJhUK9vrYlMTJflOMoHZZoMilDYwOXqmwd1GWXT1CaILok2UGE0nfLs9+3J
oxicbgZ+Fra9Ko/i3AGEG/gN7aVhy8sV6yfyrU7F/M5UagY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:20 2023 by rpki-client on console-ams.rpki-client.org