Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/3A9hdEoBwsXLPAD558XadeE5lmk.roa
File: 3A9hdEoBwsXLPAD558XadeE5lmk.roa (raw, json)
Hash identifier: WGXEqqoIw8xZ01bUI5yoSZ6CqSkiUF0aP8aXru5Zl/0=
Subject key identifier: DC:0F:61:74:4A:01:C2:C5:CB:3C:00:F9:E7:C5:DA:75:E1:39:96:69
Certificate issuer: /CN=64347465bc925c8e756ddfaa609eda02cc52d031
Certificate serial: 018CC348DCA6DC79565BB8BA41C1E925A64A
Authority key identifier: 64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/3A9hdEoBwsXLPAD558XadeE5lmk.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215978
IP address blocks: 85.114.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:dc:a6:dc:79:56:5b:b8:ba:41:c1:e9:25:a6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64347465bc925c8e756ddfaa609eda02cc52d031
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc0f61744a01c2c5cb3c00f9e7c5da75e1399669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0d:16:b3:a4:44:29:64:fc:86:16:8c:66:df:
59:23:30:2d:d3:02:33:5f:11:dc:ce:e0:42:3f:cc:
ea:40:99:15:77:c6:56:0a:6b:9b:ad:c3:39:d4:c4:
5f:5a:f7:44:e1:15:cd:f0:1e:09:73:22:54:38:7e:
9e:41:c8:5a:39:e9:b2:9b:2c:50:1d:e6:b1:a9:b9:
0a:eb:b2:dd:f6:d2:38:f3:bf:3e:cc:b6:6c:ce:93:
f5:f1:cd:f4:e4:91:ee:58:d9:6d:3e:63:ba:5d:c5:
e0:dd:fc:52:69:29:f1:11:58:ed:61:5c:79:b9:a5:
44:a3:51:d0:61:20:39:fa:a4:9b:6d:99:a8:11:6d:
50:67:2a:c2:45:a3:ea:47:38:9c:50:97:fe:ed:05:
53:50:e1:ee:11:a8:44:28:cb:52:d0:59:7c:36:65:
5f:0c:bf:f1:4d:8c:cc:db:b7:57:92:fc:d3:64:e7:
67:f2:a9:36:3e:6f:aa:30:4e:1e:9d:7f:63:66:3c:
98:61:3f:7e:e5:b0:91:ed:b4:80:d8:99:4f:96:8c:
f5:6c:3a:20:b0:97:c6:e4:00:41:6f:27:74:19:73:
9f:88:90:e3:f0:59:53:d0:f6:09:a0:e7:42:b7:47:
9a:4d:69:4f:f3:45:fd:58:c6:09:95:4e:a1:f9:3d:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0F:61:74:4A:01:C2:C5:CB:3C:00:F9:E7:C5:DA:75:E1:39:96:69
X509v3 Authority Key Identifier:
keyid:64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/3A9hdEoBwsXLPAD558XadeE5lmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.114.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:bf:88:7b:b7:bf:f0:10:3c:15:a9:ae:95:c6:2d:3d:58:a4:
8b:f8:b2:aa:ba:80:48:c3:c6:29:e8:14:7e:ed:45:f0:a2:4b:
f4:0e:3d:25:f6:0a:30:47:90:ea:f7:c4:17:af:c5:d7:bc:7f:
09:65:98:4a:42:2d:65:a6:a6:0a:7f:37:8c:90:79:a6:90:a4:
06:c2:e0:2c:61:b0:cb:c6:b9:39:6a:69:55:a9:31:62:41:77:
11:93:d8:a9:9a:87:0d:20:db:a9:61:9a:4d:dd:33:7c:76:48:
66:ee:a6:15:da:21:c7:a8:9d:4d:37:e4:62:3a:9d:43:0d:d8:
bd:f5:97:5f:d9:14:c4:48:d2:0a:ba:30:65:ac:59:31:f8:2a:
2d:30:ee:cf:5b:88:de:23:9f:45:ef:73:53:80:f2:4b:ba:89:
8b:92:e4:f1:0f:0a:04:b9:66:5e:ee:6f:ca:99:77:66:4d:f7:
88:bb:c1:fa:eb:ee:21:94:f4:e7:24:0b:6d:d9:1e:2c:38:d8:
0e:f9:53:8d:ec:78:68:49:68:1b:c5:2d:a3:33:ff:99:38:06:
01:4d:3c:eb:dc:2a:e6:8b:8a:b6:f6:4f:ab:1e:a9:68:7b:e3:
dd:b8:5e:1b:92:fd:c4:e3:ad:92:9d:67:7b:ef:b1:2e:26:8f:
8f:f6:28:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:22 2024 by rpki-client on console-fra.rpki-client.org