Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/zZZ11nPFdQQZw2zQKW7ZoDL6E38.roa
File: zZZ11nPFdQQZw2zQKW7ZoDL6E38.roa (raw, json)
Hash identifier: Yj8KigH7RN31ygieKj3fJr4lfXsmk4ltDfr84KgOhl0=
Subject key identifier: CD:96:75:D6:73:C5:75:04:19:C3:6C:D0:29:6E:D9:A0:32:FA:13:7F
Certificate issuer: /CN=b8dff81724bf75aeffe14f86bfce208234419a80
Certificate serial: 0186C61C5E7291DACFCB8AFB322BCA11DEBB
Authority key identifier: B8:DF:F8:17:24:BF:75:AE:FF:E1:4F:86:BF:CE:20:82:34:41:9A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uN_4FyS_da7_4U-Gv84ggjRBmoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/zZZ11nPFdQQZw2zQKW7ZoDL6E38.roa
Signing time: Thu 09 Mar 2023 11:23:13 +0000
ROA not before: Thu 09 Mar 2023 11:23:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 45.142.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:1c:5e:72:91:da:cf:cb:8a:fb:32:2b:ca:11:de:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dff81724bf75aeffe14f86bfce208234419a80
Validity
Not Before: Mar 9 11:23:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd9675d673c5750419c36cd0296ed9a032fa137f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:d6:86:dd:75:1f:fe:a0:54:05:ca:97:dd:
ec:6e:81:7d:23:d9:fa:8c:9e:0d:68:79:af:21:ba:
31:9f:e2:d8:6a:22:98:1a:62:ce:62:a2:5b:a0:8c:
90:f1:9f:0d:64:0c:00:d4:14:64:b5:e6:76:38:50:
6e:25:37:3b:25:1c:5d:af:b1:86:cc:5f:58:0d:38:
86:20:74:21:5e:7e:05:f8:2e:3b:2b:77:4f:80:cd:
64:78:bf:d3:ff:8e:e9:f8:95:56:2d:21:38:31:2b:
47:a4:99:85:d3:59:86:9c:eb:8f:a1:eb:a4:e6:90:
da:29:7a:96:ec:e7:f4:94:37:9b:08:9c:42:12:3e:
41:f1:7d:bd:d2:db:90:f3:ec:4d:01:d5:6c:5f:4e:
46:0e:05:56:5f:17:6f:60:33:d5:e8:30:85:c1:af:
c4:69:1e:63:99:38:6d:6c:b3:e2:55:1f:89:c6:3b:
53:77:21:66:b3:f9:d4:b1:ad:1a:e1:83:6f:77:8e:
14:a2:c1:f3:ff:bf:9e:ec:93:ce:27:31:5b:b1:4f:
dc:ce:f7:69:eb:09:13:39:66:4e:1e:91:d0:a6:ac:
3b:ff:ba:ee:0a:76:10:54:16:59:66:31:ab:98:6e:
ba:2f:cf:f3:23:d6:93:80:17:30:d8:4a:23:27:c2:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:96:75:D6:73:C5:75:04:19:C3:6C:D0:29:6E:D9:A0:32:FA:13:7F
X509v3 Authority Key Identifier:
keyid:B8:DF:F8:17:24:BF:75:AE:FF:E1:4F:86:BF:CE:20:82:34:41:9A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uN_4FyS_da7_4U-Gv84ggjRBmoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/zZZ11nPFdQQZw2zQKW7ZoDL6E38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/uN_4FyS_da7_4U-Gv84ggjRBmoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a9:a9:28:82:d1:a7:45:e7:79:2c:6c:23:db:d7:8a:66:f6:
18:6c:95:8c:fd:7a:3f:8d:ba:38:bb:35:c4:5a:e7:9c:ee:f8:
a9:f0:55:98:26:88:66:be:5d:a8:5f:60:b2:3c:e0:64:17:d7:
a5:82:17:38:72:f1:79:b3:8b:f8:62:bc:3e:60:90:2c:fa:b9:
e7:38:52:b4:b9:80:28:01:e6:49:18:f6:d7:30:83:6d:70:bf:
7c:c8:85:db:67:e2:d4:a2:48:3c:99:4a:c8:dc:e5:fe:13:4b:
6d:fc:3e:74:9e:63:95:1b:a3:a7:70:66:06:b1:ef:10:ee:15:
ba:56:bc:61:58:ae:0b:87:04:c0:e6:74:d5:e6:2e:4e:59:b5:
8f:6c:ca:73:56:c0:27:2c:7a:a7:06:0d:58:ca:07:3f:21:41:
31:f9:01:dd:6c:5c:e5:bc:81:8f:9e:4a:d4:e2:72:4c:5e:2e:
d1:05:f0:3b:c8:d9:cd:ce:b5:ea:e7:5d:be:b3:7c:80:3b:3a:
22:c5:80:3c:bb:43:42:9d:c6:92:bb:7d:bd:89:f6:2b:23:04:
53:f5:d4:39:a0:1b:68:ac:91:fe:ad:ee:2c:8f:74:f8:93:3c:
b4:b3:37:5d:fb:8c:dd:0a:55:1d:ad:55:c1:c9:e7:c2:50:7d:
b8:fd:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:36 2024 by rpki-client on console-fra.rpki-client.org