Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/ZhTVX0X6L4xiwrC0hD7SSCkXFHY.roa
File: ZhTVX0X6L4xiwrC0hD7SSCkXFHY.roa (raw, json)
Hash identifier: dxgW4ApYE8JoXlz5PF410q2LzHuPk2vXzPIdeRaQ26E=
Subject key identifier: 66:14:D5:5F:45:FA:2F:8C:62:C2:B0:B4:84:3E:D2:48:29:17:14:76
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 053D7197
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/ZhTVX0X6L4xiwrC0hD7SSCkXFHY.roa
Signing time: Sat 01 Jan 2022 09:00:29 +0000
ROA not before: Sat 01 Jan 2022 09:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28907
IP address blocks: 91.228.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87912855 (0x53d7197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Jan 1 09:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6614d55f45fa2f8c62c2b0b4843ed24829171476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:0c:3d:59:5a:f1:12:7f:f6:f1:01:03:8a:
a5:b6:aa:00:d3:84:c6:c9:1e:b3:a2:d1:66:e6:19:
d3:e7:35:9e:21:2d:90:6c:5e:14:58:fd:1f:6d:c0:
38:d2:cc:4b:24:8a:88:24:d7:1b:ae:34:27:36:30:
9c:03:9a:fb:a5:07:3d:51:c9:77:97:b6:90:6f:b1:
31:7d:69:06:ea:44:e0:50:e8:03:01:3f:8a:69:77:
1a:0c:21:83:73:5e:f4:bb:93:2e:df:0d:e3:67:20:
de:02:21:71:85:bb:3a:1b:ea:18:19:84:dc:82:08:
3f:dc:e1:85:b0:22:e8:ba:77:df:da:22:d4:09:c8:
84:9e:02:53:b7:95:45:c7:a9:b4:1b:12:b2:f3:e2:
ce:2f:78:61:6b:90:eb:88:bc:56:83:d8:14:69:e2:
6a:93:80:94:5a:de:63:52:bc:ad:48:7d:dc:36:5c:
6b:1b:e9:c2:a7:03:13:52:93:96:7d:66:63:a8:0c:
e3:08:49:e1:d6:36:c1:01:53:7c:c5:e1:a5:05:40:
b1:2a:95:cf:8b:45:20:54:a1:c3:22:eb:05:76:79:
1d:84:17:24:4d:06:69:5c:40:ea:da:2d:a4:14:0b:
76:bb:a5:19:84:ec:a2:03:b1:3e:f9:7a:65:f3:a4:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:14:D5:5F:45:FA:2F:8C:62:C2:B0:B4:84:3E:D2:48:29:17:14:76
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/ZhTVX0X6L4xiwrC0hD7SSCkXFHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:49:a3:cb:a8:6c:a3:6a:6a:78:14:b0:5c:e1:c4:a4:c8:3d:
cb:c3:a0:53:b2:e1:06:4b:5a:90:70:3f:09:71:ad:03:71:ce:
f6:f3:e5:ff:14:67:c9:f4:25:5e:8f:35:69:d0:29:4c:0b:d7:
4a:11:71:b0:6b:64:e3:8e:d9:83:d3:ff:4f:a0:76:a3:aa:e5:
1b:c7:05:29:b2:c5:be:95:58:80:53:88:c4:27:43:18:3d:8b:
50:16:64:e2:df:c6:7c:06:44:29:cc:54:43:75:33:c2:74:f6:
6e:5f:83:e0:24:ca:12:9b:28:d9:c7:f7:b0:ec:dd:dc:fb:9c:
ed:3c:b2:d5:fb:b7:60:e0:54:9a:55:1c:36:55:b0:74:ca:4e:
81:82:ed:d1:71:67:f3:a0:01:05:f6:fd:c1:c0:a3:b5:34:8a:
c2:9a:0e:6e:02:43:d0:aa:ed:94:57:d3:44:46:10:d1:6f:91:
08:fe:06:68:29:00:22:a6:65:36:6b:ba:62:a3:14:e9:79:71:
0a:b0:2a:01:33:b2:a4:ee:ae:dc:dd:c8:6c:96:33:62:7e:ec:
fe:cc:af:ad:86:e2:40:5f:18:d9:6b:4d:4f:23:80:23:2b:d8:
a8:a5:04:59:19:fa:f1:5e:fc:88:8b:fe:0b:7f:3a:7a:c7:5d:
52:d8:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:24 2025 by rpki-client