Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/Z88-O1THuqfACTtrj0uuwImQ2Zg.roa
File: Z88-O1THuqfACTtrj0uuwImQ2Zg.roa (raw, json)
Hash identifier: 4tuoOIU+piFFQxaEkp9DF5Ir+XpvV1nYJHybbIIzs2s=
Subject key identifier: 67:CF:3E:3B:54:C7:BA:A7:C0:09:3B:6B:8F:4B:AE:C0:89:90:D9:98
Certificate issuer: /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial: 0188B48F322864059E4F503517EBEF5DECBA
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/Z88-O1THuqfACTtrj0uuwImQ2Zg.roa
Signing time: Tue 13 Jun 2023 11:41:03 +0000
ROA not before: Tue 13 Jun 2023 11:41:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207023
IP address blocks: 85.255.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:8f:32:28:64:05:9e:4f:50:35:17:eb:ef:5d:ec:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
Validity
Not Before: Jun 13 11:41:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67cf3e3b54c7baa7c0093b6b8f4baec08990d998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:1a:b4:6d:95:c5:43:ea:5c:bd:06:0d:f8:
a4:42:04:f6:c7:fd:79:f6:36:e5:36:9a:a8:1a:ab:
73:74:74:64:d1:c2:ed:a1:b9:1b:a8:f1:bf:49:8b:
3f:c6:50:40:e3:7c:67:e8:e1:ff:38:39:da:b5:a0:
a8:18:62:42:4f:fc:2e:0f:46:ce:82:f7:c8:92:16:
84:01:44:49:23:4c:91:0b:36:30:f3:24:e5:4b:9e:
50:e4:9b:95:4f:19:36:55:a3:f8:d4:89:d8:bf:cf:
64:35:f3:28:0e:55:d3:b1:79:72:c4:76:ca:0d:0a:
24:ac:0d:3f:d6:94:c6:55:00:b4:ac:88:a7:5f:2d:
57:fa:85:ee:c3:a6:53:37:7e:22:0e:d0:3f:99:65:
0b:78:3b:b0:3c:f7:b5:57:ff:2c:e3:1a:a6:48:96:
a1:22:f9:0a:3e:dd:80:04:3c:6c:22:8a:00:dc:bb:
7e:3e:bc:97:c2:c6:ec:dc:ec:79:83:73:c5:d9:5f:
b4:8c:b7:9b:66:0e:d3:da:39:cc:cd:f2:f2:7e:cc:
a1:cb:95:83:28:e1:46:f2:cd:78:c7:40:94:84:e6:
4b:7c:c7:7e:33:44:92:04:39:e7:64:88:bf:8a:fa:
0a:0e:94:f8:f0:00:db:53:2a:72:74:37:39:90:84:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:3E:3B:54:C7:BA:A7:C0:09:3B:6B:8F:4B:AE:C0:89:90:D9:98
X509v3 Authority Key Identifier:
keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/Z88-O1THuqfACTtrj0uuwImQ2Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.112.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:91:63:0a:28:5d:ba:68:35:fa:a8:3a:67:e3:75:4e:00:57:
52:f2:4c:c5:16:bb:38:58:dc:71:d5:db:72:49:55:b8:f8:1c:
7a:83:76:c3:88:07:37:9b:f3:71:df:5b:4c:cd:4d:2c:cb:c8:
be:e5:77:5a:83:7e:cc:d6:33:cb:78:dd:6a:2a:5d:83:6d:aa:
11:da:e6:fb:08:94:58:a2:04:21:0d:72:44:36:53:2e:33:ce:
95:c6:95:ee:67:39:cd:bf:40:f8:8b:c5:36:fa:f0:16:82:e9:
d4:7e:b1:e1:de:10:6a:fe:fc:7a:03:bd:7d:42:f9:82:0f:af:
ef:9f:79:7f:46:1b:8d:f7:39:97:e1:95:f0:97:2b:bd:5d:c8:
ec:40:93:82:4d:33:63:cb:b9:9a:a5:a1:4b:3d:5c:50:8d:0e:
1b:a0:9a:ee:be:6a:e6:77:c1:43:d8:ed:1a:c2:ad:d7:c9:52:
31:78:10:bc:54:d1:52:09:6a:68:bf:6a:c2:c6:74:ec:0c:e9:
c8:59:56:3e:ef:20:96:b8:e5:8d:64:32:90:46:41:9c:04:e8:
bc:d3:7b:91:93:dd:6b:a8:76:9e:fe:63:bb:33:0b:d7:1e:ec:
86:74:cb:30:36:f8:25:3f:52:48:93:8f:3b:24:b5:5a:d6:e1:
ad:75:8b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:46 2024 by rpki-client on console-ams.rpki-client.org