Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bb9ff1-b773-4cc5-ac14-db10b3d02a7e/1/1ZstlIRlWHANZaAv6bQQ_AxOdmo.roa
File: 1ZstlIRlWHANZaAv6bQQ_AxOdmo.roa (raw, json)
Hash identifier: UxNQA6O/JD2gnIxIBo/KaK+HAe/0cQKlX+No/cuJjIw=
Subject key identifier: D5:9B:2D:94:84:65:58:70:0D:65:A0:2F:E9:B4:10:FC:0C:4E:76:6A
Certificate issuer: /CN=9f38ac45bb2af436ff740f0d01e1a7a71757b67e
Certificate serial: 20B725
Authority key identifier: 9F:38:AC:45:BB:2A:F4:36:FF:74:0F:0D:01:E1:A7:A7:17:57:B6:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzisRbsq9Db_dA8NAeGnpxdXtn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bb9ff1-b773-4cc5-ac14-db10b3d02a7e/1/1ZstlIRlWHANZaAv6bQQ_AxOdmo.roa
Signing time: Fri 03 Jun 2022 13:12:21 +0000
ROA not before: Fri 03 Jun 2022 13:12:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34354
IP address blocks: 89.221.112.0/23 maxlen: 24
89.221.114.0/23 maxlen: 24
89.221.118.0/23 maxlen: 24
85.158.72.0/21 maxlen: 24
89.221.116.0/23 maxlen: 24
89.221.124.0/23 maxlen: 24
89.221.122.0/23 maxlen: 24
89.221.120.0/23 maxlen: 24
89.221.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144037 (0x20b725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f38ac45bb2af436ff740f0d01e1a7a71757b67e
Validity
Not Before: Jun 3 13:12:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d59b2d94846558700d65a02fe9b410fc0c4e766a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:08:03:91:4b:04:84:ab:1c:09:3c:73:a4:
89:c3:9b:1b:36:df:8b:79:c4:d3:fb:a5:23:7e:8c:
fd:76:b4:17:a7:0f:2b:fe:e3:73:7a:ca:60:28:d7:
75:8f:e2:3e:19:61:c6:56:29:80:d5:b8:fe:c7:6d:
8f:3f:3a:51:30:e4:a3:c6:71:27:ea:18:61:21:e9:
e0:64:26:f7:87:75:f3:32:92:40:2c:19:50:58:f5:
ec:a7:1c:e0:25:a6:d6:77:bb:7b:af:48:ce:01:c9:
9a:4c:11:42:00:2b:88:af:1e:02:a0:54:b5:38:10:
df:91:a0:3c:f2:38:01:47:48:ea:9a:e7:fa:f6:48:
3f:34:e6:58:f0:e2:15:22:32:29:bf:73:d7:45:ea:
d7:1b:32:fd:86:a2:31:c0:4a:88:22:fc:35:30:0f:
49:09:45:a1:92:f5:83:a8:e9:6f:ca:40:0d:32:bf:
f9:2d:0f:72:d1:3f:9d:89:ee:c6:d5:a4:31:7b:e6:
15:47:fa:7c:3a:42:13:27:54:03:f7:e9:d7:6d:dc:
a3:4a:f7:1b:7c:e1:af:37:b6:ce:f2:2e:a4:8b:43:
51:01:95:8f:85:d4:bf:a4:d1:93:66:e8:1b:eb:b1:
38:6a:f9:85:14:89:1c:43:9d:4e:38:7f:5a:4a:f3:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:2D:94:84:65:58:70:0D:65:A0:2F:E9:B4:10:FC:0C:4E:76:6A
X509v3 Authority Key Identifier:
keyid:9F:38:AC:45:BB:2A:F4:36:FF:74:0F:0D:01:E1:A7:A7:17:57:B6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzisRbsq9Db_dA8NAeGnpxdXtn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bb9ff1-b773-4cc5-ac14-db10b3d02a7e/1/1ZstlIRlWHANZaAv6bQQ_AxOdmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bb9ff1-b773-4cc5-ac14-db10b3d02a7e/1/nzisRbsq9Db_dA8NAeGnpxdXtn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.72.0/21
89.221.112.0/20
Signature Algorithm: sha256WithRSAEncryption
14:bb:2e:bd:5a:67:50:2f:52:b1:fc:7a:85:7f:31:19:79:ea:
7a:56:d4:e7:c3:a1:19:af:0e:85:5d:91:f2:85:65:93:53:4d:
9c:af:f4:4e:06:33:c4:95:9b:0d:ad:1c:1b:96:86:e1:e4:13:
ca:d2:dd:e2:d8:0e:78:20:73:f6:6c:ae:2e:28:2f:a8:6c:73:
2b:60:de:06:ee:18:dc:0d:87:8d:07:72:80:71:e0:8e:04:c3:
b9:34:4a:b9:b1:33:61:b5:b9:0c:64:70:97:c3:d8:63:51:dd:
a7:c7:9f:c4:3f:5e:fa:c9:9a:27:35:c3:bd:08:2f:05:10:4c:
fd:f0:8d:e0:50:b9:74:a1:fa:9c:1a:c3:e6:ca:a1:2c:64:06:
a1:b7:c2:3c:ca:73:81:2f:26:28:70:8e:45:f3:67:0b:ae:c3:
61:94:94:26:e5:85:6d:92:0f:2c:95:e6:6e:71:05:d1:1b:e6:
7e:a3:8a:64:06:b5:98:83:f6:72:7d:13:0a:0d:5a:43:e2:28:
6f:dd:d5:3b:51:fe:6b:07:16:6d:cf:dc:f5:40:f1:f8:ce:44:
75:af:06:91:15:53:88:a2:a0:22:c6:fc:f2:eb:2f:a6:87:d7:
58:04:33:63:a7:44:7c:5d:e8:5e:48:11:47:0d:87:62:c2:c6:
43:21:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:00 2024 by rpki-client on console-fra.rpki-client.org