Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/zfJtLZrkmFlszlP1zwXfybnw-1Y.roa
File: zfJtLZrkmFlszlP1zwXfybnw-1Y.roa (raw, json)
Hash identifier: xroz9iGh3ATfOOnXmTr2JCMhyyUZvUarAz3vqIzCpjQ=
Subject key identifier: CD:F2:6D:2D:9A:E4:98:59:6C:CE:53:F5:CF:05:DF:C9:B9:F0:FB:56
Certificate issuer: /CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Certificate serial: 018387F909E98801C3E5A794441643DBA795
Authority key identifier: A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/zfJtLZrkmFlszlP1zwXfybnw-1Y.roa
Signing time: Thu 29 Sep 2022 06:39:48 +0000
ROA not before: Thu 29 Sep 2022 06:39:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33915
IP address blocks: 185.94.92.0/22 maxlen: 22
80.85.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:87:f9:09:e9:88:01:c3:e5:a7:94:44:16:43:db:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Validity
Not Before: Sep 29 06:39:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdf26d2d9ae498596cce53f5cf05dfc9b9f0fb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:fb:53:52:f0:5f:64:98:e7:b6:ca:48:4c:
3f:eb:02:a1:e0:fe:33:fd:e6:05:1d:bf:9c:3a:97:
e2:21:d0:3f:17:8a:56:19:88:0a:c3:fb:80:2a:6c:
fd:2e:a0:a4:63:c8:24:f4:37:b7:02:bf:01:cf:76:
f1:d3:b2:26:4d:b0:71:0f:d3:e9:f7:81:8d:d8:38:
c8:e7:2e:12:a1:2c:e0:40:7e:95:8e:32:51:61:5e:
ee:22:c4:00:68:fe:0f:c2:84:2a:59:2f:65:7a:58:
94:d6:6b:e1:ff:43:bd:fa:20:da:ad:ae:1e:29:76:
ab:cf:20:a2:8d:4d:2e:de:aa:ea:30:a3:08:fb:f6:
69:9e:d0:51:f2:74:1c:67:7e:4b:c3:a8:5c:d6:55:
48:30:af:0b:d6:01:14:1f:46:c0:e4:68:bd:7c:45:
a9:4d:b8:4f:3a:b5:64:fc:24:a9:3e:32:a4:b8:2e:
35:12:d8:a2:06:13:6c:4b:55:4a:46:c2:07:89:9d:
e0:d9:07:75:5d:fa:57:68:3a:98:24:7b:87:a8:85:
69:d6:d5:20:89:98:a2:f5:a4:19:24:66:61:ad:b0:
5e:18:67:9f:e6:8a:2b:7b:6e:c5:de:dd:d9:17:44:
df:43:4e:c8:17:01:a9:b9:2a:11:03:85:4e:c2:68:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F2:6D:2D:9A:E4:98:59:6C:CE:53:F5:CF:05:DF:C9:B9:F0:FB:56
X509v3 Authority Key Identifier:
keyid:A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/zfJtLZrkmFlszlP1zwXfybnw-1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/o4uxKS902ZCtNZTChcTvCBHJ440.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.32.0/20
185.94.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:dd:88:3f:80:e7:46:a0:a8:b6:09:02:49:e4:51:5f:bf:22:
de:c9:ba:cb:43:09:b7:5a:78:24:7d:91:ea:2d:c4:5f:f5:83:
5f:11:27:16:56:d2:8d:06:69:6c:25:5e:0d:f0:c3:87:03:92:
53:cb:ca:67:9a:5e:d5:d5:ee:3d:0f:19:88:8e:23:d8:81:fc:
03:d8:ec:47:ee:67:8e:2f:e1:4c:68:f1:52:29:70:f8:dd:d0:
05:1e:1e:94:2b:bc:ba:fd:ad:7e:8d:0f:30:45:0e:79:78:bb:
c4:c9:6c:6d:51:63:d6:16:d9:85:5d:6d:f8:1b:50:ca:91:0b:
1a:a0:de:3b:37:2c:e4:f1:d3:f0:0a:cd:47:b8:06:c6:9d:ad:
1e:6a:96:c9:15:b6:d5:a0:3a:d2:97:fe:7e:64:a4:76:52:19:
9c:17:27:ae:56:68:4f:e9:d0:7e:f8:a7:73:95:cb:ff:da:51:
2f:97:66:bc:bb:f4:6b:76:13:43:d0:6d:9f:07:72:cc:4e:bd:
e6:27:5e:f4:0e:f9:bf:0f:33:6c:82:f4:f4:a4:be:99:ab:0a:
de:08:62:cd:15:91:d0:22:a5:cc:6f:7c:10:60:1d:7d:11:33:
e8:2f:03:71:3c:80:bf:f5:6c:29:79:ac:cb:84:e3:c0:28:45:
01:4d:75:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOH+QnpiAHD5aeURBZD26eVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOGJiMTI5MmY3NGQ5OTBhZDM1OTRjMjg1YzRlZjA4MTFj
OWUzOGQwHhcNMjIwOTI5MDYzOTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGYyNmQyZDlhZTQ5ODU5NmNjZTUzZjVjZjA1ZGZjOWI5ZjBmYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymv7U1LwX2SY57bKSEw/6wKh4P4z
/eYFHb+cOpfiIdA/F4pWGYgKw/uAKmz9LqCkY8gk9De3Ar8Bz3bx07ImTbBxD9Pp
94GN2DjI5y4SoSzgQH6VjjJRYV7uIsQAaP4PwoQqWS9leliU1mvh/0O9+iDara4e
KXarzyCijU0u3qrqMKMI+/ZpntBR8nQcZ35Lw6hc1lVIMK8L1gEUH0bA5Gi9fEWp
TbhPOrVk/CSpPjKkuC41EtiiBhNsS1VKRsIHiZ3g2Qd1XfpXaDqYJHuHqIVp1tUg
iZii9aQZJGZhrbBeGGef5oore27F3t3ZF0TfQ07IFwGpuSoRA4VOwmjW6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM3ybS2a5JhZbM5T9c8F38m58PtWMB8GA1UdIwQY
MBaAFKOLsSkvdNmQrTWUwoXE7wgRyeONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzR1eEtTOTAyWkN0TlpUQ2hjVHZDQkhKNDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xNjY2NzMtMGYwMy00MDFkLWE3NDUt
NGQ1ZGYzMjMwYzAxLzEvemZKdExacmttRmxzemxQMXp3WGZ5Ym53LTFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xNjY2NzMtMGYwMy00MDFkLWE3NDUtNGQ1ZGYzMjMwYzAx
LzEvbzR1eEtTOTAyWkN0TlpUQ2hjVHZDQkhKNDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUFUgAwQC
uV5cMA0GCSqGSIb3DQEBCwUAA4IBAQCd3Yg/gOdGoKi2CQJJ5FFfvyLeybrLQwm3
WngkfZHqLcRf9YNfEScWVtKNBmlsJV4N8MOHA5JTy8pnml7V1e49DxmIjiPYgfwD
2OxH7meOL+FMaPFSKXD43dAFHh6UK7y6/a1+jQ8wRQ55eLvEyWxtUWPWFtmFXW34
G1DKkQsaoN47Nyzk8dPwCs1HuAbGna0eapbJFbbVoDrSl/5+ZKR2UhmcFyeuVmhP
6dB++Kdzlcv/2lEvl2a8u/RrdhND0G2fB3LMTr3mJ170Dvm/DzNsgvT0pL6Zqwre
CGLNFZHQIqXMb3wQYB19ETPoLwNxPIC/9WwpeazLhOPAKEUBTXVP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org