Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/ZHB3RUU7AUQcjCsawGjd_aNsef0.roa
File: ZHB3RUU7AUQcjCsawGjd_aNsef0.roa (raw, json)
Hash identifier: ZmxwedcSZXRPtT8k7k8J2FaFIktkkyq/ytMiFGOvj8U=
Subject key identifier: 64:70:77:45:45:3B:01:44:1C:8C:2B:1A:C0:68:DD:FD:A3:6C:79:FD
Certificate issuer: /CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Certificate serial: 02B992C1
Authority key identifier: 31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/ZHB3RUU7AUQcjCsawGjd_aNsef0.roa
Signing time: Sat 01 Jan 2022 05:54:44 +0000
ROA not before: Sat 01 Jan 2022 05:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44016
IP address blocks: 212.115.104.0/22 maxlen: 24
193.23.60.0/24 maxlen: 24
2a0f:75c0:1::/48 maxlen: 48
2a09:8400::/29 maxlen: 29
2a0f:75c0:4::/48 maxlen: 48
2a0f:75c0:2::/48 maxlen: 48
2a0f:75c0:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45716161 (0x2b992c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Validity
Not Before: Jan 1 05:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64707745453b01441c8c2b1ac068ddfda36c79fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:b5:b7:09:f2:f9:f7:dd:d0:ef:77:b7:03:
bc:c1:f1:32:45:d5:f0:f0:e3:d9:fa:c6:5f:97:c8:
5f:94:1a:7a:48:e1:3a:52:bb:9c:6f:cf:51:f7:10:
04:04:60:43:9d:72:ca:86:a5:c7:80:0b:bd:19:cf:
81:33:ce:de:20:32:a7:b8:bd:ac:e9:c6:c3:ce:17:
18:95:97:79:aa:32:fa:e6:11:a7:a8:fd:91:53:d9:
90:4f:36:65:03:97:16:a1:ea:87:67:da:2c:df:4d:
84:4e:e4:7f:6d:4d:6f:de:47:57:4b:6d:b3:6d:b1:
99:e1:c2:5a:ef:6b:5f:03:8a:1f:cb:23:db:f2:fe:
56:c6:18:fb:4a:0f:0d:5f:c0:e8:3f:2d:0f:e6:c4:
b2:a7:23:45:31:81:c9:17:a6:4a:bb:f0:4e:66:11:
90:04:97:6f:9c:bd:86:82:c5:00:d7:4c:4e:b6:19:
26:e1:63:f9:60:c1:3c:56:27:e7:7e:0f:16:cc:4e:
cd:5c:c5:e9:20:d6:90:cf:e3:7f:16:c0:0e:d4:d9:
67:4d:86:96:e3:f9:27:57:94:8a:93:64:11:8e:0e:
5b:33:f6:7c:af:38:68:e5:3b:c3:27:f2:c7:ff:7b:
72:e6:55:9d:56:a5:b5:3b:0e:db:0f:f0:e7:db:f5:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:70:77:45:45:3B:01:44:1C:8C:2B:1A:C0:68:DD:FD:A3:6C:79:FD
X509v3 Authority Key Identifier:
keyid:31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/ZHB3RUU7AUQcjCsawGjd_aNsef0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/MYvRHaD6nJSeLkqHfF2U4U_9fbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.60.0/24
212.115.104.0/22
IPv6:
2a09:8400::/29
2a0f:75c0:1::-2a0f:75c0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:d3:99:90:ca:5e:73:ad:37:6f:0e:0a:6d:38:93:42:ff:f7:
52:6c:24:4d:41:6b:b5:60:9d:cb:cd:de:d0:8a:89:d4:94:92:
1b:42:26:ff:39:71:b1:e6:09:5c:3f:0e:a1:85:35:74:06:a0:
58:5d:74:f0:64:5a:d5:5e:ba:fd:af:f6:17:6f:59:98:80:18:
18:04:cb:97:09:90:98:b1:c1:d4:83:a0:65:1e:ee:cb:8f:7e:
f6:ad:55:dd:17:6f:f7:47:6a:8f:f6:30:e1:23:44:56:68:79:
4b:c2:27:8b:0a:3f:d7:2f:d6:77:83:85:20:6d:bd:52:dd:55:
3f:15:5f:1f:bb:52:9a:a3:bf:d4:b7:71:9e:20:8c:3c:45:2a:
64:ec:21:e3:25:64:83:72:91:26:1f:42:ef:72:d5:cc:76:f4:
16:00:0d:d6:8b:a5:2c:b2:08:87:21:94:f0:ff:9d:8c:4c:25:
bd:f6:c0:d0:0c:71:77:6c:ec:5e:fe:91:42:be:70:d0:9c:9b:
a3:3e:24:0a:2a:41:e9:b1:cb:3f:65:6a:ee:31:ad:1f:2c:11:
51:77:a2:f1:c1:d9:04:6b:63:e6:a0:6d:71:8e:b0:af:e1:a3:
eb:d9:46:1c:d3:91:e2:ab:49:af:3c:7d:17:6c:92:91:7b:c3:
a8:10:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:09 2024 by rpki-client on console-ams.rpki-client.org