Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/Zij_CShPr2MNDGgitcnSCqIGJoM.roa
File: Zij_CShPr2MNDGgitcnSCqIGJoM.roa (raw, json)
Hash identifier: i8B5iNwhP5G83EFERuhmOc7TRj36banwiOvwePnk9yk=
Subject key identifier: 66:28:FF:09:28:4F:AF:63:0D:0C:68:22:B5:C9:D2:0A:A2:06:26:83
Certificate issuer: /CN=682c16254e72dc4cca375409e59e81cc39c48730
Certificate serial: 01856B9C78C003C16DE5A41B6915E194ABB6
Authority key identifier: 68:2C:16:25:4E:72:DC:4C:CA:37:54:09:E5:9E:81:CC:39:C4:87:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCwWJU5y3EzKN1QJ5Z6BzDnEhzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/Zij_CShPr2MNDGgitcnSCqIGJoM.roa
Signing time: Sun 01 Jan 2023 04:34:54 +0000
ROA not before: Sun 01 Jan 2023 04:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201971
IP address blocks: 89.248.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:78:c0:03:c1:6d:e5:a4:1b:69:15:e1:94:ab:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c16254e72dc4cca375409e59e81cc39c48730
Validity
Not Before: Jan 1 04:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6628ff09284faf630d0c6822b5c9d20aa2062683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:ba:dc:da:21:0d:59:89:f2:de:e2:c0:71:
2e:3e:ed:47:26:62:b1:83:98:85:20:e7:de:63:fc:
86:65:02:26:7b:47:1c:c8:d3:fb:d2:d7:99:f3:ee:
1b:66:b9:f3:7f:84:07:46:b0:c3:9c:de:62:02:c6:
37:21:e8:e6:a7:a2:5a:9e:cb:68:b2:80:a7:ac:95:
f4:81:ac:07:15:53:14:7b:a1:5d:e8:a7:58:7b:ad:
05:c1:65:60:a0:98:56:8d:93:3e:c4:c2:c7:a1:31:
82:d7:6b:d3:35:22:6f:c5:12:4d:de:28:7d:41:0d:
09:4d:af:c6:93:bb:cf:90:d5:ed:ef:db:cd:6f:2a:
ad:9b:13:40:fd:d2:cf:b0:dd:b6:53:b3:95:2c:80:
2f:70:d2:48:ef:7c:3a:ca:f3:9d:b8:40:5b:9a:18:
20:f3:34:95:54:da:33:40:f2:a2:3e:7f:a2:a0:d9:
9f:e2:0a:3f:f2:2f:4b:c1:ef:1c:bc:e0:2e:40:91:
4d:fa:27:b9:a7:dc:1d:96:32:64:b5:e9:ce:e2:7d:
42:23:f0:68:5d:7e:12:3e:80:af:e6:db:35:8f:00:
1d:39:cf:6c:ef:69:cf:57:ea:e8:4e:27:9f:ee:20:
73:40:d4:a1:94:dd:07:f7:a2:b2:d1:20:ca:53:53:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:28:FF:09:28:4F:AF:63:0D:0C:68:22:B5:C9:D2:0A:A2:06:26:83
X509v3 Authority Key Identifier:
keyid:68:2C:16:25:4E:72:DC:4C:CA:37:54:09:E5:9E:81:CC:39:C4:87:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCwWJU5y3EzKN1QJ5Z6BzDnEhzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/Zij_CShPr2MNDGgitcnSCqIGJoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c017c9-6712-4120-927c-c318dd8c5025/1/aCwWJU5y3EzKN1QJ5Z6BzDnEhzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:91:82:06:10:a5:3f:e6:16:a9:56:eb:27:8d:7c:a6:08:9d:
88:3f:ea:89:38:40:c8:e4:af:c4:2e:b9:0e:66:a8:0e:59:b7:
1e:41:19:22:f7:7a:6f:78:a8:7b:65:9c:04:a8:0b:0d:5f:23:
90:11:53:5b:04:ea:d1:f3:d5:cd:bb:e8:c6:fe:ac:c1:6b:c3:
5d:80:7a:fb:e3:68:da:93:a0:50:84:e1:4f:12:6b:8e:a9:e0:
48:1b:de:c2:8b:ea:b5:22:a3:47:8c:83:5c:26:e6:70:93:84:
03:e4:c4:61:28:37:63:59:44:56:0a:ed:fb:58:fd:32:9f:1e:
94:60:b4:2f:57:9f:58:38:ce:4a:7f:e2:ec:53:2d:f5:ed:47:
1f:23:a3:6f:83:50:a9:88:98:a1:9e:4e:44:d5:fa:fc:d3:df:
84:20:69:ff:1a:ce:a1:a3:2c:d5:4e:62:fe:db:53:a0:0c:6f:
c9:ef:ff:97:e5:7e:56:85:90:bc:f7:0c:05:6e:06:25:53:14:
54:a5:c1:fd:7b:cc:04:1a:4c:d3:ee:65:91:a7:42:58:2a:31:
63:57:52:9c:1d:e4:9b:ca:83:99:aa:9e:b2:10:85:9a:42:b8:
e8:71:2a:5a:65:dd:69:dc:35:6e:b2:77:64:97:eb:d0:18:d5:
b1:0e:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:00:21 2025 by rpki-client