Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Z-eSs_Wl4n8sSKsxUFG-ZSMD2Hk.roa
File: Z-eSs_Wl4n8sSKsxUFG-ZSMD2Hk.roa (raw, json)
Hash identifier: /Wwj1JyGeS+DLSAqZZ/G0ZqeqkbWx4XphEBizk1j7JQ=
Subject key identifier: 67:E7:92:B3:F5:A5:E2:7F:2C:48:AB:31:50:51:BE:65:23:03:D8:79
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5276B72C18FC3EF34F7996FDB2112
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Z-eSs_Wl4n8sSKsxUFG-ZSMD2Hk.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49169
IP address blocks: 86.105.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:27:6b:72:c1:8f:c3:ef:34:f7:99:6f:db:21:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67e792b3f5a5e27f2c48ab315051be652303d879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:24:e7:86:ff:9f:c5:0c:ec:82:57:5b:3e:85:
09:7a:8d:b6:6e:e0:97:a2:5d:b4:1b:a3:e4:89:00:
ff:9a:f5:56:ab:bc:af:74:0f:87:15:93:bb:76:b9:
fd:57:53:cb:01:f4:0e:c9:2c:dc:66:6b:33:15:80:
52:99:ee:6b:3b:1b:b3:67:06:5b:0b:dc:72:98:82:
a5:06:39:e0:e5:57:2f:95:7e:54:ee:1b:86:50:96:
5a:2b:d9:c4:b3:a1:3d:41:23:ad:17:77:27:0b:b2:
5b:c3:7e:eb:11:a4:e7:16:bc:bd:7c:2c:83:a0:58:
d7:4c:0f:04:6b:71:44:38:d9:c2:2e:b8:d6:ea:64:
ac:42:a0:b3:0a:44:0f:9f:86:66:d5:cc:1e:bd:1e:
e5:47:00:0f:bf:e5:0a:a2:da:7a:a2:37:fc:a6:4b:
c2:d6:74:08:26:a6:98:88:58:9b:2e:1c:aa:87:a4:
3f:ae:74:45:fa:c0:42:e9:c8:8e:a7:b4:e9:12:aa:
d0:ef:22:cb:ea:9a:df:38:d6:ce:33:1e:f9:d7:bd:
cf:bb:f9:22:6a:09:e5:45:fa:c3:42:ce:df:d3:1a:
b8:4c:78:22:de:97:ba:69:8c:5e:e0:d6:fe:4e:b8:
9a:12:c1:4e:7b:08:6c:f4:5d:f4:92:39:9d:7c:1b:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:92:B3:F5:A5:E2:7F:2C:48:AB:31:50:51:BE:65:23:03:D8:79
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Z-eSs_Wl4n8sSKsxUFG-ZSMD2Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.154.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:3f:de:12:09:02:3f:ff:79:ba:3b:43:50:d1:9e:99:d9:5b:
98:7e:2e:c4:27:ac:0d:f6:51:f2:82:4c:e4:5c:03:12:37:57:
53:90:94:32:c6:fc:ce:e0:4c:ff:08:de:1c:5c:8f:db:83:46:
63:3b:f4:dd:40:cd:f9:43:6f:12:59:dc:92:49:a4:2b:82:57:
2d:88:63:3a:ce:ec:f8:16:0b:9e:2e:0a:e5:fc:ff:40:8a:d8:
b8:d6:da:81:34:48:77:19:8c:bf:46:db:77:44:df:2c:91:0f:
ee:e4:6e:49:f0:58:42:4d:36:f7:a3:14:c4:88:0e:30:52:b0:
e3:08:b6:8e:bc:b6:30:da:fa:c6:55:4c:b1:da:ef:dd:a5:ad:
2e:b2:de:11:82:17:cc:9c:5c:ff:ed:ec:48:ef:ac:ae:1b:bf:
cc:5e:84:8a:6a:5a:1a:e1:07:97:3f:4a:44:39:ef:ed:34:39:
11:d4:c7:c6:40:cf:85:f9:3a:38:dd:55:60:a8:7c:f7:34:fc:
80:38:4e:6e:b7:bd:8f:94:36:d2:a5:7b:7e:35:7d:25:34:59:
e8:f3:ed:03:c4:d7:f9:95:fe:f5:17:b0:c9:45:9c:94:a5:ed:
8e:5d:97:da:83:ba:22:54:45:06:6c:1e:63:bc:38:16:3d:99:
bf:0f:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:21 2025 by rpki-client