Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/zs9vbqIcJagkmpF2jHp0a2hAgTU.roa
File: zs9vbqIcJagkmpF2jHp0a2hAgTU.roa (raw, json)
Hash identifier: 11j8wszFA/wRqG3aiO6lFwHU3sALjY9tNm/bDpRU0lw=
Subject key identifier: CE:CF:6F:6E:A2:1C:25:A8:24:9A:91:76:8C:7A:74:6B:68:40:81:35
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 033909CD
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/zs9vbqIcJagkmpF2jHp0a2hAgTU.roa
Signing time: Sat 01 Jan 2022 05:03:17 +0000
ROA not before: Sat 01 Jan 2022 05:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 185.213.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54069709 (0x33909cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 1 05:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cecf6f6ea21c25a8249a91768c7a746b68408135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:51:3b:26:a7:f4:42:a6:ea:b4:45:84:7c:
8f:09:d0:78:54:b6:97:02:8a:74:a6:1a:d0:77:c3:
ed:77:2c:1e:8c:11:ea:f3:89:79:55:bc:4c:0d:0e:
f9:04:6b:8e:d5:6f:b7:50:52:23:c0:b6:74:80:e9:
8a:59:3d:c5:0d:d2:1f:97:1d:bc:60:ac:7f:2a:ba:
b7:ac:9f:bb:8c:a8:11:f2:c1:27:0a:57:8b:3d:f5:
b8:e0:a6:8c:8c:6f:bb:56:f8:81:23:1d:cf:fd:dc:
c6:d0:26:93:47:87:86:3b:ff:b4:a8:4e:a2:aa:72:
37:56:03:7b:ae:13:de:7f:15:ac:47:49:b2:58:2f:
c7:9c:55:78:ca:6f:a4:ed:4f:87:5f:76:c5:2f:80:
3e:6d:a2:03:b7:75:a2:d4:07:c8:b3:b1:ab:00:bb:
cb:08:bd:f1:48:34:8c:a1:c4:c3:b8:ea:7b:0d:0c:
54:6a:a0:17:a4:5d:ae:f2:5e:33:2a:69:82:ae:03:
56:50:01:96:38:e4:2c:25:0b:1c:c4:26:c3:f5:b9:
2c:4f:72:a4:bd:ad:ac:5d:95:fe:04:b0:a6:bf:d0:
3d:40:e8:79:e0:e8:d2:c6:ad:d4:58:f6:af:ea:49:
6f:44:54:92:90:7f:5b:56:c0:8f:0a:2f:9c:58:dd:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:6F:6E:A2:1C:25:A8:24:9A:91:76:8C:7A:74:6B:68:40:81:35
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/zs9vbqIcJagkmpF2jHp0a2hAgTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.240.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:cb:35:1a:83:f5:ea:eb:ba:e9:44:61:5d:84:88:af:9d:cc:
f0:e9:7c:e4:1e:7d:14:0b:7b:22:3e:e3:ae:b4:48:c6:21:f9:
17:bd:26:fb:72:59:5c:e5:60:c8:7c:08:5b:2a:71:ad:57:68:
17:85:c8:46:ea:30:e1:87:8a:25:ba:1b:c8:68:8e:79:15:e8:
5f:49:1c:87:3d:fc:e0:fd:c7:ce:ef:71:1f:4e:75:ec:f6:bf:
48:fe:06:c9:2f:71:02:cb:f3:9f:f9:96:2e:42:71:c2:d5:fc:
0c:24:e3:8d:57:fe:c9:7a:0b:0b:b2:0c:47:9b:b9:1d:de:3c:
38:59:f7:32:22:ea:08:f6:de:98:ab:b9:06:61:0b:a3:41:cf:
73:fb:87:68:22:fd:12:8a:09:f1:25:0e:35:fb:51:3f:08:7e:
05:ca:71:82:75:0f:92:57:79:ef:6a:b8:a7:37:88:52:1f:38:
42:ef:6b:78:52:f2:1f:9d:95:66:cc:fe:32:c9:4d:e0:d4:44:
6e:92:24:73:98:6c:cc:db:e6:54:6f:bf:78:5e:0d:26:36:b4:
90:bc:7a:5d:0f:27:d5:11:14:52:c8:bb:b5:74:55:e7:e6:f4:
88:4f:21:12:72:48:df:fe:66:91:52:5b:15:a7:2b:cf:d5:f1:
62:67:0e:c8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAzkJzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDg1Mzk3ZjI2YTA0NGNhZWY2YTZiNjY5Mjg3MzMxYWE0ZDY4NjQ1MB4XDTIyMDEw
MTA1MDMxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2VjZjZmNmVhMjFj
MjVhODI0OWE5MTc2OGM3YTc0NmI2ODQwODEzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKubUTsmp/RCpuq0RYR8jwnQeFS2lwKKdKYa0HfD7XcsHowR
6vOJeVW8TA0O+QRrjtVvt1BSI8C2dIDpilk9xQ3SH5cdvGCsfyq6t6yfu4yoEfLB
JwpXiz31uOCmjIxvu1b4gSMdz/3cxtAmk0eHhjv/tKhOoqpyN1YDe64T3n8VrEdJ
slgvx5xVeMpvpO1Ph192xS+APm2iA7d1otQHyLOxqwC7ywi98Ug0jKHEw7jqew0M
VGqgF6RdrvJeMyppgq4DVlABljjkLCULHMQmw/W5LE9ypL2trF2V/gSwpr/QPUDo
eeDo0sat1Fj2r+pJb0RUkpB/W1bAjwovnFjdu5ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOz29uohwlqCSakXaMenRraECBNTAfBgNVHSMEGDAWgBRghTl/JqBEyu9q
a2aShzMapNaGRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lJVTVmeWFnUk1ydmFtdG1rb2N6R3FUV2hrVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvMTEyNWEyLTQ0MzItNDgzZi1hMDBiLTYxNmQ5N2E3N2JkNi8x
L3pzOXZicUljSmFna21wRjJqSHAwYTJoQWdUVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
MTEyNWEyLTQ0MzItNDgzZi1hMDBiLTYxNmQ5N2E3N2JkNi8xL1lJVTVmeWFnUk1y
dmFtdG1rb2N6R3FUV2hrVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnV8DANBgkqhkiG9w0BAQsFAAOC
AQEALcs1GoP16uu66URhXYSIr53M8Ol85B59FAt7Ij7jrrRIxiH5F70m+3JZXOVg
yHwIWypxrVdoF4XIRuow4YeKJbobyGiOeRXoX0kchz384P3Hzu9xH0517Pa/SP4G
yS9xAsvzn/mWLkJxwtX8DCTjjVf+yXoLC7IMR5u5Hd48OFn3MiLqCPbemKu5BmEL
o0HPc/uHaCL9EooJ8SUONftRPwh+BcpxgnUPkld572q4pzeIUh84Qu9reFLyH52V
Zsz+MslN4NREbpIkc5hszNvmVG+/eF4NJja0kLx6XQ8n1REUUsi7tXRV5+b0iE8h
EnJI3/5mkVJbFacrz9XxYmcOyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:20 2024 by rpki-client on console-fra.rpki-client.org