Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/Zql-MhuGanRS3rR4Qq-Ys0rhhoQ.roa
File: Zql-MhuGanRS3rR4Qq-Ys0rhhoQ.roa (raw, json)
Hash identifier: uQqVQ7JKdytzV4TS6QzXMKtdTrZfBvrkg1IuXlQ0EsQ=
Subject key identifier: 66:A9:7E:32:1B:86:6A:74:52:DE:B4:78:42:AF:98:B3:4A:E1:86:84
Certificate issuer: /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial: 2AB15BF4
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/Zql-MhuGanRS3rR4Qq-Ys0rhhoQ.roa
Signing time: Sat 01 Jan 2022 09:03:32 +0000
ROA not before: Sat 01 Jan 2022 09:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212566
IP address blocks: 89.104.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716266484 (0x2ab15bf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8912e418225da95d6a21302407923ff94549572b
Validity
Not Before: Jan 1 09:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66a97e321b866a7452deb47842af98b34ae18684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:a5:8e:79:c6:9c:6f:69:bf:1e:2e:3b:d8:
3c:56:2f:1a:fa:b6:e9:67:1c:bd:73:bc:5a:db:85:
e7:f2:82:92:02:90:ff:3f:44:c8:98:e0:88:6c:d4:
88:78:2c:da:2b:fa:4b:3e:e8:2f:46:62:1e:7e:94:
be:a7:e9:60:2b:ae:b6:af:2a:3f:a0:26:69:27:20:
be:f1:4d:4e:33:ee:7d:76:79:9e:b1:d5:8f:dd:e5:
2e:74:32:68:94:90:9c:98:5b:c0:c4:f9:e1:92:b6:
23:72:d7:ef:ad:29:d2:fb:f3:fe:d5:69:5b:fc:8d:
52:fd:cd:ba:60:46:68:a2:69:61:6e:e8:9c:54:bb:
00:89:5a:8c:6e:da:b3:d5:75:5b:97:d3:0f:91:d4:
d2:28:70:8b:32:d3:6c:6a:e9:81:0f:a0:3f:d5:88:
c6:eb:d0:40:90:59:e7:1e:d0:30:2b:60:a9:de:9a:
a2:4b:30:6f:52:1f:d4:27:d2:c2:39:f4:49:31:d7:
41:40:9b:65:0b:e6:5c:59:8e:59:46:6e:bd:0a:a5:
1c:b1:97:12:59:56:39:e4:ca:d1:66:04:e0:c7:ce:
db:ff:86:fe:09:06:66:fb:e0:c6:c3:3b:63:bf:42:
a0:8f:56:fb:7b:37:88:8e:6e:3a:7e:30:30:5a:98:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A9:7E:32:1B:86:6A:74:52:DE:B4:78:42:AF:98:B3:4A:E1:86:84
X509v3 Authority Key Identifier:
keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/Zql-MhuGanRS3rR4Qq-Ys0rhhoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.115.0/24
Signature Algorithm: sha256WithRSAEncryption
37:83:94:57:45:af:f1:7c:39:7d:e5:22:69:36:29:73:b8:3e:
e3:32:43:ae:30:10:b0:ca:d1:e9:0b:c7:99:9b:2b:34:26:15:
fc:cb:14:02:5d:06:c3:f7:2e:52:b6:1a:aa:4c:7d:be:ce:04:
9a:14:36:86:13:6a:2a:d4:f4:9c:d6:94:0a:3a:3f:43:2f:7b:
c2:95:4d:02:49:bb:9c:00:75:be:57:c3:a8:07:19:b2:37:42:
62:18:28:86:f2:74:3f:8f:7b:2f:97:9e:e0:11:5a:d1:b4:66:
45:00:d9:fc:1a:0b:e4:6a:e0:43:cc:df:5a:40:8c:68:51:4b:
2d:7a:ac:d0:ed:7e:9c:1a:8a:44:96:cf:ac:da:65:7c:de:3a:
c2:9d:cd:5c:14:e9:f8:0f:70:6e:c1:78:90:9d:66:ca:87:05:
9b:9c:0a:2f:ab:62:20:63:5e:44:c6:a3:5a:ed:f4:dd:24:98:
86:97:8d:1c:23:3a:0b:b5:98:23:49:3c:21:42:59:47:81:ae:
3c:80:77:3b:67:94:93:03:2e:96:ce:70:95:c7:c8:fa:2b:bd:
d1:5f:06:64:7d:5a:0a:e0:20:3b:1c:9e:10:d8:97:92:ac:7e:
63:15:63:67:fd:4a:1a:ba:6b:37:b5:f8:9f:59:f3:ad:bd:89:
d3:7c:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-fra.rpki-client.org