Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4f50cc-448f-454d-b9f5-630051c59582/1/Zzg27zK_MFY1D-xX-mSLzsXd_t8.roa
File: Zzg27zK_MFY1D-xX-mSLzsXd_t8.roa (raw, json)
Hash identifier: X6rAuZ3OK8Akv+1JwI81zwwXcfKx3z8b+l9oSCcwkpQ=
Subject key identifier: 67:38:36:EF:32:BF:30:56:35:0F:EC:57:FA:64:8B:CE:C5:DD:FE:DF
Certificate issuer: /CN=5d51ede479fe47e3ce823564353553a69c3ffe4c
Certificate serial: 0A09A234
Authority key identifier: 5D:51:ED:E4:79:FE:47:E3:CE:82:35:64:35:35:53:A6:9C:3F:FE:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVHt5Hn-R-POgjVkNTVTppw__kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4f50cc-448f-454d-b9f5-630051c59582/1/Zzg27zK_MFY1D-xX-mSLzsXd_t8.roa
Signing time: Sat 01 Jan 2022 10:01:19 +0000
ROA not before: Sat 01 Jan 2022 10:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198610
IP address blocks: 213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.208.0/22 maxlen: 22
213.139.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168403508 (0xa09a234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d51ede479fe47e3ce823564353553a69c3ffe4c
Validity
Not Before: Jan 1 10:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=673836ef32bf3056350fec57fa648bcec5ddfedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:cb:13:f2:19:86:23:56:05:5d:fa:68:25:
39:a8:a4:46:11:bd:e6:e0:be:66:b4:17:c0:9e:89:
68:3c:f4:b0:f3:47:b5:c1:47:6f:45:83:25:21:f1:
18:bb:d0:bb:fe:7b:4d:68:c0:de:ec:e3:7a:89:32:
b0:96:a0:67:f4:75:0c:45:e1:d8:3b:45:3e:8d:8b:
96:2a:9e:5c:20:dd:84:75:54:ed:de:6a:88:b0:cb:
bd:bc:24:4b:b1:8d:ae:b8:66:cf:21:61:d4:00:e9:
95:ed:df:38:56:c8:b8:2c:95:f1:39:81:a6:c4:7e:
15:77:91:e7:b8:7f:dd:c9:21:fe:63:5d:a7:f3:c4:
8a:2e:6c:31:59:fc:e9:82:56:76:70:f1:a9:fa:f7:
03:0b:b1:35:e1:78:98:e5:c3:f3:16:72:9e:a8:52:
5e:5e:5c:0d:03:9b:3c:72:bc:9b:31:3c:e0:c4:59:
30:c6:93:3a:c8:c9:35:13:7c:e3:df:94:c2:f1:89:
46:52:fa:9c:27:ba:3f:9d:ec:36:f4:0f:2b:7b:d2:
99:b0:9f:68:08:d3:28:72:5d:7b:d7:c3:1e:65:69:
5b:7f:1c:67:f4:c3:b5:af:d0:2a:14:91:b3:ed:4b:
fb:4d:bd:3b:d1:e4:88:da:ee:89:07:56:a8:c0:3a:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:38:36:EF:32:BF:30:56:35:0F:EC:57:FA:64:8B:CE:C5:DD:FE:DF
X509v3 Authority Key Identifier:
keyid:5D:51:ED:E4:79:FE:47:E3:CE:82:35:64:35:35:53:A6:9C:3F:FE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVHt5Hn-R-POgjVkNTVTppw__kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4f50cc-448f-454d-b9f5-630051c59582/1/Zzg27zK_MFY1D-xX-mSLzsXd_t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4f50cc-448f-454d-b9f5-630051c59582/1/XVHt5Hn-R-POgjVkNTVTppw__kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.208.0/22
Signature Algorithm: sha256WithRSAEncryption
57:66:01:92:49:57:2d:18:d1:a4:fa:4d:69:39:92:a2:23:ee:
b9:71:43:3f:dd:b1:18:73:f8:05:63:29:38:31:08:ef:ed:07:
68:0a:eb:f7:1c:5c:ec:1a:93:e9:b5:8a:89:83:87:18:25:bc:
83:c3:2c:97:5f:c2:b9:6c:ae:eb:6b:da:34:27:c2:83:98:80:
f2:c7:41:2b:7a:1f:05:66:e8:5c:ee:7a:12:0c:d8:d8:53:86:
97:71:df:de:ee:df:51:f0:24:40:aa:d3:29:2b:49:12:b7:87:
44:3f:91:de:b3:a9:c2:07:8e:fb:27:e0:f3:f9:cf:5e:1d:89:
05:40:d9:89:ac:12:a1:55:e4:3a:e4:d9:f5:ec:8c:ab:c9:45:
38:86:59:e7:5b:fb:74:55:38:4b:28:06:23:8d:bf:e5:08:f2:
06:2c:b0:d7:91:63:8b:da:15:bb:b7:9c:99:59:ac:e7:23:65:
31:86:9d:09:c7:a2:01:be:6e:c1:ae:7e:1b:41:a0:70:fd:32:
eb:93:b4:ae:ea:0d:bb:8a:09:06:61:0a:2b:2f:76:19:97:a5:
49:17:00:7b:0d:21:28:da:af:01:0e:f0:f1:a5:0b:2b:e7:69:
bd:cd:25:05:fe:72:4f:f2:f4:e9:4a:3a:c1:ef:08:e3:b1:d2:
af:29:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:52 2024 by rpki-client on console-ams.rpki-client.org