Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/ZOsbUuIY1vXH5BK7D7X0U4WdT_0.roa
File: ZOsbUuIY1vXH5BK7D7X0U4WdT_0.roa (raw, json)
Hash identifier: k2867ZqgqR/gfNPizdRNWV/keieF6tM60LRySTE5RYk=
Subject key identifier: 64:EB:1B:52:E2:18:D6:F5:C7:E4:12:BB:0F:B5:F4:53:85:9D:4F:FD
Certificate issuer: /CN=d595f8a92460a3c37655b63c0753c7eadeffe9e3
Certificate serial: 01856EEFE553830605E967ECA01EDF993B41
Authority key identifier: D5:95:F8:A9:24:60:A3:C3:76:55:B6:3C:07:53:C7:EA:DE:FF:E9:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/ZOsbUuIY1vXH5BK7D7X0U4WdT_0.roa
Signing time: Sun 01 Jan 2023 20:04:53 +0000
ROA not before: Sun 01 Jan 2023 20:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.104.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:e5:53:83:06:05:e9:67:ec:a0:1e:df:99:3b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d595f8a92460a3c37655b63c0753c7eadeffe9e3
Validity
Not Before: Jan 1 20:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64eb1b52e218d6f5c7e412bb0fb5f453859d4ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:05:49:8e:0f:50:23:98:09:5f:0d:a9:be:
3d:e2:80:41:87:49:79:f3:60:75:ef:a1:21:3b:dc:
44:ce:44:56:79:21:f2:a5:27:6b:6f:8b:93:d4:4c:
b8:b7:f5:4a:02:39:d4:c3:47:d5:a8:59:83:75:fe:
d2:28:4b:69:93:b2:c4:5a:35:dd:42:aa:09:48:af:
1b:b4:c1:cd:82:be:18:53:4d:0d:06:25:ea:c2:0f:
86:2b:dc:e7:c6:a7:94:56:e3:ad:d3:9c:f2:82:fc:
e8:ea:1f:04:c0:0d:e2:55:3f:4c:ed:eb:74:94:36:
80:a1:d8:a8:11:5d:d2:49:b3:2a:87:6d:4b:b1:ea:
75:10:d7:98:bb:d8:c8:f8:d5:e5:15:06:00:05:72:
8b:c5:b3:16:21:33:51:ac:b1:5b:d0:15:49:02:7b:
72:8c:d4:b9:0f:46:2d:7b:b0:b8:71:ef:15:b3:03:
5a:44:ab:d2:e0:37:d7:6d:47:94:1c:1a:c6:7e:5b:
56:f7:2d:79:a6:e7:83:2b:21:90:9d:a7:44:25:f7:
73:f4:78:75:52:09:a7:58:f3:44:c6:a4:e4:e5:68:
81:54:7f:00:6a:3d:e2:d4:25:93:eb:11:ec:ee:85:
d4:f4:8e:90:09:09:a9:b6:b2:bc:d3:98:ac:38:81:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EB:1B:52:E2:18:D6:F5:C7:E4:12:BB:0F:B5:F4:53:85:9D:4F:FD
X509v3 Authority Key Identifier:
keyid:D5:95:F8:A9:24:60:A3:C3:76:55:B6:3C:07:53:C7:EA:DE:FF:E9:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/ZOsbUuIY1vXH5BK7D7X0U4WdT_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.183.0/24
Signature Algorithm: sha256WithRSAEncryption
51:05:a9:b6:3e:82:0a:0e:e1:b6:b8:5f:5f:de:16:ba:db:67:
c8:bc:57:7d:76:e1:cc:53:40:ab:9e:c5:69:9c:91:13:cf:b8:
bb:53:c3:66:45:83:47:52:b6:38:af:21:1a:41:94:80:16:a1:
03:50:ce:a5:bb:6b:c0:88:39:58:80:12:2b:89:c4:cb:e4:ff:
45:84:af:61:83:f9:8a:c6:9c:a4:27:3e:27:f0:85:3a:01:63:
06:bc:7d:49:f1:86:99:cc:bb:18:45:c1:42:0c:3c:4c:86:7b:
1d:0d:59:e9:1c:80:50:b9:e1:e5:d3:f5:92:19:26:57:cb:ce:
a7:42:5e:61:7d:66:ae:d2:fc:0a:29:0f:03:f6:93:5e:8b:8c:
33:08:17:6c:49:56:4a:4a:bb:22:ee:72:1a:9b:51:3b:06:58:
89:3a:54:f8:8e:1a:e0:75:ae:07:d9:77:5d:e6:72:48:a1:7e:
d9:b3:4a:56:15:2f:e6:48:a7:12:03:fd:18:a9:c6:99:58:23:
2d:24:8c:a8:e7:0b:c6:d7:85:d5:ba:14:90:29:4f:e8:1a:cc:
8f:f2:93:4e:fb:58:fa:7b:99:e2:44:3b:a8:2b:d5:f0:00:df:
7b:a0:38:3a:f9:56:74:62:f2:ea:f6:86:6b:27:37:91:59:a5:
49:b9:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:07 2024 by rpki-client on console-ams.rpki-client.org