Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/ZgHU03690QeRZQ_RUQ2px7kWDGw.roa
File: ZgHU03690QeRZQ_RUQ2px7kWDGw.roa (raw, json)
Hash identifier: s1eW8HfSXSLsGbMwctk3dusn+fGjVKREDvriEiRKFAM=
Subject key identifier: 66:01:D4:D3:7E:BD:D1:07:91:65:0F:D1:51:0D:A9:C7:B9:16:0C:6C
Certificate issuer: /CN=f86074d2b355c5761984a1d14271cf4599516eaf
Certificate serial: 083089C8
Authority key identifier: F8:60:74:D2:B3:55:C5:76:19:84:A1:D1:42:71:CF:45:99:51:6E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GB00rNVxXYZhKHRQnHPRZlRbq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/ZgHU03690QeRZQ_RUQ2px7kWDGw.roa
Signing time: Sat 01 Jan 2022 11:00:58 +0000
ROA not before: Sat 01 Jan 2022 11:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207782
IP address blocks: 45.11.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137398728 (0x83089c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86074d2b355c5761984a1d14271cf4599516eaf
Validity
Not Before: Jan 1 11:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6601d4d37ebdd10791650fd1510da9c7b9160c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:78:de:34:b1:1f:03:54:f7:f7:9e:b7:43:
dd:b7:37:8a:fd:01:2d:bb:cf:11:9c:fb:4d:94:e4:
e8:e9:a2:d6:de:68:d2:2e:98:a8:5f:38:2d:17:85:
38:8f:17:a6:de:82:fc:a3:63:51:cb:11:15:c0:26:
a7:91:3b:fa:c8:4e:0e:b0:f3:fa:32:ff:41:43:78:
43:4a:ac:e5:c7:c0:0e:4c:80:ff:72:9b:78:07:39:
82:da:8d:9d:07:54:b8:1d:2a:f9:f9:8c:07:d0:4c:
fd:1f:6e:d8:ad:76:0e:b8:e7:a6:c2:75:cc:79:fe:
be:6f:4c:59:64:6c:2c:00:6e:cb:3f:82:0c:0d:a8:
b3:fb:29:02:e5:e7:2f:c4:4f:99:05:65:40:12:f9:
6d:a0:4d:d4:58:c7:72:e4:48:47:00:b6:48:bd:6d:
7d:18:eb:bd:78:53:6a:e9:03:83:1b:4a:15:c8:a1:
d1:bb:63:46:89:af:d0:b0:3a:dc:6b:1e:e1:d7:41:
62:17:87:71:8c:08:d7:38:bb:9b:82:06:1a:b9:58:
90:ec:e6:fa:81:60:28:63:01:1f:e8:61:ac:c2:e0:
b9:16:a8:f9:73:de:40:46:fe:99:6c:09:1f:af:9a:
0b:1e:6f:97:7a:5b:17:ce:51:31:6c:3d:e3:1c:ed:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:01:D4:D3:7E:BD:D1:07:91:65:0F:D1:51:0D:A9:C7:B9:16:0C:6C
X509v3 Authority Key Identifier:
keyid:F8:60:74:D2:B3:55:C5:76:19:84:A1:D1:42:71:CF:45:99:51:6E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GB00rNVxXYZhKHRQnHPRZlRbq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/ZgHU03690QeRZQ_RUQ2px7kWDGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6c999b-90a3-4646-b1ad-42e085a885c5/1/1-GB00rNVxXYZhKHRQnHPRZlRbq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.200.0/22
Signature Algorithm: sha256WithRSAEncryption
46:9d:ce:e2:bc:55:49:29:e6:67:80:38:50:85:73:1c:79:82:
91:bc:a9:5b:50:b4:f6:7f:9a:43:34:50:14:0f:13:8d:6f:e2:
14:83:5c:65:5b:9c:6e:2e:04:c9:7c:87:8f:99:fa:16:75:d8:
4b:68:87:3e:b5:0c:82:6e:b9:e7:20:71:e7:61:bf:42:d3:a5:
34:cf:a5:e8:b7:be:f5:94:9e:a2:82:35:e9:ae:57:6d:16:18:
2a:3e:9b:d5:63:b8:55:f1:ad:e4:c7:b0:fe:5f:c7:ac:86:fb:
c5:16:43:48:0e:61:4f:07:47:c7:5f:34:e6:9d:40:85:af:4c:
9b:4c:9d:a5:31:91:3c:c5:63:99:52:a9:38:13:a4:c1:c1:ee:
8e:65:80:cf:81:dd:3a:9a:82:56:d3:7d:77:42:19:e5:2c:f7:
39:70:52:2c:a7:84:b5:dc:8a:f2:17:60:5c:a9:46:64:bf:3c:
d6:4a:d2:61:75:b2:3a:b5:aa:39:22:3f:d9:1b:0a:96:b6:e8:
21:00:95:8c:5a:c3:16:e4:90:36:f4:d7:b0:16:2b:59:d6:18:
de:82:71:5f:63:79:2e:7a:a7:bd:1f:e4:e3:44:99:d7:4c:59:
7c:d1:86:33:17:4c:04:2f:59:07:d8:61:c3:d3:90:ae:ef:c7:
2e:40:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:44 2024 by rpki-client on console-ams.rpki-client.org