Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b192f4-480b-45f5-9a86-c8bb034fa0fb/1/ZBpOMfcW8NusKoDS11OfdyccY08.roa
File: ZBpOMfcW8NusKoDS11OfdyccY08.roa (raw, json)
Hash identifier: vHfSeKeM8Zyt8i6zME0GExZnPGLYMjr9YXy0Zqe1aGA=
Subject key identifier: 64:1A:4E:31:F7:16:F0:DB:AC:2A:80:D2:D7:53:9F:77:27:1C:63:4F
Certificate issuer: /CN=473071cd63af587058e5fb146b8506abe2342293
Certificate serial: 01833711152EFFA2962DC16E657A3DDFB359
Authority key identifier: 47:30:71:CD:63:AF:58:70:58:E5:FB:14:6B:85:06:AB:E2:34:22:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzBxzWOvWHBY5fsUa4UGq-I0IpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b192f4-480b-45f5-9a86-c8bb034fa0fb/1/ZBpOMfcW8NusKoDS11OfdyccY08.roa
Signing time: Tue 13 Sep 2022 13:36:49 +0000
ROA not before: Tue 13 Sep 2022 13:36:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47693
IP address blocks: 185.43.31.0/24 maxlen: 24
2a10:48c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:11:15:2e:ff:a2:96:2d:c1:6e:65:7a:3d:df:b3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473071cd63af587058e5fb146b8506abe2342293
Validity
Not Before: Sep 13 13:36:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=641a4e31f716f0dbac2a80d2d7539f77271c634f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:7d:54:69:b9:e3:b7:2e:da:06:5f:41:82:
4c:d8:cd:4c:ba:36:f5:50:d5:90:ba:9f:6d:fb:7e:
b6:29:94:0f:87:69:09:cb:56:97:1a:f0:a5:82:60:
5b:82:bf:7a:86:e5:a3:68:cd:3f:3c:33:0f:b2:ac:
37:fd:bb:f7:fb:1d:a4:5a:aa:b2:43:1e:4a:cf:49:
f3:41:53:c4:61:f0:5a:13:da:10:78:54:27:e4:2a:
07:c2:78:6d:b7:4c:9f:3e:88:30:c3:17:6e:e7:50:
ce:69:32:bb:5f:88:39:ae:49:61:29:76:52:34:79:
13:ab:b2:52:a7:76:f0:dc:70:fd:7e:d2:81:0f:5a:
22:10:12:0a:d9:df:b7:e4:9f:76:e8:30:4c:d0:05:
ca:f7:54:10:89:f9:1f:60:8b:47:84:30:92:c7:0d:
e6:48:08:e0:1b:8a:ce:88:3d:ff:aa:3f:83:fd:4c:
a8:07:d6:e4:14:0d:1d:c0:71:e1:99:f2:dd:ab:49:
83:66:ee:15:24:c9:ab:7d:c1:bf:8d:fb:f6:4c:5e:
e8:3c:43:86:03:a9:81:f8:c4:9f:3b:ba:26:6b:e3:
8d:ea:0d:60:d9:6d:57:9f:08:cb:64:e5:aa:04:c8:
21:52:68:70:ab:d4:b9:c2:f3:82:fb:c9:0d:3f:6b:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1A:4E:31:F7:16:F0:DB:AC:2A:80:D2:D7:53:9F:77:27:1C:63:4F
X509v3 Authority Key Identifier:
keyid:47:30:71:CD:63:AF:58:70:58:E5:FB:14:6B:85:06:AB:E2:34:22:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzBxzWOvWHBY5fsUa4UGq-I0IpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b192f4-480b-45f5-9a86-c8bb034fa0fb/1/ZBpOMfcW8NusKoDS11OfdyccY08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b192f4-480b-45f5-9a86-c8bb034fa0fb/1/RzBxzWOvWHBY5fsUa4UGq-I0IpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.31.0/24
IPv6:
2a10:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:c0:1b:1c:41:53:01:e4:e4:9b:0d:6e:a1:6f:98:d1:f7:b6:
08:f8:17:d4:62:21:aa:2c:8d:59:24:6e:87:fa:04:a6:49:58:
d8:e5:dd:bf:38:ee:b4:8b:28:91:85:f5:7a:ce:5e:d4:10:f9:
2e:ba:be:4e:5b:61:92:04:54:e1:ac:73:cd:cf:99:17:ab:1a:
b8:15:1e:7d:6c:8b:d9:3d:38:19:96:dc:cc:a8:e7:d0:a4:17:
1e:ee:25:04:32:f5:32:ea:a9:ea:ae:ba:28:42:77:22:b5:05:
01:39:3f:1c:26:fe:b1:8a:9a:ed:8a:bf:11:c3:68:c2:66:b9:
30:dc:18:c5:e3:57:0a:6d:69:94:5b:31:0a:0c:52:47:a7:06:
f2:3e:98:97:ec:e2:a5:15:c0:c2:0c:20:0b:cf:07:ec:8f:d2:
2d:62:73:b8:5e:b2:82:60:76:d8:91:10:cf:37:8b:84:d7:e9:
d7:1e:93:40:2c:ab:b5:50:b6:c2:97:ee:1d:db:a6:7f:7a:bd:
9f:96:e6:a1:2f:35:79:ea:b9:a7:af:c2:df:ea:31:a6:0a:a6:
a3:e1:ef:09:f9:e9:e7:5c:4e:cf:3e:95:13:35:e0:ca:29:d2:
72:6f:eb:d4:54:ab:b8:fb:73:5b:ca:51:42:7e:a1:94:19:79:
5c:d1:e0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-fra.rpki-client.org