Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/z1igkNVuXVoIL0jfjzexNACuaQg.roa
File: z1igkNVuXVoIL0jfjzexNACuaQg.roa (raw, json)
Hash identifier: NDadFcQ5wPJrcDTXiXFHiBHOj6aDk1ozGvptdBPmsjU=
Subject key identifier: CF:58:A0:90:D5:6E:5D:5A:08:2F:48:DF:8F:37:B1:34:00:AE:69:08
Certificate issuer: /CN=46ca4dc9c70661f721d68ce53601d3d5f9aa8c32
Certificate serial: 036D150B
Authority key identifier: 46:CA:4D:C9:C7:06:61:F7:21:D6:8C:E5:36:01:D3:D5:F9:AA:8C:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RspNyccGYfch1ozlNgHT1fmqjDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/z1igkNVuXVoIL0jfjzexNACuaQg.roa
Signing time: Sat 01 Jan 2022 09:06:19 +0000
ROA not before: Sat 01 Jan 2022 09:06:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50926
IP address blocks: 212.34.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57480459 (0x36d150b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ca4dc9c70661f721d68ce53601d3d5f9aa8c32
Validity
Not Before: Jan 1 09:06:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf58a090d56e5d5a082f48df8f37b13400ae6908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:72:f0:0a:3e:de:2d:77:8c:d6:4f:fe:38:14:
e7:97:c1:e3:b0:62:ce:b6:fc:89:36:3a:f8:87:d4:
63:2a:27:3d:25:92:c4:29:f6:86:ee:24:de:0b:0e:
36:02:32:7a:0f:98:d2:c2:ad:c1:e1:84:2b:cd:d0:
35:cf:17:f1:e5:ac:60:96:b2:7a:75:a6:27:46:63:
f1:87:1b:eb:c7:81:fb:96:0b:41:e1:92:11:21:a0:
b1:cc:0e:0e:8d:eb:08:a8:64:c0:2e:76:62:21:b9:
91:ae:f3:18:f5:e0:81:ba:7b:2c:e1:76:08:84:6c:
db:5d:e5:9f:4c:72:29:d7:7a:51:37:6c:26:0d:c6:
a8:91:4e:ae:3e:2e:64:6c:b2:72:f2:55:30:0f:0e:
cb:af:bb:88:05:92:4d:32:7d:c0:91:71:b3:f4:75:
0f:b6:6b:b4:d8:7d:18:20:02:52:e3:db:00:f8:39:
f8:ce:f3:d9:83:2c:aa:bd:c4:ac:da:7a:a3:76:5e:
d9:e9:40:71:8f:00:2a:b0:fd:b2:e5:8e:cc:86:f1:
d1:4a:8d:17:97:31:bd:79:81:5a:ea:b2:09:55:60:
70:f0:23:bb:37:79:54:fc:17:38:13:89:d4:68:6d:
78:7c:f9:7b:88:6f:c2:90:a2:06:a5:1d:79:19:9c:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:A0:90:D5:6E:5D:5A:08:2F:48:DF:8F:37:B1:34:00:AE:69:08
X509v3 Authority Key Identifier:
keyid:46:CA:4D:C9:C7:06:61:F7:21:D6:8C:E5:36:01:D3:D5:F9:AA:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RspNyccGYfch1ozlNgHT1fmqjDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/z1igkNVuXVoIL0jfjzexNACuaQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/00b15a-30af-42ca-ae87-a07a4fc7b45c/1/RspNyccGYfch1ozlNgHT1fmqjDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.34.128.0/19
Signature Algorithm: sha256WithRSAEncryption
24:fe:02:53:6b:d9:8d:42:fe:0c:d0:b6:11:6f:7d:8c:68:97:
6e:8a:a3:4a:b2:af:16:12:24:52:f4:b5:0f:93:54:36:b1:6a:
8e:d2:12:21:d5:c6:8c:4d:c8:e5:9a:cd:c2:ce:72:f5:74:56:
ff:2b:57:40:7e:87:43:49:30:65:63:32:1e:a7:1e:cc:b6:cd:
5b:71:5f:0f:bc:b6:58:68:4d:4e:9a:3e:a6:1f:49:15:cb:2f:
e2:c8:c9:c0:e0:ee:79:02:61:a4:af:03:e7:5c:7b:98:a9:c1:
29:13:84:4a:67:9a:9b:8b:eb:3f:60:1f:da:d1:b2:ba:8b:01:
ef:70:1e:94:a9:38:ab:0b:0d:e7:5f:4b:13:b6:7c:50:7c:9e:
3a:58:09:cb:c2:b9:59:6a:44:c4:ff:78:19:a8:09:a4:4f:36:
9b:03:ef:55:f8:67:7c:6a:14:2a:ca:ba:d1:f4:f8:bd:ef:83:
74:7e:23:0d:fc:3b:bd:6b:fd:36:c0:b6:e5:2f:c7:63:cb:6e:
21:00:39:5e:aa:2f:08:bd:84:f8:64:1a:e2:45:ca:a3:e3:29:
4e:d3:24:4d:29:10:eb:f4:77:28:f3:b3:4e:32:93:e8:8a:1a:
43:dc:ff:16:2e:dc:ce:ea:a8:3f:58:36:7d:4a:ee:23:58:a2:
71:0e:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:12 2025 by rpki-client