Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/ZSGrO5tDyhsalE7K8FsUJDcv6hg.roa
File: ZSGrO5tDyhsalE7K8FsUJDcv6hg.roa (raw, json)
Hash identifier: U03s8B8cHOEkxxmVZolWF030DRw9WmYuHa2ftPegUU0=
Subject key identifier: 65:21:AB:3B:9B:43:CA:1B:1A:94:4E:CA:F0:5B:14:24:37:2F:EA:18
Certificate issuer: /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial: 0181D7F579C859D9A530C60AF3EA585347B7
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/ZSGrO5tDyhsalE7K8FsUJDcv6hg.roa
Signing time: Thu 07 Jul 2022 09:19:57 +0000
ROA not before: Thu 07 Jul 2022 09:19:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210027
IP address blocks: 185.180.145.0/24 maxlen: 24
176.126.174.0/24 maxlen: 24
86.106.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:f5:79:c8:59:d9:a5:30:c6:0a:f3:ea:58:53:47:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Validity
Not Before: Jul 7 09:19:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6521ab3b9b43ca1b1a944ecaf05b1424372fea18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:e2:2f:f5:c6:6b:16:28:a0:b4:f3:b6:5b:
d6:dc:c9:e6:9d:d7:47:72:1d:b9:ee:c1:41:8f:1a:
bd:6b:d7:71:ea:ea:eb:31:9e:fd:8b:e5:8f:23:1f:
66:e7:fe:3d:d9:ef:2c:47:eb:94:62:1d:f9:4c:91:
39:8d:09:d3:53:a3:8c:5e:c7:eb:b6:a5:99:22:27:
d4:7c:cb:0b:55:fd:5c:3a:4e:a7:43:09:4b:dd:7e:
e5:8a:7a:25:30:c8:92:0b:67:33:ba:23:83:b9:4f:
9a:a7:5c:67:bf:a4:bf:2e:92:8b:e4:39:7a:f1:6e:
21:af:b9:23:f5:db:83:50:32:2b:03:63:a3:8f:07:
a8:22:53:cb:9f:30:9e:22:5f:17:a8:6e:10:e5:07:
28:da:92:10:75:33:b5:73:79:d8:fe:67:67:ac:35:
cf:c4:10:59:b8:f4:df:e9:f9:eb:8e:a8:d9:34:25:
72:3b:85:5f:4a:08:08:05:1a:aa:9d:82:2e:dc:2a:
af:72:1c:36:dd:94:03:d8:a7:d5:f0:0f:06:66:28:
a5:9f:52:78:d8:36:4d:ef:a7:54:f1:1c:aa:be:f8:
70:87:58:e8:13:c7:fd:a8:35:b5:fe:cd:30:93:25:
c8:3e:b8:99:7a:a3:6a:8f:10:a3:51:3b:5e:d4:f5:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:AB:3B:9B:43:CA:1B:1A:94:4E:CA:F0:5B:14:24:37:2F:EA:18
X509v3 Authority Key Identifier:
keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/ZSGrO5tDyhsalE7K8FsUJDcv6hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.22.0/24
176.126.174.0/24
185.180.145.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1f:a4:0e:01:80:70:d2:44:eb:75:c0:e7:28:eb:75:dc:40:
74:32:7d:73:2f:d1:72:03:36:b4:62:d9:61:9a:3b:b1:8b:84:
bb:ca:f8:ad:fa:41:76:50:f0:cd:cc:40:ed:7c:15:47:46:22:
19:5a:96:14:bc:18:7c:1f:89:66:7b:29:3c:f9:85:44:4d:3b:
9b:c3:2d:b7:c4:14:71:bd:e1:2e:de:9d:f8:18:df:ad:b3:1f:
9b:df:3f:a2:19:a1:22:e6:a8:29:40:fe:c8:71:75:7e:85:ff:
0e:7b:65:57:8e:a8:c5:92:25:52:19:a2:e9:6b:9b:10:b4:ad:
fb:78:74:a4:11:ef:40:c8:50:1c:13:66:c0:91:d2:0d:7a:81:
74:15:aa:9e:1c:78:a6:30:5c:7a:db:73:0b:ab:60:90:cc:61:
9c:28:73:47:06:cd:fb:ac:82:10:99:fc:a3:dc:59:25:3c:aa:
78:82:59:92:d6:6b:02:3d:95:ec:27:72:b9:da:62:30:79:3c:
62:47:d8:a1:08:44:65:44:ca:6c:5e:29:41:69:65:17:52:13:
cd:22:f2:25:3a:34:d8:5d:1a:b5:6f:f5:99:d6:58:30:19:4e:
c2:44:cb:6c:8a:54:e9:19:7b:de:2a:3a:82:ab:ee:90:63:a7:
3b:b4:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:11 2025 by rpki-client