Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/ZwlDjt_xgB-8tvlAco5ggoOevlU.roa
File: ZwlDjt_xgB-8tvlAco5ggoOevlU.roa (raw, json)
Hash identifier: gF4VlZeZHH43L8O/wmD70kItuRuBgYgi4TVkRRSt3Qk=
Subject key identifier: 67:09:43:8E:DF:F1:80:1F:BC:B6:F9:40:72:8E:60:82:83:9E:BE:55
Certificate issuer: /CN=36fab4897fb14ee1e09f85200efe44d5e70a69a8
Certificate serial: 018CC3B6E1A0397B0D7029A97B7C0FFB9369
Authority key identifier: 36:FA:B4:89:7F:B1:4E:E1:E0:9F:85:20:0E:FE:44:D5:E7:0A:69:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nvq0iX-xTuHgn4UgDv5E1ecKaag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/ZwlDjt_xgB-8tvlAco5ggoOevlU.roa
Signing time: Mon 01 Jan 2024 06:29:51 +0000
ROA not before: Mon 01 Jan 2024 06:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.211.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e1:a0:39:7b:0d:70:29:a9:7b:7c:0f:fb:93:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fab4897fb14ee1e09f85200efe44d5e70a69a8
Validity
Not Before: Jan 1 06:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6709438edff1801fbcb6f940728e6082839ebe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:25:20:c2:45:a2:a1:9b:c9:08:d0:97:51:
51:ef:b3:55:be:1b:23:0b:66:ab:59:36:67:ec:ae:
1d:5d:4f:4c:21:4a:64:c5:a5:a2:28:aa:87:d2:78:
49:66:d3:83:b1:e5:43:7c:e1:d7:35:5e:52:1d:0a:
51:9d:82:9e:62:e2:f6:05:c2:f1:e7:d9:7c:1d:a2:
42:99:0c:15:72:47:e5:bb:93:24:c3:9c:0c:a3:64:
6c:d0:59:7b:dc:40:46:47:7b:e4:88:b5:43:e4:61:
43:93:cb:aa:ab:c8:3e:1f:e5:55:d1:bf:70:75:9e:
02:91:4d:86:41:35:92:8f:a6:45:2a:50:5b:49:f8:
dc:f9:24:ed:c2:78:1d:11:42:29:a8:14:15:d9:24:
f5:e3:92:3e:83:e9:f3:ea:d2:b1:c9:39:9c:cf:b0:
c3:79:0c:d5:b5:50:d3:4c:59:af:93:c2:07:fb:ac:
d9:5e:e3:61:42:ee:27:fb:fe:02:35:1b:b0:94:02:
77:cb:e2:02:07:e9:79:e2:40:4a:b5:04:85:8f:f3:
dc:65:65:4b:07:d2:ce:39:ad:3e:fc:ab:6b:b5:d3:
7b:39:b9:0b:90:04:58:95:a1:f6:39:9c:33:44:a5:
73:df:f1:1a:0e:b3:be:dc:92:9f:f4:83:76:0b:af:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:09:43:8E:DF:F1:80:1F:BC:B6:F9:40:72:8E:60:82:83:9E:BE:55
X509v3 Authority Key Identifier:
keyid:36:FA:B4:89:7F:B1:4E:E1:E0:9F:85:20:0E:FE:44:D5:E7:0A:69:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nvq0iX-xTuHgn4UgDv5E1ecKaag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/ZwlDjt_xgB-8tvlAco5ggoOevlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/de4c92-8776-4b9d-9d4d-1fca2365192e/1/Nvq0iX-xTuHgn4UgDv5E1ecKaag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.169.0/24
Signature Algorithm: sha256WithRSAEncryption
62:10:c9:ec:64:cf:cb:cc:00:47:16:99:47:ed:a5:c3:25:90:
d2:2a:4e:2c:73:e3:33:13:bd:0e:9d:c3:24:43:04:91:d9:1e:
dd:00:61:52:7b:4d:52:c3:e9:06:23:11:a6:e1:47:f7:a2:3c:
8e:c4:a2:e1:d3:dc:3f:f7:02:7a:3b:b8:70:5d:f9:8a:7f:30:
23:b1:4a:0b:7c:3b:67:57:4b:c1:cc:94:78:86:5b:02:1a:5f:
5f:b5:55:7e:97:26:70:68:c4:45:54:87:c8:18:4f:39:aa:ef:
40:a5:1a:88:db:cb:7a:6e:a7:56:db:b3:f0:b4:4d:c3:78:8e:
56:e9:43:7c:7f:f9:bf:45:a8:9e:f3:54:eb:29:dc:93:3d:fa:
9f:56:4c:85:61:b0:45:3b:ee:3d:2b:0e:92:e1:59:8d:43:31:
40:0e:64:61:b3:53:96:01:dd:0d:8c:25:c1:bb:b8:bf:a0:d0:
0d:32:1e:b1:fc:ae:49:9c:c3:40:63:52:52:63:ae:10:28:e6:
69:4b:ba:85:94:c7:be:81:ae:b1:27:c9:94:c6:37:16:9f:ca:
30:fb:3e:cd:a4:a6:09:60:75:ec:76:23:67:fe:e1:97:3d:91:
6e:a0:85:d3:bb:11:0f:6c:e8:7b:99:b4:b8:6c:b0:b9:54:55:
e4:26:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:56 2024 by rpki-client on console-fra.rpki-client.org