Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0dc9cc-d433-49c6-8953-73cc27928b91/1/CZHShakzTOl-2rFTbzT7ukIXLTc.roa
File: CZHShakzTOl-2rFTbzT7ukIXLTc.roa (raw, json)
Hash identifier: 3NtXA5lv1x8K8RKzdqSu+Z8Ca+dkNkoe8VgfPb5l3iY=
Subject key identifier: 09:91:D2:85:A9:33:4C:E9:7E:DA:B1:53:6F:34:FB:BA:42:17:2D:37
Certificate issuer: /CN=cc00db4e55c1b05134dff59e52295c10ad4f1d7f
Certificate serial: 01856DC1B606E63396193869F5BBEEE4243E
Authority key identifier: CC:00:DB:4E:55:C1:B0:51:34:DF:F5:9E:52:29:5C:10:AD:4F:1D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zADbTlXBsFE03_WeUilcEK1PHX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0dc9cc-d433-49c6-8953-73cc27928b91/1/CZHShakzTOl-2rFTbzT7ukIXLTc.roa
Signing time: Sun 01 Jan 2023 14:34:49 +0000
ROA not before: Sun 01 Jan 2023 14:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 37002
IP address blocks: 5.183.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b6:06:e6:33:96:19:38:69:f5:bb:ee:e4:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc00db4e55c1b05134dff59e52295c10ad4f1d7f
Validity
Not Before: Jan 1 14:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0991d285a9334ce97edab1536f34fbba42172d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:8a:78:72:7d:55:d3:87:09:22:6a:46:e3:
25:72:6e:a9:ce:36:d0:4e:39:4f:f0:d7:68:14:07:
5f:cd:2d:b0:e9:88:00:42:2d:83:e1:62:7b:cf:ea:
d0:a3:50:0b:20:4b:00:dd:d1:5c:b5:28:c6:bb:3d:
47:f6:83:64:92:f7:db:a2:d5:92:a6:b6:80:f9:d6:
cb:b4:b9:24:68:47:b1:71:05:1c:5a:ab:8d:eb:69:
c9:84:f0:30:27:bb:03:64:fd:aa:90:f3:83:a3:b1:
cf:41:89:c9:58:78:87:0c:24:75:0d:f1:19:60:6a:
29:cc:26:a3:85:8c:0d:ec:27:e5:39:5a:59:9b:3a:
42:1c:7a:66:c7:db:db:e9:13:98:b9:af:86:ed:de:
7f:cf:ad:39:14:21:50:bf:d5:97:f2:00:a5:c5:ea:
84:7a:78:b3:f2:00:f4:c8:2f:e9:55:af:b5:8e:d6:
e4:3b:52:d0:b3:d4:88:e9:46:1b:e8:1a:6f:ae:2a:
0d:29:ca:fc:88:c3:33:36:e7:e9:85:bd:e2:01:f6:
6a:59:5f:de:81:fa:2f:93:48:68:fa:a2:8b:c7:11:
d1:7d:9a:93:fc:ac:cc:f5:61:12:99:85:0f:ce:6d:
ec:86:2f:90:86:9b:72:2f:8d:09:5c:9d:1e:e2:66:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:91:D2:85:A9:33:4C:E9:7E:DA:B1:53:6F:34:FB:BA:42:17:2D:37
X509v3 Authority Key Identifier:
keyid:CC:00:DB:4E:55:C1:B0:51:34:DF:F5:9E:52:29:5C:10:AD:4F:1D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zADbTlXBsFE03_WeUilcEK1PHX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0dc9cc-d433-49c6-8953-73cc27928b91/1/CZHShakzTOl-2rFTbzT7ukIXLTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0dc9cc-d433-49c6-8953-73cc27928b91/1/zADbTlXBsFE03_WeUilcEK1PHX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.212.0/22
Signature Algorithm: sha256WithRSAEncryption
63:14:9d:01:49:2e:d4:7f:e8:27:d6:7a:f6:b7:c4:14:1a:3f:
8d:17:ba:21:dc:1c:f9:06:15:79:57:5d:ee:28:da:9e:92:e8:
01:b0:d5:23:24:b5:84:a2:b7:45:00:70:ac:62:4b:1f:d4:f6:
1a:22:5b:41:ce:30:cd:54:57:01:95:05:68:5e:8f:67:a5:fd:
c8:20:e2:d4:8a:47:33:29:de:17:a2:6e:e1:b4:5c:a5:09:91:
2e:ab:a8:80:e0:ad:8e:1c:1f:85:18:5a:cd:6b:9b:b3:61:b0:
8d:85:40:3b:8b:ce:a0:c8:15:f6:78:9d:0e:bb:09:3b:58:35:
fe:02:68:99:4e:7e:9e:69:81:1c:98:79:69:80:3f:53:73:49:
19:17:e8:4c:c5:e8:56:54:fa:3a:94:b1:07:38:1e:fa:d2:b1:
d9:22:db:ca:0a:81:2f:f9:65:3c:f8:8a:c4:5a:17:a0:cd:68:
82:3f:70:5e:80:84:ba:c1:bf:8e:d6:51:6a:40:0f:6f:43:e5:
e4:ae:31:af:43:27:b8:12:e3:e5:73:e2:41:53:9a:00:34:59:
13:82:f8:f0:99:2e:e0:a4:75:0e:a1:40:62:b9:b2:38:30:aa:
3b:5c:5d:5b:8a:a3:3c:71:d4:3b:df:d4:b3:4b:67:4d:7a:20:
c5:5e:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:43 2025 by rpki-client