Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/zETlgg6pa6DSH-wj4v7IvAzPNgs.roa
File: zETlgg6pa6DSH-wj4v7IvAzPNgs.roa (raw, json)
Hash identifier: 7tLvCTGynbmYErDZELO8pNHXPfXeSJQaOYKJI5RWiXk=
Subject key identifier: CC:44:E5:82:0E:A9:6B:A0:D2:1F:EC:23:E2:FE:C8:BC:0C:CF:36:0B
Certificate issuer: /CN=9f22b1cad7333d34bbd3dddea4ba07b1a8204426
Certificate serial: 09132E
Authority key identifier: 9F:22:B1:CA:D7:33:3D:34:BB:D3:DD:DE:A4:BA:07:B1:A8:20:44:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyKxytczPTS7093epLoHsaggRCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/zETlgg6pa6DSH-wj4v7IvAzPNgs.roa
Signing time: Sat 01 Jan 2022 01:55:09 +0000
ROA not before: Sat 01 Jan 2022 01:55:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 195.78.77.0/24 maxlen: 24
195.78.76.0/23 maxlen: 23
195.78.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594734 (0x9132e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f22b1cad7333d34bbd3dddea4ba07b1a8204426
Validity
Not Before: Jan 1 01:55:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc44e5820ea96ba0d21fec23e2fec8bc0ccf360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ce:ef:4e:5c:54:6c:18:6e:1b:14:86:ff:b1:
b7:4f:89:2b:0b:9e:ce:c1:cc:5c:db:e3:20:3e:58:
06:2c:26:62:ad:7e:a0:2a:82:8c:c5:a0:f4:80:d0:
d3:6a:fe:e7:fe:c3:1c:4f:b3:3a:4b:b2:07:b6:d9:
6e:a5:94:86:67:5e:e4:92:59:4c:c7:fe:12:9d:99:
69:e8:ea:30:1e:65:69:6f:62:76:02:74:b8:b2:a9:
75:c4:04:07:1b:40:8d:3a:57:54:fd:d3:af:bc:54:
61:38:6a:54:2d:b2:56:03:fe:8b:64:93:7d:37:d0:
b7:22:90:44:80:00:99:12:89:dc:65:e1:b1:f6:cb:
7e:e2:3a:00:20:31:39:bd:15:1e:3c:5a:1a:be:72:
a8:0c:0f:8d:d3:2d:8a:3a:68:9c:b3:c3:55:2f:ef:
c6:1f:d9:3d:b0:ec:f4:82:e8:f3:15:61:da:42:4c:
bb:0f:40:6d:9f:19:b3:0e:da:4e:bb:11:21:ab:4f:
ec:99:f9:32:de:03:12:21:ea:d7:e5:79:97:fb:ae:
47:62:3a:35:b8:c8:4b:2a:2b:ef:0e:e4:44:64:92:
29:b2:e4:16:bc:b8:10:ac:b5:62:22:ef:c3:e8:e3:
1f:26:25:28:3d:c4:1a:bb:d0:cb:0b:f4:34:f1:d9:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:44:E5:82:0E:A9:6B:A0:D2:1F:EC:23:E2:FE:C8:BC:0C:CF:36:0B
X509v3 Authority Key Identifier:
keyid:9F:22:B1:CA:D7:33:3D:34:BB:D3:DD:DE:A4:BA:07:B1:A8:20:44:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyKxytczPTS7093epLoHsaggRCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/zETlgg6pa6DSH-wj4v7IvAzPNgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/nyKxytczPTS7093epLoHsaggRCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.76.0/23
Signature Algorithm: sha256WithRSAEncryption
05:74:18:43:3e:00:1a:1e:50:33:30:eb:45:ee:10:2a:da:a0:
91:dd:30:01:7c:3a:b9:65:6d:a6:00:3e:e0:2c:a8:a0:2b:67:
55:89:e6:fd:78:a2:e6:23:0b:ff:87:53:6c:1b:68:91:dc:4a:
96:4f:c7:0c:89:5b:b1:ee:cc:85:be:90:10:43:04:c8:2c:ef:
e6:37:b1:ae:31:cd:e2:04:81:c7:36:40:50:84:82:a8:9b:b6:
93:73:76:e4:04:5d:99:0f:91:22:0d:d6:d8:a8:ec:9a:eb:7d:
a5:04:75:e0:26:e1:d1:aa:f9:a0:d1:b6:2f:44:59:08:98:f9:
8a:04:ec:4c:0b:67:b3:07:40:c8:33:f4:db:01:56:08:8c:09:
37:a5:99:e6:36:ed:8b:62:b9:db:0a:22:54:c8:65:c1:7b:56:
2f:93:46:bc:c5:7e:2e:9d:40:3f:52:39:32:c9:16:73:d9:92:
87:a4:9e:74:1f:58:c1:b7:b0:27:4a:8d:22:ac:c4:3b:03:f5:
bc:15:bb:4f:98:38:2e:5b:7c:98:7b:68:7b:cf:39:45:3d:cb:
9a:45:d8:0a:35:35:a4:38:0d:54:b4:c5:25:21:7b:22:b6:d3:
19:f7:b8:d0:5f:69:ca:75:08:d3:e2:14:9d:a2:c6:0a:a7:43:
ce:65:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:38 2024 by rpki-client on console-ams.rpki-client.org