Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/zDyEU-Qe7Co4NCyni6eJBFfzWgA.roa
File: zDyEU-Qe7Co4NCyni6eJBFfzWgA.roa (raw, json)
Hash identifier: mGhsq3Q2jy1r62iPfulaTp8RJyRDnKjEoG61u/pfXMQ=
Subject key identifier: CC:3C:84:53:E4:1E:EC:2A:38:34:2C:A7:8B:A7:89:04:57:F3:5A:00
Certificate issuer: /CN=a609c33af20168169031255daee2d83d2662c990
Certificate serial: 35D65E97
Authority key identifier: A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/zDyEU-Qe7Co4NCyni6eJBFfzWgA.roa
Signing time: Sat 01 Jan 2022 11:02:12 +0000
ROA not before: Sat 01 Jan 2022 11:02:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50926
IP address blocks: 95.128.152.0/24 maxlen: 24
95.128.155.0/24 maxlen: 24
95.128.157.0/24 maxlen: 24
95.128.154.0/24 maxlen: 24
95.128.156.0/24 maxlen: 24
95.128.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903241367 (0x35d65e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609c33af20168169031255daee2d83d2662c990
Validity
Not Before: Jan 1 11:02:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc3c8453e41eec2a38342ca78ba7890457f35a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:61:73:14:ab:73:27:57:f4:26:ca:54:b4:
d0:46:cb:39:cb:01:88:56:52:6a:fe:7a:10:da:00:
93:f1:9a:cc:9e:ca:13:28:6a:f8:d4:b6:11:df:ed:
ef:b8:86:57:dd:2e:79:d1:79:f3:d2:9f:aa:53:c0:
4e:b3:38:0f:b5:af:7c:ee:38:b7:e0:95:12:13:cb:
86:3a:62:40:b6:de:93:b9:cb:01:55:aa:19:57:42:
fc:98:6a:e7:d8:d4:5d:25:00:61:6c:30:f2:6e:89:
96:cf:f5:56:19:6a:0d:bc:f7:0f:b0:c6:9c:72:94:
83:71:2d:6b:6b:f2:f2:7c:a2:5c:d9:91:cf:39:14:
be:33:b5:44:ae:9e:7b:89:93:f9:07:3e:86:9f:60:
ad:56:4a:3d:fd:63:82:68:31:5e:3b:3e:48:1c:c0:
5d:a3:0b:f6:02:ed:b3:fa:8d:8f:1b:ef:0f:0b:27:
91:97:85:38:a6:78:15:f5:a7:85:ce:de:35:c5:95:
6c:18:06:e2:b2:af:f6:86:1f:d2:35:eb:c6:ae:d0:
51:98:bf:58:89:e5:95:63:2c:2c:5a:d6:ba:eb:17:
17:73:73:76:87:9b:3f:87:82:65:e2:ec:e2:77:55:
71:4b:a6:b8:8e:42:32:03:e1:c1:68:d5:d9:8d:25:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3C:84:53:E4:1E:EC:2A:38:34:2C:A7:8B:A7:89:04:57:F3:5A:00
X509v3 Authority Key Identifier:
keyid:A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/zDyEU-Qe7Co4NCyni6eJBFfzWgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/pgnDOvIBaBaQMSVdruLYPSZiyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.152.0-95.128.157.255
Signature Algorithm: sha256WithRSAEncryption
8f:4b:67:5e:36:1a:da:2d:e9:95:34:34:3f:00:99:bf:65:ae:
1b:e3:4d:41:a7:32:88:32:5f:d0:1c:a7:4d:91:56:0e:eb:fd:
b1:1b:ec:a3:23:f3:46:ab:10:70:65:62:8a:63:83:04:3f:b6:
cd:e4:b2:63:05:cb:87:fa:40:b7:1c:79:bb:17:d1:7e:49:0e:
3d:27:54:f3:e4:4b:75:27:5b:a9:9c:43:ef:fb:57:45:d2:ca:
c2:c8:5a:05:e4:c0:0c:24:53:99:6c:f5:e2:99:dc:9e:a4:e3:
e3:62:77:93:ee:36:0b:b2:ce:56:60:cd:58:0b:70:59:3a:b5:
01:f1:4e:ee:31:a1:c6:04:9d:5f:2f:68:e7:26:41:56:eb:30:
6f:30:9b:23:29:40:cf:4f:dc:fe:7e:b5:e3:0b:c3:f3:a0:5d:
25:83:8a:0e:b1:4c:fd:78:9f:06:c4:32:d4:cf:e1:a9:b1:a3:
ac:ca:f6:1e:35:1f:f1:38:0d:b6:70:4d:dd:b6:83:64:72:bd:
83:a9:3e:18:e7:6b:b7:01:dc:b9:10:09:b9:c0:e5:6a:64:b6:
09:92:8f:10:60:db:df:25:7b:77:2d:6c:ee:9a:92:96:f4:27:
a6:1f:6a:60:96:a2:83:ce:60:46:74:6a:53:c4:ab:c3:98:4b:
69:0c:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:41 2024 by rpki-client on console-ams.rpki-client.org