Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/Zpui-ygLmy8cPwWOTwHiLdYpGVM.roa
File: Zpui-ygLmy8cPwWOTwHiLdYpGVM.roa (raw, json)
Hash identifier: RuL2KkH37ZYm5xXV4PJAlhei1xTZ3HtJheBOhyls+dU=
Subject key identifier: 66:9B:A2:FB:28:0B:9B:2F:1C:3F:05:8E:4F:01:E2:2D:D6:29:19:53
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 08D321
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/Zpui-ygLmy8cPwWOTwHiLdYpGVM.roa
Signing time: Thu 03 Feb 2022 16:57:15 +0000
ROA not before: Thu 03 Feb 2022 16:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 188.208.103.0/24 maxlen: 24
94.176.214.0/23 maxlen: 23
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578337 (0x8d321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Feb 3 16:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=669ba2fb280b9b2f1c3f058e4f01e22dd6291953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:57:7a:52:07:ef:56:85:e7:fb:07:66:56:
5d:f7:21:bd:75:97:9b:bb:23:4e:07:6c:94:b2:87:
ac:93:df:46:36:d8:1a:f7:c6:df:6a:38:d5:6d:ae:
bb:fe:9f:62:63:b3:42:5b:41:1e:13:1e:cc:8b:e1:
12:c1:bd:50:b1:3f:62:09:e0:6e:f7:b0:f7:f1:ac:
0a:70:e6:2d:09:dc:b6:7f:69:11:11:66:c6:e3:95:
10:87:48:6e:ae:c5:32:43:4f:3f:e3:c3:c4:49:4e:
3a:bc:a3:7a:56:35:ce:b8:23:e4:83:55:65:11:c7:
35:6c:8b:c2:1a:39:76:82:1b:35:d7:99:3c:8b:5e:
a2:85:09:66:80:b6:b1:ae:3e:39:6b:d4:5f:17:9e:
ab:39:75:1b:7f:53:0e:23:c1:59:d9:9c:35:07:84:
43:aa:ed:e0:2e:b8:66:2d:6a:9e:10:7c:8e:77:66:
a6:fb:5c:20:f6:60:a3:32:ac:78:57:88:db:44:d6:
3a:66:82:b6:ac:5e:0d:9d:2a:e8:87:79:26:fd:20:
ff:4b:4c:09:e4:e1:b5:90:5c:ff:47:62:e1:20:6e:
4c:c1:be:be:91:b0:85:b7:48:90:fc:5f:3a:f1:b5:
3c:4d:b7:79:1a:e8:3d:44:1b:f5:b9:28:92:f0:5b:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9B:A2:FB:28:0B:9B:2F:1C:3F:05:8E:4F:01:E2:2D:D6:29:19:53
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/Zpui-ygLmy8cPwWOTwHiLdYpGVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
94.176.214.0/23
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:09:7b:1f:80:b8:5a:bb:85:6b:a3:44:c4:38:0e:4b:b1:72:
7a:8e:e8:21:23:e5:52:db:89:5f:c7:c0:f7:b0:7c:6a:4f:02:
d3:e8:3c:d7:17:c8:d4:da:99:cc:91:35:b0:61:ba:cb:3e:74:
41:c0:2c:5b:b1:e4:d0:2b:63:a5:d2:f2:f1:b9:22:92:ec:8c:
68:83:08:a3:7b:41:3d:96:e0:ec:36:03:59:a7:57:92:94:1b:
7f:45:e8:bc:fb:35:cb:2e:59:7c:8d:c0:48:29:90:aa:e4:71:
53:08:6f:b9:66:0a:33:86:4b:31:72:1b:64:86:93:03:ff:f6:
29:97:f1:fb:58:e3:f8:f3:7b:fb:d7:e2:c6:0b:00:24:8e:1d:
66:f1:17:56:4c:47:96:30:57:d6:75:4e:d8:9a:b8:ab:cd:4d:
11:dd:d9:cd:68:67:d6:81:f3:ee:2f:e2:3c:b8:6b:8f:e6:0c:
a3:19:d2:51:94:2d:ac:a3:ca:65:0c:65:fc:f9:46:b4:eb:18:
2a:87:eb:82:c1:ee:bb:39:48:c1:af:f1:0b:c4:0f:8e:bb:eb:
fc:c4:5f:5e:cc:35:2b:a9:47:67:ce:4a:2e:11:dd:da:0f:59:
9f:1b:43:0d:ec:6e:dd:7d:1b:74:8b:e5:4c:7b:92:88:8c:17:
e9:93:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org