Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/ZeYQ_2EVO8zRnKdBt1zC5O7HZAw.roa
File: ZeYQ_2EVO8zRnKdBt1zC5O7HZAw.roa (raw, json)
Hash identifier: A5aJdDOZKMQgaEPdk6tu+Z9QRZkiuKKOr8TAX9WTvTk=
Subject key identifier: 65:E6:10:FF:61:15:3B:CC:D1:9C:A7:41:B7:5C:C2:E4:EE:C7:64:0C
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E839B5CC5D9A7F74DD69B7F5F91CA7
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/ZeYQ_2EVO8zRnKdBt1zC5O7HZAw.roa
Signing time: Mon 02 Jan 2023 14:34:59 +0000
ROA not before: Mon 02 Jan 2023 14:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197417
IP address blocks: 213.175.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:39:b5:cc:5d:9a:7f:74:dd:69:b7:f5:f9:1c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e610ff61153bccd19ca741b75cc2e4eec7640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:ac:20:eb:19:cf:2f:85:6d:9a:17:11:7f:
f3:15:9e:bb:8d:f5:20:a4:a6:4e:53:dc:7f:0f:d3:
a1:b5:97:b8:fc:09:71:d4:1e:3f:e9:67:4d:28:de:
98:b1:aa:82:5a:31:7e:dd:e5:bf:e5:b7:35:cf:50:
65:53:b5:14:74:f2:56:6e:ec:2f:07:42:0c:e5:24:
f0:44:c6:fa:5a:92:5a:1b:26:d2:ef:1f:24:3b:d8:
e5:21:c7:39:6d:bb:9d:b2:58:de:28:9f:10:44:33:
94:ee:de:28:dd:d9:eb:cc:fd:fb:59:10:20:d5:02:
08:17:93:4e:44:3a:f4:c3:74:9a:54:7e:1f:9b:83:
d0:40:18:39:43:f7:62:82:47:3f:76:65:53:a2:d7:
e6:83:2e:c9:6a:41:f7:93:df:3c:16:fc:cf:df:fb:
c9:1e:bf:80:4a:ea:39:db:69:07:0c:6d:a0:4d:b7:
15:5e:71:fe:dd:cf:e7:30:0c:69:98:3b:9a:9c:b2:
83:fd:e6:7a:35:ed:8f:92:a8:ce:9a:c3:5e:c0:02:
1a:8c:6f:8f:35:8e:b8:9a:37:19:de:c4:9e:c3:68:
8e:3f:2c:01:c9:19:5f:40:9e:fa:79:f4:28:c9:d3:
cd:60:a5:d8:e6:2a:3a:36:b4:a9:2b:8f:d1:c4:97:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:10:FF:61:15:3B:CC:D1:9C:A7:41:B7:5C:C2:E4:EE:C7:64:0C
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/ZeYQ_2EVO8zRnKdBt1zC5O7HZAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b3:d7:29:bc:94:dc:45:55:f6:b7:32:1d:e1:14:e1:10:81:
ba:0a:44:e4:58:76:24:08:25:62:ec:c1:7d:f4:2b:ba:66:fe:
4d:d5:8d:89:2e:5e:da:7b:3a:5e:20:f2:2a:85:8d:33:61:c2:
72:03:3a:0b:96:48:e7:cf:fb:8b:da:c0:84:d3:c4:0b:10:b2:
4d:85:58:e0:9e:7b:06:a0:59:4a:81:86:af:80:94:6a:ea:50:
6f:87:5f:dd:a5:e3:41:e1:bb:a9:96:69:6e:bb:6f:f9:7c:40:
85:52:87:a5:e5:23:d2:e4:7d:11:0d:20:57:41:af:58:48:84:
65:ba:7e:79:47:19:06:a5:fe:56:52:58:ea:36:b0:24:1d:b6:
20:48:2f:be:fb:93:4a:07:2b:e7:1f:d6:a2:b6:87:c8:70:a9:
41:48:85:6c:2c:98:18:51:5f:86:61:1d:c2:e8:0a:6a:a7:2d:
e6:8b:bd:4a:f2:ea:7a:5c:a6:30:85:2e:0d:23:f5:09:09:68:
55:45:24:33:53:d2:99:80:79:9f:49:37:0e:55:59:d9:d6:8a:
89:fd:26:e1:5c:e9:9c:6a:3a:c8:56:38:da:44:b8:9d:ba:57:
4b:39:f2:d0:7c:98:fe:e5:48:14:ca:f4:5a:e0:0e:ab:99:b1:
72:c1:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org