Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/zDnsluns7shd8J67FRXgAlQ8zxY.roa
File: zDnsluns7shd8J67FRXgAlQ8zxY.roa (raw, json)
Hash identifier: k8wyux3yPzC4CHrQPVt5sMp/kqGvuQzawaXejHxP6/4=
Subject key identifier: CC:39:EC:96:E9:EC:EE:C8:5D:F0:9E:BB:15:15:E0:02:54:3C:CF:16
Certificate issuer: /CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Certificate serial: 0176A56F
Authority key identifier: 46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/zDnsluns7shd8J67FRXgAlQ8zxY.roa
Signing time: Tue 22 Feb 2022 22:40:21 +0000
ROA not before: Tue 22 Feb 2022 22:40:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 94.124.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24552815 (0x176a56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Validity
Not Before: Feb 22 22:40:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc39ec96e9eceec85df09ebb1515e002543ccf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:d9:f1:a1:e0:81:86:c0:83:60:15:b2:50:
d6:5c:91:f6:06:06:7f:53:64:a5:de:26:89:02:ee:
8d:8a:69:49:04:2d:67:06:b6:46:a5:fe:4b:48:d5:
41:f0:be:12:0e:f6:ea:30:07:68:8f:57:65:b0:94:
4d:5e:1f:18:09:09:39:42:87:54:83:60:4e:0e:95:
a3:63:d0:27:eb:06:02:49:e7:13:85:e8:8c:30:79:
6d:0e:9a:b3:5b:30:eb:4f:5b:6b:6b:99:b4:ba:4c:
32:0d:d5:77:92:03:5d:18:64:7c:56:8d:27:e4:55:
5a:66:e1:53:cc:c0:2e:2e:ad:78:b3:65:b7:b7:08:
f2:9f:b5:80:65:9a:6a:84:10:df:61:47:03:d8:62:
3b:73:96:9d:7f:e4:07:f1:b1:5e:75:c1:c7:51:b1:
98:ab:4e:26:67:27:cf:98:be:9f:a9:64:ac:5e:ef:
67:04:fb:57:a3:bf:78:eb:c9:51:d9:8b:1c:23:cd:
f1:19:ab:22:f2:ea:a7:90:3c:1a:41:c1:d1:f3:08:
6d:9d:5e:a8:d2:a9:07:b1:58:26:cd:af:d9:f7:bc:
9b:f0:d7:81:62:16:c8:95:db:47:54:1d:2b:4a:79:
81:0e:bf:a5:f5:9c:14:cc:e0:61:4b:53:d4:4a:15:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:39:EC:96:E9:EC:EE:C8:5D:F0:9E:BB:15:15:E0:02:54:3C:CF:16
X509v3 Authority Key Identifier:
keyid:46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/zDnsluns7shd8J67FRXgAlQ8zxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/Rt0l2fFcInyjX4ouKw0aiaktjWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8b:bf:37:92:39:25:8c:07:09:2d:c8:9e:db:8f:0e:6f:8c:
0b:1e:e1:69:ca:4b:42:95:b5:21:4a:b2:b9:dc:93:f9:d1:3d:
61:87:47:13:a6:c8:f8:78:fa:8a:ac:db:72:7f:7a:96:8a:3f:
62:2a:3b:77:b3:b7:fa:3d:6f:a1:cc:5e:72:69:08:ba:51:18:
a1:47:a7:19:ec:65:52:eb:2a:ab:1a:08:d8:7a:9e:3c:81:37:
4d:32:37:a5:47:b8:37:5a:73:c6:0b:3b:44:b4:a5:96:c2:03:
b2:06:e9:28:1f:81:66:0f:07:ec:15:d8:61:ca:cd:2b:41:6a:
d9:ee:32:d6:91:cf:50:63:92:91:09:4e:23:67:1e:70:f5:9b:
6c:a3:10:3a:7e:94:71:e6:58:b9:0d:08:81:7d:82:b7:44:59:
f5:3f:2c:ad:f2:5f:17:0b:67:90:b2:2f:5a:0f:ec:96:10:f4:
77:84:58:f0:11:21:ab:8c:f4:9d:8d:ea:ca:fd:02:44:62:df:
e0:9c:b8:05:81:7f:e8:3e:1f:6f:7a:ef:c8:ad:51:e7:97:4d:
19:e4:d4:80:86:7a:43:bc:9c:36:e6:13:3e:ca:48:99:e5:d0:
fc:82:73:aa:e9:6a:d3:2c:01:70:dd:3a:76:44:3e:70:3b:76:
7f:49:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:51 2024 by rpki-client on console-ams.rpki-client.org