Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/dZesTG4Kobr6mgLefV3qbDizPb0.roa
File: dZesTG4Kobr6mgLefV3qbDizPb0.roa (raw, json)
Hash identifier: hhGFE+c0W9qq3vzlR9zI60/vJCikaMvwdqW66UnMvx4=
Subject key identifier: 75:97:AC:4C:6E:0A:A1:BA:FA:9A:02:DE:7D:5D:EA:6C:38:B3:3D:BD
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27EC9685
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/dZesTG4Kobr6mgLefV3qbDizPb0.roa
Signing time: Sat 01 Jan 2022 13:00:25 +0000
ROA not before: Sat 01 Jan 2022 13:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42117
IP address blocks: 159.20.8.0/21 maxlen: 21
95.175.160.0/19 maxlen: 19
77.233.96.0/19 maxlen: 19
2a00:c780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669816453 (0x27ec9685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7597ac4c6e0aa1bafa9a02de7d5dea6c38b33dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:cf:ad:26:55:d8:ac:5d:e1:aa:2e:4d:2f:
5b:10:aa:23:99:7c:26:46:3c:35:bc:94:85:19:2a:
29:f2:f8:04:d8:b9:25:cf:70:0e:cd:f9:0e:2e:86:
51:f3:be:2b:c8:48:6d:24:0b:eb:6e:77:b0:26:0f:
f8:3d:0b:ce:46:0e:5e:b6:a6:b6:43:05:b9:61:be:
79:2d:83:58:18:1f:6f:7e:4d:6c:fa:b4:77:63:a5:
89:0a:c0:3e:f5:ea:9e:8d:c7:86:72:69:7f:6b:89:
ff:8d:51:be:bd:be:95:bc:b2:89:be:17:54:99:71:
e5:a3:3d:17:fc:a9:48:6d:ac:b2:2b:9a:4a:66:2d:
0e:df:58:b2:9e:85:75:50:b4:5d:68:25:e4:d0:36:
51:6b:a1:75:02:ef:dd:24:2e:e8:15:a8:db:3a:6e:
d4:bd:14:1a:fd:25:71:95:8b:21:0c:28:3b:f3:f4:
14:f1:ae:a4:10:67:e3:fa:9e:74:8c:dc:c4:85:37:
17:53:48:0c:48:fa:48:7e:1e:05:cf:2c:d4:37:ad:
6c:4a:41:24:be:f2:aa:bf:72:e8:c7:53:2c:ec:60:
81:bb:6f:59:82:44:8a:bf:36:98:c8:90:3e:ed:f1:
d0:50:a3:4f:78:4f:0a:e6:59:a0:3a:f0:15:36:40:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:97:AC:4C:6E:0A:A1:BA:FA:9A:02:DE:7D:5D:EA:6C:38:B3:3D:BD
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/dZesTG4Kobr6mgLefV3qbDizPb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.96.0/19
95.175.160.0/19
159.20.8.0/21
IPv6:
2a00:c780::/32
Signature Algorithm: sha256WithRSAEncryption
4a:f5:7e:ac:eb:0e:70:5d:fb:3a:66:96:fe:43:53:2e:ca:7e:
a0:35:ee:c0:14:2e:5b:6f:2d:fa:4f:6d:4f:ad:c2:6e:53:c9:
37:9a:7d:c1:6a:bd:b3:30:9a:7e:4d:bc:f0:8e:9f:aa:79:b4:
88:fa:82:b6:d0:08:82:09:e9:d5:e5:a6:87:b4:76:a2:23:12:
a1:40:c6:22:65:6e:65:fa:27:16:23:43:66:de:34:65:a1:e0:
33:06:35:d2:56:fc:e8:ec:96:7e:d3:f6:fa:07:c6:b1:a8:72:
15:e9:cd:9a:50:4d:70:43:92:b1:a0:ca:89:c4:94:55:8f:99:
3a:1f:d1:6e:ff:c1:c3:93:82:8c:f9:87:40:ed:79:90:62:12:
8b:18:6c:ed:58:9e:2f:92:45:f8:a2:be:69:e7:48:99:20:58:
eb:a8:dc:e5:cd:ec:6d:5f:b5:0a:bf:a1:a0:86:cf:30:5e:72:
95:9a:24:2f:27:62:2c:b8:f8:cf:d7:e2:41:76:63:29:2a:e8:
5d:f5:b3:86:51:b2:9e:b8:8e:08:14:00:41:d0:e2:42:c0:64:
88:9a:11:9d:ca:8d:2e:4a:e2:eb:e3:81:d3:3a:2c:b1:3c:aa:
65:b3:cc:8b:4a:9a:2c:da:d9:04:2a:9a:45:1c:f7:52:fc:9d:
82:1c:7d:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:33 2024 by rpki-client on console-fra.rpki-client.org