Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/ZG84Zxn9HQBX4W0xpz9u7wnwlrc.roa
File: ZG84Zxn9HQBX4W0xpz9u7wnwlrc.roa (raw, json)
Hash identifier: IGGGytLO3rj4U2UUFTmzexvbHKQZnITx2c5wA5LbkPk=
Subject key identifier: 64:6F:38:67:19:FD:1D:00:57:E1:6D:31:A7:3F:6E:EF:09:F0:96:B7
Certificate issuer: /CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Certificate serial: 0188916F051FD882CCC05B6A475241E98F2C
Authority key identifier: B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/ZG84Zxn9HQBX4W0xpz9u7wnwlrc.roa
Signing time: Tue 06 Jun 2023 15:59:12 +0000
ROA not before: Tue 06 Jun 2023 15:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 94.154.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6f:05:1f:d8:82:cc:c0:5b:6a:47:52:41:e9:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Validity
Not Before: Jun 6 15:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646f386719fd1d0057e16d31a73f6eef09f096b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:b9:3b:aa:e2:53:80:e5:b3:a1:74:e6:03:
67:b0:b7:67:95:1c:2e:45:37:e5:69:9f:e5:04:06:
ae:87:01:28:c0:cf:5d:61:79:06:92:41:b7:e8:da:
3c:48:ea:86:f4:61:16:1a:35:82:d3:f6:81:06:a7:
b1:43:20:3a:2e:e5:20:c9:90:d2:b2:8d:68:72:b0:
3f:fd:f1:d6:29:6d:06:15:db:30:d9:56:2a:da:f8:
93:12:c2:b1:ce:d2:45:98:39:68:4c:ef:af:f3:70:
79:56:d7:53:13:04:bc:0e:b6:2a:e6:3f:fd:2e:1a:
a7:af:3a:fd:90:b9:e7:25:21:7f:50:43:d8:84:d7:
6c:a5:7b:41:e7:70:a3:1b:90:90:84:31:18:5a:6d:
6b:4a:df:75:5e:f4:e9:d2:f5:ae:ef:86:b8:70:ff:
c8:97:92:fa:49:be:42:9e:76:fe:5f:63:bc:8a:c4:
3c:40:bf:5f:05:08:fa:4d:58:8a:bb:92:df:44:90:
ee:b6:fc:20:1f:3b:7a:35:4c:b3:0d:89:cb:7a:d2:
0a:da:9c:55:90:6d:92:05:0b:82:9e:bc:ec:79:5d:
cd:57:8f:d6:2c:a1:d7:a8:cb:19:f4:7b:44:bf:a4:
3f:32:7f:e2:15:f5:65:cb:73:f4:87:a3:ea:e4:96:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6F:38:67:19:FD:1D:00:57:E1:6D:31:A7:3F:6E:EF:09:F0:96:B7
X509v3 Authority Key Identifier:
keyid:B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/ZG84Zxn9HQBX4W0xpz9u7wnwlrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6b:4c:09:28:83:b1:67:df:54:6b:90:7a:75:a1:4c:72:34:
a3:b9:64:52:71:50:06:97:a3:68:4f:a1:9d:f7:ef:27:17:86:
bd:dd:bf:63:e5:fa:4e:13:b6:a4:93:50:f4:4a:5d:d4:c2:03:
50:80:84:e7:f0:d1:d4:17:8f:fa:84:3f:81:6b:5a:bd:70:b8:
e2:dc:39:66:7c:d3:03:6c:30:7c:e8:6d:2a:c0:28:14:cf:d4:
5c:03:07:d4:1a:b0:5e:c9:df:b3:a4:87:14:13:1d:af:65:6c:
71:93:d5:e2:9b:d6:9a:42:1e:28:6e:e0:74:4d:b8:81:5d:22:
0e:68:21:cc:ae:e4:8f:91:f8:b8:18:a9:f8:4c:a0:48:46:71:
0d:bf:a3:ad:09:6e:52:5e:bb:46:59:39:56:09:b5:9b:c5:9d:
b5:c8:27:20:9b:8a:b3:da:ce:cc:da:fd:51:13:4e:5f:8b:e2:
49:06:5f:42:8e:aa:85:b2:e9:fd:b0:e6:8d:77:cc:7e:cb:63:
35:cd:a2:10:ca:11:89:04:af:a7:2d:fb:66:0e:3c:68:59:cc:
46:1e:f5:0a:aa:a9:50:80:82:f8:27:b4:3f:93:ba:f3:60:42:
bc:94:41:12:c4:df:dc:b5:10:9c:b4:63:ce:27:e7:78:1b:2d:
9e:2e:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:12 2024 by rpki-client on console-fra.rpki-client.org