Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/zcs9DOvO2pnV9_NajNDMMiAmZJs.roa
File: zcs9DOvO2pnV9_NajNDMMiAmZJs.roa (raw, json)
Hash identifier: 6b8j1QtYEQg9c5Pw3m8G2EJ/Twxp3tZVQm1Mk2yBGNs=
Subject key identifier: CD:CB:3D:0C:EB:CE:DA:99:D5:F7:F3:5A:8C:D0:CC:32:20:26:64:9B
Certificate issuer: /CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
Certificate serial: 0189C7891B04F530F8D4481E57FE59BCB252
Authority key identifier: B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/zcs9DOvO2pnV9_NajNDMMiAmZJs.roa
Signing time: Sat 05 Aug 2023 21:09:58 +0000
ROA not before: Sat 05 Aug 2023 21:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.26.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:89:1b:04:f5:30:f8:d4:48:1e:57:fe:59:bc:b2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3efea3a72faf0df4322cdaab9a136d79de8a3ef
Validity
Not Before: Aug 5 21:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdcb3d0cebceda99d5f7f35a8cd0cc322026649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:93:9c:f7:09:b5:56:bd:ad:9e:e7:c0:67:
98:21:60:3a:7d:ef:05:82:56:37:41:06:c2:d2:f3:
8c:c0:8f:b5:7a:a7:be:0f:21:fa:d0:9c:aa:b2:22:
c1:dd:e9:2d:63:8c:c6:fc:e7:6a:91:43:25:9c:68:
d9:03:62:04:ca:f1:b8:95:4c:03:f7:27:c6:c0:0e:
cc:9b:19:f3:4b:9d:73:11:0a:38:2d:ea:16:62:49:
84:da:bc:bc:8b:c8:4c:d4:89:7d:ad:06:e7:0e:14:
4c:78:a8:ca:e7:81:0b:26:53:28:22:db:31:7a:af:
73:a4:22:3b:b4:92:6d:ef:3f:a2:9a:f0:49:33:81:
78:ee:fb:47:b8:9f:6c:03:8f:69:cd:83:4d:98:06:
14:7c:18:27:27:89:36:34:ca:8f:de:e7:b1:59:35:
7a:31:8b:9a:23:e0:f0:1b:52:46:d6:e2:29:7a:e4:
5b:9b:bc:4e:06:5d:97:71:67:8a:cc:61:00:8f:14:
17:e3:c3:93:27:08:f2:5f:eb:77:f6:df:c6:4e:4c:
d1:12:b9:90:75:ff:54:7c:b9:79:fc:63:c3:36:44:
cc:47:c4:e4:3e:50:df:f1:f0:b3:48:7d:d3:5e:0c:
52:ba:3d:cf:fc:2d:3b:62:b2:43:7b:4e:c9:f2:5a:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:3D:0C:EB:CE:DA:99:D5:F7:F3:5A:8C:D0:CC:32:20:26:64:9B
X509v3 Authority Key Identifier:
keyid:B3:EF:EA:3A:72:FA:F0:DF:43:22:CD:AA:B9:A1:36:D7:9D:E8:A3:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-_qOnL68N9DIs2quaE2153oo-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/zcs9DOvO2pnV9_NajNDMMiAmZJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cd94f2-3b19-4826-a0eb-bfe221553f07/1/s-_qOnL68N9DIs2quaE2153oo-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b8:46:ae:fc:34:50:a6:70:71:ec:b9:57:91:d0:22:bd:14:
36:d0:9c:fa:e5:65:83:bc:21:0e:63:71:19:90:d9:7c:26:9c:
9f:24:1e:3e:93:31:0b:5f:ea:75:58:55:90:b9:d0:43:c9:98:
8f:50:ff:7d:7d:7d:c0:7d:7a:87:f3:cb:bf:de:42:e9:56:83:
d0:6a:93:6d:7f:c9:93:7b:28:67:50:26:0d:c2:58:7d:44:a0:
a7:fe:2f:c3:ed:73:03:99:21:9c:74:24:cd:e3:82:62:78:34:
78:9d:cf:8a:d9:c6:fc:81:50:e3:a9:a6:5d:5f:89:99:e3:29:
e0:f7:8c:1b:59:78:41:cf:8d:8c:e9:e7:e5:fd:eb:a8:d5:51:
ba:85:f1:30:70:5b:fd:f8:ad:52:71:05:09:43:25:46:ad:d8:
d0:ce:2a:ed:b5:e3:31:0e:90:d0:71:c0:13:a8:3f:31:90:64:
82:b8:a0:67:8d:e6:36:f4:2c:41:4f:87:7d:bc:fd:a6:e5:a8:
7f:16:31:6c:6b:2e:ee:10:bc:13:40:9b:7c:57:56:94:43:9f:
3e:9e:23:71:da:01:8c:dd:e6:a9:66:93:04:b4:c3:a4:0b:e8:
d3:70:0c:d8:2e:8b:2b:51:ba:46:23:24:0f:17:4c:ee:b8:47:
1c:ad:52:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnHiRsE9TD41EgeV/5ZvLJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZWZlYTNhNzJmYWYwZGY0MzIyY2RhYWI5YTEzNmQ3OWRl
OGEzZWYwHhcNMjMwODA1MjEwOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGNiM2QwY2ViY2VkYTk5ZDVmN2YzNWE4Y2QwY2MzMjIwMjY2NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBWTnPcJtVa9rZ7nwGeYIWA6fe8F
glY3QQbC0vOMwI+1eqe+DyH60JyqsiLB3ektY4zG/OdqkUMlnGjZA2IEyvG4lUwD
9yfGwA7MmxnzS51zEQo4LeoWYkmE2ry8i8hM1Il9rQbnDhRMeKjK54ELJlMoItsx
eq9zpCI7tJJt7z+imvBJM4F47vtHuJ9sA49pzYNNmAYUfBgnJ4k2NMqP3uexWTV6
MYuaI+DwG1JG1uIpeuRbm7xOBl2XcWeKzGEAjxQX48OTJwjyX+t39t/GTkzRErmQ
df9UfLl5/GPDNkTMR8TkPlDf8fCzSH3TXgxSuj3P/C07YrJDe07J8lo1QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM3LPQzrztqZ1ffzWozQzDIgJmSbMB8GA1UdIwQY
MBaAFLPv6jpy+vDfQyLNqrmhNted6KPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1fcU9uTDY4TjlESXMycXVhRTIxNTNvby04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jZDk0ZjItM2IxOS00ODI2LWEwZWIt
YmZlMjIxNTUzZjA3LzEvemNzOURPdk8ycG5WOV9OYWpORE1NaUFtWkpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jZDk0ZjItM2IxOS00ODI2LWEwZWItYmZlMjIxNTUzZjA3
LzEvcy1fcU9uTDY4TjlESXMycXVhRTIxNTNvby04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrXMA0G
CSqGSIb3DQEBCwUAA4IBAQBQuEau/DRQpnBx7LlXkdAivRQ20Jz65WWDvCEOY3EZ
kNl8JpyfJB4+kzELX+p1WFWQudBDyZiPUP99fX3AfXqH88u/3kLpVoPQapNtf8mT
eyhnUCYNwlh9RKCn/i/D7XMDmSGcdCTN44JieDR4nc+K2cb8gVDjqaZdX4mZ4yng
94wbWXhBz42M6efl/euo1VG6hfEwcFv9+K1ScQUJQyVGrdjQzirtteMxDpDQccAT
qD8xkGSCuKBnjeY29CxBT4d9vP2m5ah/FjFsay7uELwTQJt8V1aUQ58+niNx2gGM
3eapZpMEtMOkC+jTcAzYLosrUbpGIyQPF0zuuEccrVJ5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:16 2024 by rpki-client on console-fra.rpki-client.org