Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/zFgNZegqKe5c--7ZMiMhTY9rNYE.roa
File: zFgNZegqKe5c--7ZMiMhTY9rNYE.roa (raw, json)
Hash identifier: k+TqmojVKP6h77dia7x/0JTS42AkV23xT28bPJGMCvM=
Subject key identifier: CC:58:0D:65:E8:2A:29:EE:5C:FB:EE:D9:32:23:21:4D:8F:6B:35:81
Certificate issuer: /CN=d3202774b7de641d8ea18be56a75ff6098747618
Certificate serial: 018CC3B68CB307017D144263F3AA981CE207
Authority key identifier: D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/zFgNZegqKe5c--7ZMiMhTY9rNYE.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212137
IP address blocks: 45.150.56.0/24 maxlen: 28
109.95.124.0/22 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8c:b3:07:01:7d:14:42:63:f3:aa:98:1c:e2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3202774b7de641d8ea18be56a75ff6098747618
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc580d65e82a29ee5cfbeed93223214d8f6b3581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:26:96:16:58:3f:74:d4:30:3f:de:59:b4:
68:e9:8a:05:77:1b:d4:16:b6:5c:b5:d0:78:1c:5c:
71:bb:a6:9b:f2:3e:94:da:dc:d3:6a:73:70:ff:0d:
51:e0:13:3b:ee:82:67:6d:a1:c3:35:ae:a6:12:0d:
fd:a7:1a:f1:e8:6a:d8:7c:d9:d5:16:4b:b7:15:68:
d8:9c:a5:9a:db:15:08:ae:e1:7e:90:ba:9e:c6:e4:
54:95:ca:0c:f8:2c:d6:ea:e9:6e:54:8d:0d:29:29:
85:5c:7a:32:61:21:ef:dd:94:85:0c:e5:72:64:34:
4d:de:7c:1f:7c:4c:bb:0d:f2:02:79:96:02:5d:25:
df:a3:09:86:26:3d:ff:0b:cf:60:ff:73:58:ee:2e:
9f:b5:56:f1:63:21:b2:89:68:57:79:df:bd:2f:ff:
76:b6:20:9e:5a:e6:09:fe:d7:f6:b7:32:1d:77:7b:
55:e1:8e:01:6a:0b:92:ae:95:59:21:a6:d9:b5:3e:
40:ef:b1:43:3d:1b:03:91:09:ab:cd:d6:cd:6d:50:
bd:66:2d:6c:24:6b:91:8f:92:0c:e9:84:f1:3d:ca:
45:cb:bf:f0:a5:83:32:8c:bb:bb:1a:ee:2c:64:bb:
ca:7e:f0:cd:c2:69:7d:c6:b9:3f:b9:9e:78:05:9b:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:58:0D:65:E8:2A:29:EE:5C:FB:EE:D9:32:23:21:4D:8F:6B:35:81
X509v3 Authority Key Identifier:
keyid:D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/zFgNZegqKe5c--7ZMiMhTY9rNYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:d9:cc:29:a3:e0:fd:45:9a:9d:c4:5c:a4:8c:74:7f:d4:9b:
bc:b3:56:02:50:9c:6a:12:1c:b1:4d:b0:62:b1:5f:02:1f:52:
d0:92:fb:36:6b:8b:15:3c:83:58:74:d2:60:4d:41:1d:62:22:
92:b3:4e:a9:1a:cd:09:ae:df:f2:ff:fb:ea:76:75:82:74:22:
fe:d2:62:0d:4f:4a:ab:8d:76:2e:64:c4:43:db:ad:d9:1e:d2:
77:eb:a6:98:f9:d3:67:5d:29:c4:b5:db:de:6a:6a:b1:18:5e:
db:b8:90:b3:18:49:9d:22:86:5b:d6:70:94:66:8f:99:07:7e:
5c:3d:8f:4d:4c:72:54:43:0a:d3:23:27:d5:fd:7d:ea:5d:a4:
24:49:f7:61:ff:36:d0:9c:f5:cf:48:fa:b3:3d:20:6d:a2:19:
66:d4:2e:1c:0b:93:15:45:3c:90:14:4f:26:7d:81:77:8f:dc:
b2:0f:32:73:73:8a:04:1d:fd:94:71:1a:a9:cb:d5:72:f8:96:
99:7b:8a:40:65:b5:25:ff:b1:14:d6:68:ef:5c:3e:ef:c9:e0:
47:21:75:e6:5d:1d:cd:7f:22:a9:42:af:23:08:54:61:28:f5:
82:92:7c:ba:4d:36:ce:9e:17:7d:80:cf:03:82:cf:de:8d:d8:
ac:3b:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org