Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/ZkOuMEcirotQ_j16ES8yq-5ATuo.roa
File: ZkOuMEcirotQ_j16ES8yq-5ATuo.roa (raw, json)
Hash identifier: Z7SlTYeBrYrvRkQuZnL74SKeenHUhJCOpCzwMLJ+JuI=
Subject key identifier: 66:43:AE:30:47:22:AE:8B:50:FE:3D:7A:11:2F:32:AB:EE:40:4E:EA
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 09218132
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/ZkOuMEcirotQ_j16ES8yq-5ATuo.roa
Signing time: Mon 28 Mar 2022 22:39:19 +0000
ROA not before: Mon 28 Mar 2022 22:39:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213296
IP address blocks: 193.160.72.0/23 maxlen: 24
194.28.156.0/24 maxlen: 25
194.28.157.0/24 maxlen: 25
194.28.158.0/24 maxlen: 25
194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
194.104.5.0/24 maxlen: 25
194.104.6.0/24 maxlen: 25
212.69.134.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153190706 (0x9218132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 28 22:39:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6643ae304722ae8b50fe3d7a112f32abee404eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:a2:4b:8e:47:b8:ae:c8:8b:e5:63:5d:74:
69:ee:f5:10:be:fe:0c:70:1c:06:dc:2f:d1:f4:a0:
0c:ea:1a:05:02:fd:36:01:6d:38:38:f2:39:92:02:
77:76:bf:e7:2c:7e:a9:57:fc:57:bd:a5:b3:f7:2a:
9a:3f:27:cd:5e:72:74:ff:7e:a7:f6:ba:16:18:d1:
bc:14:35:59:fe:7f:a3:b8:5c:cf:2a:51:fb:c8:54:
03:4a:1b:4c:9f:93:6e:32:b6:51:14:95:17:5e:4f:
fc:41:d6:b8:e9:ad:67:be:88:1c:bd:55:d1:45:00:
ac:24:54:30:27:3e:68:ae:05:c3:62:67:e8:85:98:
cb:3f:3c:74:78:6f:b7:ac:03:e9:a1:f1:b4:b8:b0:
c9:57:77:a5:97:65:e0:3e:ec:f0:d5:53:9f:fe:86:
99:4b:c8:d3:a2:7f:27:bd:aa:75:84:5b:52:72:85:
c5:c9:b5:a5:ee:b0:e3:5c:a4:1b:ad:14:28:e1:66:
83:04:38:72:43:2f:51:15:60:9d:e2:a9:33:d8:a2:
f2:bc:91:88:a0:3e:f3:e2:27:30:59:3a:39:62:cc:
6e:a5:fb:08:d6:78:c1:01:07:e2:fe:37:b1:67:22:
f6:31:24:16:05:09:71:07:ee:77:51:66:41:6c:65:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:AE:30:47:22:AE:8B:50:FE:3D:7A:11:2F:32:AB:EE:40:4E:EA
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/ZkOuMEcirotQ_j16ES8yq-5ATuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.72.0/23
194.28.156.0-194.28.158.255
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
62:e3:04:3d:eb:a0:4b:20:17:0d:33:35:4e:89:35:19:7f:16:
6e:ef:0f:2f:97:56:ef:8f:ee:0e:29:f5:69:87:73:a6:0d:5f:
f5:3b:51:9e:de:03:6c:9b:72:bf:7f:58:06:44:f9:36:50:22:
db:5a:6c:0e:b1:62:a9:95:66:99:d6:27:71:72:a4:a5:79:87:
d5:cf:3c:d4:94:81:b3:c3:0d:d3:2d:0e:d5:6a:fc:64:e2:e5:
a7:e0:fb:72:56:7b:c4:10:50:c8:cd:cb:4c:a9:0c:a5:66:9b:
b9:c0:1b:f9:e4:9a:8f:f8:5e:33:62:bd:c2:c1:cc:38:ca:6b:
8b:6c:99:5a:e1:25:9b:68:ca:3a:81:36:ad:db:23:98:cb:37:
99:fd:36:41:2c:65:83:e5:4a:5f:7c:ec:44:37:4e:59:4c:ce:
5f:3e:55:17:6d:fc:60:4d:97:f3:1c:37:d0:14:5e:3e:10:4f:
28:34:f6:00:76:f5:dc:fb:e8:53:be:53:22:4e:07:fd:be:0d:
bc:0c:55:0e:92:fe:33:38:84:eb:a0:77:b8:43:0f:24:a2:06:
0a:8a:28:c6:5b:e8:8e:5d:e0:a9:77:91:49:96:78:e8:bd:7c:
8e:1e:ab:b6:d0:90:70:04:fa:90:c0:8c:b8:24:03:5c:61:9b:
12:27:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org