Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/pzlAT_32U2lwLgI7KJ84fhM9V10.roa
File: pzlAT_32U2lwLgI7KJ84fhM9V10.roa (raw, json)
Hash identifier: Vw71TmBGpDJZIdKo9PHDT3nk6PwNFMRinzzN5NRnvrE=
Subject key identifier: A7:39:40:4F:FD:F6:53:69:70:2E:02:3B:28:9F:38:7E:13:3D:57:5D
Certificate issuer: /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial: 01856D53DEA0E5B6FF6134B20CDEEAC96C7A
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/pzlAT_32U2lwLgI7KJ84fhM9V10.roa
Signing time: Sun 01 Jan 2023 12:34:50 +0000
ROA not before: Sun 01 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 193.169.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:de:a0:e5:b6:ff:61:34:b2:0c:de:ea:c9:6c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Validity
Not Before: Jan 1 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a739404ffdf65369702e023b289f387e133d575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ff:57:e9:ef:67:0e:1a:a7:8a:9e:29:8b:3e:
4e:f0:5c:25:7e:7d:2f:6d:8e:71:ad:ee:0c:29:83:
d2:d4:df:f2:29:3c:a4:47:35:25:5d:b1:0e:eb:6c:
c1:1b:55:b6:ee:ec:34:df:c2:77:51:d3:39:35:a1:
31:a1:f0:ee:d3:eb:00:33:a7:54:2f:0c:bf:68:a3:
fb:04:e7:27:60:d2:b1:e3:14:25:b2:c3:1e:bb:fb:
df:ec:91:b9:8f:d5:04:e5:eb:46:5d:20:1e:74:38:
60:ba:54:26:90:0f:53:51:b7:7e:00:f1:32:12:de:
09:7a:35:81:4d:99:96:f3:9c:17:7c:7c:6f:65:68:
b9:9e:af:91:5e:c9:ba:5b:96:42:09:8d:3e:f9:c4:
df:5c:f0:d4:0b:cf:b4:20:df:a5:e7:68:5a:e5:99:
14:03:0a:9f:31:f1:ee:1c:2a:54:2d:c2:60:3e:13:
99:af:47:cc:12:40:af:6c:93:c5:66:f1:2d:68:00:
e8:a0:c1:fc:bb:93:2f:26:a9:77:34:62:2f:ee:29:
98:08:41:b1:18:d9:9b:c5:28:b4:d7:49:18:95:67:
3d:c2:3b:f5:66:71:f4:a0:9d:4e:50:31:4b:f8:d4:
7d:1b:3a:76:b4:b2:2f:52:0a:67:0d:12:5c:32:8f:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:39:40:4F:FD:F6:53:69:70:2E:02:3B:28:9F:38:7E:13:3D:57:5D
X509v3 Authority Key Identifier:
keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/pzlAT_32U2lwLgI7KJ84fhM9V10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.238.0/24
Signature Algorithm: sha256WithRSAEncryption
42:44:fe:70:d1:e0:c0:20:8e:fe:3b:5b:c0:56:68:bc:78:ca:
50:56:5b:e2:63:af:2c:9f:db:58:9f:d1:d7:a3:bc:2c:35:b8:
ff:f1:be:57:ea:52:ff:43:8b:21:e7:2d:f8:01:06:2b:b9:55:
4e:f7:1c:32:3a:c9:67:67:80:94:24:95:13:cd:f7:21:08:a4:
f0:2c:cc:f6:3d:e4:73:81:60:c8:b0:e2:cc:13:e2:68:f4:1d:
31:d2:53:71:0b:3a:82:93:d7:fd:b9:0d:2e:2d:45:08:5b:29:
45:eb:62:19:8c:42:7c:6b:51:37:33:7f:b9:b3:d5:c2:f6:77:
b1:3f:37:00:4a:6f:89:b9:68:b5:68:d0:20:cd:6f:e2:90:01:
b2:fc:a4:04:c8:6e:8d:d9:cb:50:bf:f4:41:93:50:99:5c:e1:
89:b9:54:a4:95:8e:89:6b:a6:e1:1a:50:9b:4d:e6:af:51:a5:
40:d5:9b:44:73:46:76:3d:4f:25:50:d2:52:87:eb:0b:9c:2f:
89:44:48:f8:ac:c2:e4:da:70:c1:50:14:f5:18:a8:48:6d:e2:
57:b6:13:f3:cc:9e:92:3c:a2:5f:df:a5:cd:25:fb:06:c9:ec:
08:f3:78:c4:93:96:48:c6:d3:52:b1:b2:3d:f6:af:9b:47:3f:
2b:9e:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org