Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/be1adf-05ee-4701-9705-52489d715205/1/SZzo_61VXBe1fVeuOQra9nrzKhA.roa
File: SZzo_61VXBe1fVeuOQra9nrzKhA.roa (raw, json)
Hash identifier: RjIf5/QpeASuGYJk5OBX+W2F/xQ8EtsYh+L6sFSphHs=
Subject key identifier: 49:9C:E8:FF:AD:55:5C:17:B5:7D:57:AE:39:0A:DA:F6:7A:F3:2A:10
Certificate issuer: /CN=125b011f4fc2dbc72ae4ad480b851e7e46afb802
Certificate serial: 01856D8AEBF5280B1DB6B8EEE2D5021C200E
Authority key identifier: 12:5B:01:1F:4F:C2:DB:C7:2A:E4:AD:48:0B:85:1E:7E:46:AF:B8:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElsBH0_C28cq5K1IC4UefkavuAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/be1adf-05ee-4701-9705-52489d715205/1/SZzo_61VXBe1fVeuOQra9nrzKhA.roa
Signing time: Sun 01 Jan 2023 13:34:59 +0000
ROA not before: Sun 01 Jan 2023 13:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206844
IP address blocks: 185.174.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:eb:f5:28:0b:1d:b6:b8:ee:e2:d5:02:1c:20:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125b011f4fc2dbc72ae4ad480b851e7e46afb802
Validity
Not Before: Jan 1 13:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=499ce8ffad555c17b57d57ae390adaf67af32a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:19:c9:4b:ec:54:35:de:e3:22:05:8d:5f:
6a:03:ce:74:1b:ec:81:d1:a5:61:3e:86:2b:16:89:
c0:20:a4:0f:87:52:62:fd:4b:92:9f:cc:c3:ed:75:
40:26:d4:1f:02:2d:7e:4b:ed:aa:8b:21:2f:89:b1:
08:91:99:7b:d8:c3:f6:9b:a1:ee:ac:f4:26:19:99:
64:46:7b:73:92:62:57:3d:87:92:72:12:53:5a:64:
25:f9:45:a1:38:af:e2:26:da:b3:69:62:00:a7:e7:
10:95:f3:29:b1:73:1a:c1:b9:81:be:a4:28:8d:93:
97:1d:88:7a:a5:00:e1:7a:fc:68:7e:3c:1b:f7:30:
db:61:6a:45:ea:20:f7:07:00:34:de:18:d8:6e:ce:
03:b8:88:b0:1f:81:58:08:ce:b5:09:d9:ea:dc:9e:
85:4c:5c:80:c8:b2:7c:6d:b2:b1:70:0a:c1:82:04:
f9:14:d6:20:8b:ce:49:22:bd:a3:af:a5:90:b2:78:
49:72:35:e0:8c:df:50:5c:f9:65:e6:c1:74:eb:7f:
28:4d:63:da:e7:df:55:58:eb:5c:ce:5d:a2:79:ba:
82:fb:cb:d1:d0:09:2c:1a:5e:7f:69:34:d3:cd:52:
96:93:ae:01:50:91:ee:71:90:96:fc:3a:7d:17:e3:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9C:E8:FF:AD:55:5C:17:B5:7D:57:AE:39:0A:DA:F6:7A:F3:2A:10
X509v3 Authority Key Identifier:
keyid:12:5B:01:1F:4F:C2:DB:C7:2A:E4:AD:48:0B:85:1E:7E:46:AF:B8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElsBH0_C28cq5K1IC4UefkavuAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/be1adf-05ee-4701-9705-52489d715205/1/SZzo_61VXBe1fVeuOQra9nrzKhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/be1adf-05ee-4701-9705-52489d715205/1/ElsBH0_C28cq5K1IC4UefkavuAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.160.0/22
Signature Algorithm: sha256WithRSAEncryption
67:2d:e3:07:50:5a:f3:b8:88:77:02:e5:5a:6e:24:ba:35:23:
61:61:b3:01:4a:05:89:93:66:a3:ef:bd:51:40:58:ad:48:e0:
d2:8b:52:55:56:12:17:f9:41:bd:ab:d0:29:77:1f:d0:73:8e:
96:4b:68:cc:5d:09:1e:aa:5e:06:f6:83:28:6b:bd:b1:2a:8f:
29:56:45:fb:ac:b4:2c:8d:c0:a8:b3:6f:a1:0b:b5:df:e5:59:
f5:3b:97:03:dd:46:ac:2b:91:36:36:82:ce:6e:80:b6:67:af:
5a:96:e4:36:65:91:77:22:a0:72:d9:31:e2:55:64:a7:dd:d2:
3e:e0:7c:0d:b5:86:59:95:21:4c:ca:83:da:86:d3:dc:4a:74:
38:9d:4a:2f:69:c5:21:42:23:42:a1:3a:59:6e:96:62:99:a9:
99:98:5d:77:ef:95:7e:69:8f:d0:7c:df:8d:59:54:85:43:ea:
70:a6:57:d9:17:a9:94:e5:3d:1a:b5:3b:55:0d:62:86:cf:ee:
a3:5f:5f:d5:d4:da:0a:13:33:03:db:06:8e:53:1c:93:0f:3a:
22:f5:25:b6:bb:03:9b:e7:d9:8e:77:5c:7d:45:ac:11:6a:e7:
c9:10:d8:98:a6:b3:43:06:09:cf:9f:da:64:55:db:89:44:1d:
81:a5:e4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 16:25:09 2023 by rpki-client on console-fra.rpki-client.org