Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/ZtQcGf_PstKLTDa9pCxjaNaNznw.roa
File: ZtQcGf_PstKLTDa9pCxjaNaNznw.roa (raw, json)
Hash identifier: eTKWnBaeZ8eo3uVLPFB3YwKjzJkTfQ5QrECQUN/ZXeE=
Subject key identifier: 66:D4:1C:19:FF:CF:B2:D2:8B:4C:36:BD:A4:2C:63:68:D6:8D:CE:7C
Certificate issuer: /CN=4b3152f0d77e057fb2c9bf80d803329879440776
Certificate serial: B50D67
Authority key identifier: 4B:31:52:F0:D7:7E:05:7F:B2:C9:BF:80:D8:03:32:98:79:44:07:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/ZtQcGf_PstKLTDa9pCxjaNaNznw.roa
Signing time: Sat 01 Jan 2022 02:50:58 +0000
ROA not before: Sat 01 Jan 2022 02:50:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48715
IP address blocks: 91.247.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11865447 (0xb50d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3152f0d77e057fb2c9bf80d803329879440776
Validity
Not Before: Jan 1 02:50:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66d41c19ffcfb2d28b4c36bda42c6368d68dce7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:7d:1e:50:eb:90:d8:33:b2:fb:0c:a9:e4:
a8:2e:e2:37:b4:b1:d5:28:50:30:23:e5:6e:0b:23:
fb:f3:10:e4:e1:d4:a4:23:3b:ae:f4:65:b0:1d:3e:
1e:f0:f6:db:70:ba:ae:02:d0:8b:02:f7:30:37:7a:
c7:a7:f4:fa:c4:77:cd:a2:61:d0:8d:08:25:ca:b2:
94:fd:e5:ef:fe:83:4d:9b:45:45:9f:98:32:09:dd:
f0:67:f7:9d:3c:9b:83:7c:fe:8d:00:a5:98:b8:e1:
76:df:17:80:44:ea:79:b4:03:f9:d9:be:ba:f8:5f:
96:b8:05:0f:16:d1:bc:e3:d2:eb:90:67:b6:36:f0:
4b:e2:98:c0:c3:3a:87:74:74:3d:72:96:b2:1c:d4:
77:da:a5:64:df:5f:41:ad:a8:df:02:96:e6:49:63:
87:e8:6d:2d:1d:84:1d:29:4a:89:37:3c:65:93:74:
bd:32:49:34:8d:49:c9:ff:9e:2c:67:60:d6:57:1d:
ec:e2:89:1a:c2:53:b5:7d:22:bf:e0:d3:db:e0:8a:
ea:05:c3:13:d2:d2:33:19:16:38:d5:b0:14:52:5b:
9a:21:0e:5f:a7:1d:db:3e:70:72:a6:30:06:7d:11:
43:ba:49:d1:cf:f2:28:e3:a7:61:1d:a5:d8:21:4e:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:1C:19:FF:CF:B2:D2:8B:4C:36:BD:A4:2C:63:68:D6:8D:CE:7C
X509v3 Authority Key Identifier:
keyid:4B:31:52:F0:D7:7E:05:7F:B2:C9:BF:80:D8:03:32:98:79:44:07:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/ZtQcGf_PstKLTDa9pCxjaNaNznw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.171.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:8a:26:85:22:2e:af:78:03:41:b2:24:e6:6b:b6:ba:b2:c4:
f7:bb:cb:99:7f:9a:25:4b:ab:12:98:ef:ea:df:70:e0:d5:52:
d3:12:b3:9e:b5:c7:ab:51:01:db:fa:c0:5e:27:2e:53:01:82:
87:26:e6:5e:eb:e6:95:75:2e:f1:04:0a:67:34:2b:fd:ad:da:
07:a9:23:85:4c:ac:1b:4a:f8:e4:60:61:d4:30:b6:26:b0:67:
26:ce:c9:6d:5d:b3:b1:36:68:dd:cd:63:ad:34:b3:94:97:63:
ae:3e:cc:1c:94:a1:c4:22:f2:fd:8a:08:1a:04:1d:28:d1:ba:
b7:eb:4c:0d:38:0d:1f:22:fb:c4:90:be:d5:89:ad:f2:08:45:
c8:dd:31:45:78:e5:17:32:46:44:db:96:c1:77:bf:d1:cc:a2:
a4:91:c6:9f:6e:21:b1:dc:43:58:ee:e8:91:f6:69:c4:61:3a:
e4:22:47:99:62:6a:5d:36:54:46:fb:de:b7:8c:2c:69:e9:0b:
6f:86:b3:fb:7a:a7:2c:c2:e5:f0:90:f0:71:da:15:b7:60:17:
a6:10:1d:b6:de:0e:c5:23:38:81:20:47:26:4f:01:d0:ee:29:
58:58:9b:87:92:91:30:b8:e1:1f:4d:81:5b:68:4b:02:54:6d:
aa:ea:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:01 2024 by rpki-client on console-ams.rpki-client.org