Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/zshCLPd0z986opUydVhy2kKw5a8.roa
File: zshCLPd0z986opUydVhy2kKw5a8.roa (raw, json)
Hash identifier: jCvkexa+/r7T1pQeFtoIuhPdczTc+NkPHxLgGUlR7ms=
Subject key identifier: CE:C8:42:2C:F7:74:CF:DF:3A:A2:95:32:75:58:72:DA:42:B0:E5:AF
Certificate issuer: /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial: 018868E2F6E0C28627931C03AE7FEA55F3D6
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/zshCLPd0z986opUydVhy2kKw5a8.roa
Signing time: Mon 29 May 2023 19:01:24 +0000
ROA not before: Mon 29 May 2023 19:01:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 93.113.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:68:e2:f6:e0:c2:86:27:93:1c:03:ae:7f:ea:55:f3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Validity
Not Before: May 29 19:01:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cec8422cf774cfdf3aa29532755872da42b0e5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4b:84:cf:67:d5:42:4b:b9:34:4a:15:dc:30:
07:83:07:cf:0b:b7:4f:b2:95:f8:0e:b8:23:dd:3c:
c4:7a:00:ff:91:7e:d5:84:8a:a0:03:26:81:1b:18:
24:22:d9:f8:2b:22:2e:19:04:89:b1:25:1f:9f:5f:
f4:ce:87:a5:f4:e0:f5:72:30:6a:36:7d:24:12:88:
ea:22:b9:02:f5:e3:b8:7e:48:9e:05:77:55:fc:61:
93:65:a7:2c:53:97:cd:b4:de:2a:98:28:8e:f9:9f:
fe:40:20:31:8f:0c:c7:49:80:de:7b:9a:21:06:1e:
43:c8:4a:5b:16:c9:4c:3b:6f:2c:f0:73:c3:7e:cb:
cd:ea:a9:ce:10:ff:ae:74:3a:15:7a:ef:ef:67:db:
32:eb:32:2a:cc:af:59:d2:c9:61:a9:53:a4:72:e8:
4a:fe:30:f7:ea:4d:18:af:36:31:f3:62:e8:ba:b1:
55:c2:12:16:a3:57:a6:61:2f:85:2a:1d:df:da:c9:
b6:1a:cd:fb:2d:23:d0:a7:99:22:09:59:4b:51:e2:
bc:e0:a3:b0:3c:a9:8c:20:2a:33:af:5f:9a:1f:2a:
d7:89:e4:73:b6:a2:de:eb:85:c6:4e:61:a6:b0:6a:
b6:c1:c6:28:87:04:6f:3f:ce:e8:aa:f0:fd:81:37:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:42:2C:F7:74:CF:DF:3A:A2:95:32:75:58:72:DA:42:B0:E5:AF
X509v3 Authority Key Identifier:
keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/zshCLPd0z986opUydVhy2kKw5a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e5:94:4f:af:db:e4:4f:10:0c:0d:4b:04:92:82:09:4c:10:
ec:6a:db:eb:14:c8:c8:df:d3:88:04:02:1e:ab:f6:b5:dc:90:
af:67:81:7c:6e:07:8c:57:07:30:c2:28:dd:56:53:7e:04:1f:
86:16:d8:a5:d3:e5:69:be:60:8c:19:58:d7:9c:93:16:81:2a:
0d:5e:c1:ac:f0:ee:85:8f:1a:9a:5b:9f:d5:61:34:08:f8:3d:
b2:46:ee:77:28:18:5a:8d:37:d3:0b:ff:80:92:c9:d0:69:cd:
21:e4:e7:41:93:4b:23:76:ba:6e:08:92:40:98:c9:d8:d5:35:
c7:f5:46:13:1e:51:f0:67:2d:65:fc:c3:c8:67:4d:95:ec:8d:
c4:7e:55:ab:ca:2e:84:68:56:4e:c8:13:c2:e5:8c:d0:41:75:
04:fa:ea:a1:e8:b0:03:a8:3d:4b:b9:7f:57:4c:eb:15:fa:ac:
c2:52:02:59:6c:15:1d:8a:45:e5:87:a3:f3:9a:6c:45:74:90:
a4:08:e0:d8:65:df:d6:6f:67:a5:f9:07:c2:0f:cb:1c:9f:e8:
81:4a:af:5f:6c:cc:d5:fd:b7:8e:43:3d:07:04:08:38:02:04:
b3:fd:c6:ee:e7:31:49:2a:a7:38:8b:3c:82:63:b3:29:3f:ab:
48:95:14:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYho4vbgwoYnkxwDrn/qVfPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTg2NDRhYzQ2MWRkZDJjZjRiYzVhZDVjMmI0MjYyNTM1
YzM4YzgwHhcNMjMwNTI5MTkwMTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWM4NDIyY2Y3NzRjZmRmM2FhMjk1MzI3NTU4NzJkYTQyYjBlNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUuEz2fVQku5NEoV3DAHgwfPC7dP
spX4Drgj3TzEegD/kX7VhIqgAyaBGxgkItn4KyIuGQSJsSUfn1/0zoel9OD1cjBq
Nn0kEojqIrkC9eO4fkieBXdV/GGTZacsU5fNtN4qmCiO+Z/+QCAxjwzHSYDee5oh
Bh5DyEpbFslMO28s8HPDfsvN6qnOEP+udDoVeu/vZ9sy6zIqzK9Z0slhqVOkcuhK
/jD36k0YrzYx82LourFVwhIWo1emYS+FKh3f2sm2Gs37LSPQp5kiCVlLUeK84KOw
PKmMICozr1+aHyrXieRztqLe64XGTmGmsGq2wcYohwRvP87oqvD9gTeOawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7IQiz3dM/fOqKVMnVYctpCsOWvMB8GA1UdIwQY
MBaAFMUYZErEYd3Sz0vFrVwrQmJTXDjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJoa1NzUmgzZExQUzhXdFhDdENZbE5jT01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZGY4NzUtMmEyMy00ZmU4LWIxZjAt
Y2ViZGVkMzZmODc4LzEvenNoQ0xQZDB6OTg2b3BVeWRWaHkya0t3NWE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZGY4NzUtMmEyMy00ZmU4LWIxZjAtY2ViZGVkMzZmODc4
LzEveFJoa1NzUmgzZExQUzhXdFhDdENZbE5jT01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXEZMA0G
CSqGSIb3DQEBCwUAA4IBAQAK5ZRPr9vkTxAMDUsEkoIJTBDsatvrFMjI39OIBAIe
q/a13JCvZ4F8bgeMVwcwwijdVlN+BB+GFtil0+VpvmCMGVjXnJMWgSoNXsGs8O6F
jxqaW5/VYTQI+D2yRu53KBhajTfTC/+AksnQac0h5OdBk0sjdrpuCJJAmMnY1TXH
9UYTHlHwZy1l/MPIZ02V7I3EflWryi6EaFZOyBPC5YzQQXUE+uqh6LADqD1LuX9X
TOsV+qzCUgJZbBUdikXlh6PzmmxFdJCkCODYZd/Wb2el+QfCD8scn+iBSq9fbMzV
/beOQz0HBAg4AgSz/cbu5zFJKqc4izyCY7MpP6tIlRRF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:07 2024 by rpki-client on console-fra.rpki-client.org