Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/z1KbbKSh0lIk9mUea3NxlSzD0FI.roa
File: z1KbbKSh0lIk9mUea3NxlSzD0FI.roa (raw, json)
Hash identifier: K2t6MM1HzUPBozEt6zV1LUgtWA1XbpcB6ZxFH/iRch0=
Subject key identifier: CF:52:9B:6C:A4:A1:D2:52:24:F6:65:1E:6B:73:71:95:2C:C3:D0:52
Certificate issuer: /CN=77358867f21914e152fbf46c8bcc06109abfe0f5
Certificate serial: 0186C619F79652990B51D95B01720F2C5046
Authority key identifier: 77:35:88:67:F2:19:14:E1:52:FB:F4:6C:8B:CC:06:10:9A:BF:E0:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/z1KbbKSh0lIk9mUea3NxlSzD0FI.roa
Signing time: Thu 09 Mar 2023 11:20:35 +0000
ROA not before: Thu 09 Mar 2023 11:20:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 195.211.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:19:f7:96:52:99:0b:51:d9:5b:01:72:0f:2c:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77358867f21914e152fbf46c8bcc06109abfe0f5
Validity
Not Before: Mar 9 11:20:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf529b6ca4a1d25224f6651e6b7371952cc3d052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:f9:ec:b0:0a:0b:bf:b1:be:1b:72:2f:f2:
36:12:28:a4:4c:b0:14:2d:4a:6d:4a:6c:ae:68:ef:
49:df:40:e4:5c:36:9f:04:0b:d8:d9:15:98:ab:d9:
4e:d3:99:18:af:ca:87:fb:9e:64:07:75:05:9e:cf:
78:c2:fc:4e:97:e1:01:71:cb:c7:05:63:8d:bd:cc:
84:e1:a2:57:f0:b1:76:c6:c0:08:67:85:1a:8c:ad:
55:8f:a9:ae:d2:14:a6:ad:59:98:22:31:17:c0:9a:
01:9e:14:85:95:a6:6a:61:6d:38:b3:d9:07:25:ec:
26:15:6d:4f:08:22:98:be:77:37:76:be:b3:a8:b4:
dc:7c:fd:27:94:06:64:9d:1c:f2:33:d9:02:a4:10:
62:1a:1d:3b:84:a1:46:6a:20:f5:af:09:b0:dc:51:
5e:eb:3b:eb:e6:3c:3a:92:f3:e3:4a:9c:a4:9f:5b:
3d:ee:4c:cc:01:10:ac:04:fb:d2:bd:68:1a:21:4c:
ca:70:55:78:44:a6:87:f0:34:ff:b2:ba:c8:75:a6:
16:17:d9:e6:98:ef:92:58:85:dc:f2:97:01:9e:79:
f9:bc:54:48:ae:0f:92:6e:26:ce:ee:a5:99:5d:fb:
23:8f:2a:8d:71:ed:e6:8d:c2:e7:f0:36:20:55:07:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:52:9B:6C:A4:A1:D2:52:24:F6:65:1E:6B:73:71:95:2C:C3:D0:52
X509v3 Authority Key Identifier:
keyid:77:35:88:67:F2:19:14:E1:52:FB:F4:6C:8B:CC:06:10:9A:BF:E0:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/z1KbbKSh0lIk9mUea3NxlSzD0FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ed3544-61a9-4998-b164-01eb6f656126/1/dzWIZ_IZFOFS-_Rsi8wGEJq_4PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f9:e2:94:5f:1d:e1:d3:cf:4f:ea:83:b1:38:06:c3:83:32:
87:a5:8e:8d:00:71:c8:c2:5b:4e:b3:02:dc:30:34:94:87:3c:
a6:ce:f9:2e:e2:2a:ec:37:f2:6e:03:cf:fc:54:e8:86:77:60:
f4:c8:cf:62:5e:17:33:5e:f8:83:6e:0a:03:a8:4d:8b:61:f8:
e7:54:c1:8d:01:6d:80:7a:55:85:03:1b:bc:5b:a6:3a:d9:0a:
9b:76:9a:ff:20:22:50:e9:1a:55:98:8c:b9:aa:46:03:02:82:
e2:cd:ec:ed:e3:df:b9:41:0e:54:72:92:3c:67:92:a7:47:59:
7d:e9:cc:ae:d4:d8:19:3d:d7:8e:fc:a6:30:0b:75:81:ee:f4:
6c:73:c1:9d:43:f5:15:9c:0d:b5:88:9c:d0:57:ff:4b:c0:b9:
1d:63:54:a0:e0:bb:0b:30:f9:82:9e:14:fb:57:0d:dc:e2:a5:
4d:eb:85:c1:ba:6e:cf:b1:29:a0:ce:eb:8c:12:0e:21:f2:53:
fd:d7:5d:6d:0e:19:84:dc:15:55:a4:9d:2c:be:83:0f:8a:ff:
e7:7a:86:cb:1a:41:0d:83:5c:b5:d3:c0:87:36:ad:92:a0:bd:
db:04:2f:04:a0:38:21:2c:71:52:dc:54:3c:f3:ce:59:2d:ca:
b0:3d:b1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:45 2024 by rpki-client on console-ams.rpki-client.org