Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/ZDZPLmPiYCb7IrrXeUpfn9eLOB4.roa
File: ZDZPLmPiYCb7IrrXeUpfn9eLOB4.roa (raw, json)
Hash identifier: 0B1Ulx0dDlIDbzyMiBde8AiQ/gjbA9GVcsQhyBOafWg=
Subject key identifier: 64:36:4F:2E:63:E2:60:26:FB:22:BA:D7:79:4A:5F:9F:D7:8B:38:1E
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018582CBA3E3E8283CD2445C1F56DE201BB0
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/ZDZPLmPiYCb7IrrXeUpfn9eLOB4.roa
Signing time: Thu 05 Jan 2023 16:37:41 +0000
ROA not before: Thu 05 Jan 2023 16:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136557
IP address blocks: 45.8.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:cb:a3:e3:e8:28:3c:d2:44:5c:1f:56:de:20:1b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 5 16:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64364f2e63e26026fb22bad7794a5f9fd78b381e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:3e:38:2c:44:42:01:a1:76:9c:8e:30:af:
89:b8:f3:2d:75:23:83:92:05:80:bd:08:aa:d9:88:
f2:ee:10:9d:7d:fc:e4:2d:36:3d:4a:fb:dd:9a:ff:
c7:c6:59:e7:04:f9:27:b7:2c:5a:73:f2:78:fc:0d:
31:cc:41:67:8c:66:d0:0c:f9:a9:f1:f2:0d:2e:04:
70:61:82:aa:b6:5d:a4:d0:ab:8a:b8:b8:c9:3e:ce:
f2:09:1c:f9:45:36:03:cb:2f:8a:4f:62:3e:ef:79:
dc:5a:2f:2d:ae:32:7f:4c:e4:c2:1e:dd:3e:ae:66:
30:55:31:74:e0:c8:9f:70:6c:a0:f6:26:84:30:28:
c3:77:19:44:8d:1e:3c:72:30:b0:b6:d0:5e:69:d6:
be:79:5a:bd:18:a6:21:af:aa:e0:f7:57:27:0a:cc:
23:33:ca:e9:89:b5:50:c7:fd:8b:be:af:55:d9:27:
f1:04:c8:1a:6b:d9:09:4a:d7:b4:ed:d4:fa:cd:ac:
94:62:54:05:82:ab:dd:d4:df:d4:da:e4:c7:0a:e7:
3f:f4:a9:51:c0:bb:fc:d1:c7:df:af:7d:0d:0d:2c:
81:65:2b:d8:7c:83:36:ed:15:b7:23:65:c9:ef:0e:
43:f5:02:4b:22:b1:2a:99:a2:aa:df:5f:44:37:7b:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:36:4F:2E:63:E2:60:26:FB:22:BA:D7:79:4A:5F:9F:D7:8B:38:1E
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/ZDZPLmPiYCb7IrrXeUpfn9eLOB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:08:a0:25:18:bf:c1:ee:0f:73:41:43:8f:8f:29:b4:81:12:
e0:37:d6:8b:a8:cb:2d:3b:af:1d:8f:13:53:56:e3:e5:a3:fe:
b7:6d:0f:ff:b1:2e:df:84:af:5c:de:e0:5f:d2:9b:cc:eb:3a:
63:02:5f:98:1f:88:13:ab:d0:51:37:b4:81:cb:9f:7b:f1:c0:
9d:9c:f7:d7:f4:9f:26:6c:dc:53:26:29:96:8f:d0:f3:22:eb:
3f:b0:0c:fd:10:1c:2d:08:9d:b5:f2:e5:68:40:18:68:bd:24:
b2:2e:9f:bc:0b:2d:c3:11:78:b5:62:bc:02:7f:51:de:ff:ec:
12:90:ce:c6:ad:09:b2:75:7a:43:f4:e7:38:24:1a:c4:48:33:
d6:4c:e3:aa:f1:c5:26:6a:4b:02:b3:11:30:7a:17:26:17:51:
60:a7:83:05:15:72:83:94:90:e7:14:cf:8d:fe:2d:27:63:6c:
8c:17:ac:25:ae:51:a9:fc:69:58:e1:bf:7a:bc:c0:af:f5:2b:
6b:dd:8a:7d:b7:0f:01:cd:7e:50:c6:01:a2:11:cd:89:79:8c:
68:7b:11:d3:5b:06:f0:60:c6:0c:4a:44:19:bb:42:d7:f7:18:
7c:c8:1d:33:0b:8e:02:65:25:68:28:f4:97:3c:a1:94:c1:4b:
33:9b:bd:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWCy6Pj6Cg80kRcH1beIBuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDAzOTM5OTAxN2ZhMDkzZGM4ZDUwMzc5OWY2Y2E0MDNm
MGJkMDUwHhcNMjMwMTA1MTYzNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDM2NGYyZTYzZTI2MDI2ZmIyMmJhZDc3OTRhNWY5ZmQ3OGIzODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYI+OCxEQgGhdpyOMK+JuPMtdSOD
kgWAvQiq2Yjy7hCdffzkLTY9Svvdmv/HxlnnBPkntyxac/J4/A0xzEFnjGbQDPmp
8fINLgRwYYKqtl2k0KuKuLjJPs7yCRz5RTYDyy+KT2I+73ncWi8trjJ/TOTCHt0+
rmYwVTF04MifcGyg9iaEMCjDdxlEjR48cjCwttBeada+eVq9GKYhr6rg91cnCswj
M8rpibVQx/2Lvq9V2SfxBMgaa9kJSte07dT6zayUYlQFgqvd1N/U2uTHCuc/9KlR
wLv80cffr30NDSyBZSvYfIM27RW3I2XJ7w5D9QJLIrEqmaKq319EN3uwMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQ2Ty5j4mAm+yK613lKX5/XizgeMB8GA1UdIwQY
MBaAFGJAOTmQF/oJPcjVA3mfbKQD8L0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYt
MzI1OTQ5NmU3YzVmLzEvWkRaUExtUGlZQ2I3SXJyWGVVcGZuOWVMT0I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYtMzI1OTQ5NmU3YzVm
LzEvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjbMA0G
CSqGSIb3DQEBCwUAA4IBAQBPCKAlGL/B7g9zQUOPjym0gRLgN9aLqMstO68djxNT
VuPlo/63bQ//sS7fhK9c3uBf0pvM6zpjAl+YH4gTq9BRN7SBy5978cCdnPfX9J8m
bNxTJimWj9DzIus/sAz9EBwtCJ218uVoQBhovSSyLp+8Cy3DEXi1YrwCf1He/+wS
kM7GrQmydXpD9Oc4JBrESDPWTOOq8cUmaksCsxEwehcmF1Fgp4MFFXKDlJDnFM+N
/i0nY2yMF6wlrlGp/GlY4b96vMCv9Str3Yp9tw8BzX5QxgGiEc2JeYxoexHTWwbw
YMYMSkQZu0LX9xh8yB0zC44CZSVoKPSXPKGUwUszm72B
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:55 2024 by rpki-client on console-ams.rpki-client.org