Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/abc2fc-ef03-4c6c-9248-afeba36a4fd1/1/ZPDlx1UN2ncL26noLNMguRIoJhg.roa
File: ZPDlx1UN2ncL26noLNMguRIoJhg.roa (raw, json)
Hash identifier: 02udW6SgodWTOOBx3LvuHQGAwzh3nX2SD6EgG2gpu1o=
Subject key identifier: 64:F0:E5:C7:55:0D:DA:77:0B:DB:A9:E8:2C:D3:20:B9:12:28:26:18
Certificate issuer: /CN=a1caac0682b291123a59f55df6afae25ef8243f9
Certificate serial: 0188303D7570E06E6D26CA837ADB7165CFD5
Authority key identifier: A1:CA:AC:06:82:B2:91:12:3A:59:F5:5D:F6:AF:AE:25:EF:82:43:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocqsBoKykRI6WfVd9q-uJe-CQ_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/abc2fc-ef03-4c6c-9248-afeba36a4fd1/1/ZPDlx1UN2ncL26noLNMguRIoJhg.roa
Signing time: Thu 18 May 2023 19:01:54 +0000
ROA not before: Thu 18 May 2023 19:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 83.138.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:3d:75:70:e0:6e:6d:26:ca:83:7a:db:71:65:cf:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1caac0682b291123a59f55df6afae25ef8243f9
Validity
Not Before: May 18 19:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f0e5c7550dda770bdba9e82cd320b912282618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:26:d0:d6:74:5f:59:30:cd:fe:8c:8c:fc:
0f:75:73:95:39:2f:5d:ab:e2:1c:27:f9:d1:3e:1c:
b5:b1:f0:bb:9e:f8:35:42:fb:b9:7a:0f:86:59:57:
1f:51:65:b4:d4:f4:93:fa:ef:d6:2a:a1:53:6e:bd:
14:e7:65:fd:57:e4:a8:36:f5:41:d3:07:6b:5f:32:
3c:2e:d2:ba:93:c0:60:6c:2f:75:4a:7f:27:06:ff:
03:cf:cd:80:64:e1:d0:39:57:87:6a:5a:ac:40:37:
9a:d0:57:e9:45:de:81:10:9d:8f:d2:05:19:24:85:
21:6a:d2:fa:1e:94:15:76:dc:79:4d:cc:9a:a0:f7:
f8:44:4e:25:a5:d7:1b:a9:92:81:d6:50:c3:36:a0:
80:7e:66:b3:64:02:24:62:63:0c:99:10:e7:a4:f7:
b6:fc:9e:49:5a:60:8a:b5:05:12:bd:a3:c4:fa:c5:
c8:cd:1f:ad:b0:a7:55:30:06:78:7a:0f:89:18:33:
e5:f1:ff:6d:31:51:cf:5b:b4:e9:d6:ba:8e:eb:55:
c4:f2:99:97:5b:a7:96:0e:26:70:fd:d5:9f:83:87:
d2:31:ae:dc:25:b8:b9:fd:bc:6f:a1:8a:80:76:ba:
d6:53:9c:cf:68:25:f7:d9:0f:8a:ca:41:93:60:58:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:E5:C7:55:0D:DA:77:0B:DB:A9:E8:2C:D3:20:B9:12:28:26:18
X509v3 Authority Key Identifier:
keyid:A1:CA:AC:06:82:B2:91:12:3A:59:F5:5D:F6:AF:AE:25:EF:82:43:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocqsBoKykRI6WfVd9q-uJe-CQ_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/abc2fc-ef03-4c6c-9248-afeba36a4fd1/1/ZPDlx1UN2ncL26noLNMguRIoJhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/abc2fc-ef03-4c6c-9248-afeba36a4fd1/1/ocqsBoKykRI6WfVd9q-uJe-CQ_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:33:af:2a:ec:14:b6:ef:04:6c:5b:9a:2f:b5:70:df:ec:7a:
0c:16:04:cf:98:2c:1c:29:42:ef:9d:53:38:b5:52:27:0d:3a:
42:1b:2c:49:a9:66:6d:54:78:47:04:74:63:b1:df:0b:60:f9:
be:ea:db:96:0d:34:3a:ba:99:f7:cf:24:33:5d:74:b0:a8:34:
18:a9:ed:17:0a:5b:1e:5b:f1:44:ee:2d:21:9a:74:96:b9:5a:
f9:ff:1e:ba:81:39:94:e5:b6:65:3f:8c:24:b4:f4:ff:40:bd:
d3:84:d6:b1:d5:20:23:23:d9:d4:bc:c7:3b:65:de:c5:cb:44:
fa:61:5c:fc:b6:2a:a8:70:19:2d:fd:34:fa:0f:fb:2a:7d:12:
f4:74:57:dc:d0:2f:2c:e4:82:0f:6e:9e:96:83:5a:76:83:fc:
07:eb:56:79:ae:8c:70:2a:6f:2b:ae:ff:85:28:0f:b5:8c:a3:
80:4b:1a:91:be:d5:8f:e3:70:c1:89:8a:a8:a9:41:b4:75:f9:
d5:89:b7:c2:98:9f:d1:20:9f:28:90:d9:48:b7:70:0c:7f:51:
f4:0b:17:f4:23:1e:63:58:5e:7f:9a:ce:6d:2b:cb:14:d6:4f:
6f:54:ed:99:80:f7:41:26:04:99:7e:a4:4d:9f:37:9c:ea:0f:
cc:ea:fb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:36 2024 by rpki-client on console-ams.rpki-client.org