Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/ZZ7mmRiOEJKQ9oO2pSVrLdAd-CA.roa
File: ZZ7mmRiOEJKQ9oO2pSVrLdAd-CA.roa (raw, json)
Hash identifier: xRvv/PakNfIKlJGp4uIne07ga2jq1HS8sLbFy8gFpTU=
Subject key identifier: 65:9E:E6:99:18:8E:10:92:90:F6:83:B6:A5:25:6B:2D:D0:1D:F8:20
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018FB9B7830B748062D50097DFDF35005E00
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/ZZ7mmRiOEJKQ9oO2pSVrLdAd-CA.roa
Signing time: Mon 27 May 2024 11:02:42 +0000
ROA not before: Mon 27 May 2024 11:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 188.241.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:b7:83:0b:74:80:62:d5:00:97:df:df:35:00:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: May 27 11:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=659ee699188e109290f683b6a5256b2dd01df820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:f8:0f:c3:5d:cf:6f:e0:c3:17:43:15:55:
bd:07:e1:81:d8:66:87:f3:ff:23:be:b0:b3:49:f0:
cc:07:47:fd:3b:01:80:03:90:48:1b:64:a0:c9:a8:
fe:ec:7a:7b:36:1a:b2:aa:33:1b:ed:ad:ed:e1:4a:
22:3e:61:e0:da:3e:fb:89:3c:01:02:f6:e8:49:b3:
de:48:a3:c2:12:37:bf:a8:e9:92:6a:5b:d7:f3:39:
54:7d:93:82:bd:5a:43:ad:60:55:52:5c:d5:81:00:
31:33:60:7a:4a:5d:8d:62:3e:48:f6:eb:04:6b:83:
2e:4d:4c:81:99:da:46:33:7b:09:95:84:7e:2e:70:
73:7e:20:0f:00:01:85:82:35:35:22:9b:44:bc:ce:
d1:32:9b:b2:fe:69:00:f5:ec:47:0b:72:12:03:41:
98:03:f9:d8:1a:4f:b9:3c:d7:68:61:bd:18:f4:2b:
76:84:aa:40:c9:89:89:dc:ac:38:71:bd:a6:d3:08:
3d:ec:8a:45:30:6b:97:6e:e9:01:41:a3:14:69:bb:
c4:af:40:a8:c0:3c:51:5c:cc:9d:31:df:75:2a:ab:
44:7f:e2:66:b4:da:d0:5e:17:ed:18:70:f3:6d:71:
a8:46:19:df:cc:19:7a:ae:02:30:60:57:a1:76:0f:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9E:E6:99:18:8E:10:92:90:F6:83:B6:A5:25:6B:2D:D0:1D:F8:20
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/ZZ7mmRiOEJKQ9oO2pSVrLdAd-CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.192.0/24
Signature Algorithm: sha256WithRSAEncryption
25:cf:ff:01:42:d9:70:f0:d1:c4:7a:13:b4:13:a4:ef:30:d2:
72:d7:25:92:b3:bd:b4:d9:c0:80:59:d9:95:de:e8:79:f9:a5:
91:e7:80:66:dc:87:2a:a2:b8:f6:3c:93:a8:78:c8:49:3d:68:
1c:bf:2c:53:e3:72:f4:24:85:c8:b9:88:cd:b8:40:4c:80:ee:
3d:81:45:db:f4:15:86:d1:93:4d:77:32:d5:50:9b:7d:ca:10:
c7:b6:70:2c:a8:e9:cb:4b:21:86:30:29:95:32:bb:b8:55:26:
7b:f2:68:d2:ba:3c:8f:b5:c4:3e:0b:7f:f9:15:78:b1:60:5c:
48:ad:70:e0:82:bd:cc:7b:f2:f0:ec:c1:59:03:27:1f:cb:99:
e2:f2:bf:ea:44:d6:55:f6:6c:8f:d1:33:45:d1:2d:36:bd:45:
3e:e2:7b:d7:60:a9:00:46:27:26:b5:5a:5e:ea:04:61:6c:3f:
61:ac:8d:78:e2:76:56:bb:26:d5:71:57:17:96:9f:21:d2:60:
b9:2f:f5:2a:9b:4b:c6:1d:a6:b0:bb:c2:9e:d0:09:cd:a9:7c:
c6:bf:33:8a:81:3d:25:7d:8f:94:7f:09:ea:c1:0e:3a:9c:f4:
13:56:4b:1a:19:bb:4f:0a:01:09:d6:de:11:03:41:2e:49:b4:
1f:fa:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 12:52:51 2024 by rpki-client on console-ams.rpki-client.org