Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/ZMb_5kwLtcGhIQFQIr0wBqETGk0.roa
File: ZMb_5kwLtcGhIQFQIr0wBqETGk0.roa (raw, json)
Hash identifier: adjvleMUFevCqYkL8kul9L9L1ksEKvrUhNqiv2Skz3k=
Subject key identifier: 64:C6:FF:E6:4C:0B:B5:C1:A1:21:01:50:22:BD:30:06:A1:13:1A:4D
Certificate issuer: /CN=2eac2dd8b1280594aef6becb195a55b451c7b09b
Certificate serial: 01856D9D09B24BEAB11EB8DCE9DF7C4B80E8
Authority key identifier: 2E:AC:2D:D8:B1:28:05:94:AE:F6:BE:CB:19:5A:55:B4:51:C7:B0:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lqwt2LEoBZSu9r7LGVpVtFHHsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/ZMb_5kwLtcGhIQFQIr0wBqETGk0.roa
Signing time: Sun 01 Jan 2023 13:54:46 +0000
ROA not before: Sun 01 Jan 2023 13:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49445
IP address blocks: 91.214.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:09:b2:4b:ea:b1:1e:b8:dc:e9:df:7c:4b:80:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eac2dd8b1280594aef6becb195a55b451c7b09b
Validity
Not Before: Jan 1 13:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c6ffe64c0bb5c1a121015022bd3006a1131a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:ce:fa:28:7e:07:f8:a4:0c:d4:ea:d3:0a:
07:3f:23:ff:6e:d5:0a:2b:02:e1:4d:ac:fd:28:ec:
be:39:4d:cc:4d:69:df:42:04:cf:17:af:10:bd:df:
e1:a3:1e:79:84:09:a0:d2:38:28:74:0b:b6:9f:49:
b4:83:d1:75:64:b2:c9:2c:42:9d:d1:52:38:56:d9:
54:81:45:82:b4:95:34:79:80:45:e6:db:2e:fb:b7:
90:84:2a:89:9c:19:ba:9e:57:00:51:56:61:c5:95:
e0:46:dc:a5:bc:08:28:48:00:1f:5d:50:a5:2c:a5:
b1:03:bc:f2:a8:6b:c4:e2:e6:fd:2f:11:fc:72:28:
9f:18:67:a5:eb:af:f6:d5:7e:4c:67:f5:d3:aa:84:
35:12:46:da:4a:f7:7a:29:29:81:8a:db:1b:a0:33:
a9:9e:33:d9:e7:8f:3d:c6:cf:61:75:56:54:c6:fa:
b1:8e:eb:7c:60:55:bd:fd:fb:b6:c7:25:d8:d8:1d:
45:ac:bb:6a:96:4e:7e:47:ce:bb:60:69:84:3b:d1:
92:40:09:48:d0:cd:ca:bb:21:92:a7:f2:ec:c2:f4:
73:62:e2:0a:f9:3c:40:70:9f:c6:e9:f5:b1:e5:fb:
b1:3d:e6:ef:a9:7d:2c:9e:fe:db:ac:fe:71:bd:c4:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:FF:E6:4C:0B:B5:C1:A1:21:01:50:22:BD:30:06:A1:13:1A:4D
X509v3 Authority Key Identifier:
keyid:2E:AC:2D:D8:B1:28:05:94:AE:F6:BE:CB:19:5A:55:B4:51:C7:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lqwt2LEoBZSu9r7LGVpVtFHHsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/ZMb_5kwLtcGhIQFQIr0wBqETGk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/Lqwt2LEoBZSu9r7LGVpVtFHHsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.112.0/24
Signature Algorithm: sha256WithRSAEncryption
34:27:8e:fc:e9:a7:7e:d1:2d:1d:b7:1c:4d:7e:3d:b0:ae:3b:
8b:09:bf:0d:00:58:86:3b:fc:cc:0e:e5:4b:cc:49:53:b9:3d:
75:d3:53:d3:6b:ff:24:f0:bd:53:a9:f2:4b:61:eb:22:ad:53:
e5:b5:34:ed:16:67:a3:ac:66:bd:37:8f:1d:db:ec:b4:0b:89:
a1:34:10:86:48:6b:31:9c:71:92:d6:a0:04:80:e7:66:fc:07:
07:a2:fd:12:48:c8:6e:37:53:28:09:83:cf:84:45:ce:57:87:
1d:24:78:b5:1f:b2:2c:18:72:37:a1:79:55:5b:61:67:cc:dd:
db:5e:8a:18:50:40:00:66:bc:94:e2:02:8a:64:36:92:b2:90:
b9:27:c3:2f:53:a0:f3:3d:1d:ce:ae:4c:42:d2:5f:8f:8f:61:
6c:3f:5a:b1:7e:e1:69:07:b7:6e:e1:b8:72:a5:ad:d0:fa:48:
4a:3d:0f:6b:8c:6a:4f:38:87:2f:65:9c:f9:c0:6e:2a:b8:de:
9d:39:7b:0f:00:0c:ec:88:53:97:de:24:ad:24:12:c2:18:63:
c5:c0:20:d4:4f:fa:28:de:9b:d8:22:a7:3c:a5:6d:a5:ee:cc:
e1:f3:61:2c:73:e2:5a:98:f9:d7:04:f5:94:63:58:79:0d:f4:
51:e0:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:37 2024 by rpki-client on console-ams.rpki-client.org