Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/ZxnN29UQljWVT8iSTsNEuo8pIrA.roa
File: ZxnN29UQljWVT8iSTsNEuo8pIrA.roa (raw, json)
Hash identifier: ZqcXebJQERt1fUo332F699f+/gPrYwmGcchCtZO+h64=
Subject key identifier: 67:19:CD:DB:D5:10:96:35:95:4F:C8:92:4E:C3:44:BA:8F:29:22:B0
Certificate issuer: /CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Certificate serial: 05BA6723
Authority key identifier: B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/ZxnN29UQljWVT8iSTsNEuo8pIrA.roa
Signing time: Sat 01 Jan 2022 00:55:31 +0000
ROA not before: Sat 01 Jan 2022 00:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42237
IP address blocks: 193.105.134.0/24 maxlen: 24
91.236.116.0/24 maxlen: 24
185.217.0.0/22 maxlen: 22
185.246.130.0/23 maxlen: 23
185.246.128.0/22 maxlen: 22
2a0d:8986::/32 maxlen: 32
2a0d:8985::/32 maxlen: 32
2a0d:8982::/32 maxlen: 32
2a0d:8981::/32 maxlen: 32
2a0b:c040::/32 maxlen: 32
2a0d:8987::/32 maxlen: 32
2a0d:8984::/32 maxlen: 32
2a0d:8980::/32 maxlen: 32
2a0b:c041::/32 maxlen: 32
2a0d:8983::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96102179 (0x5ba6723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Validity
Not Before: Jan 1 00:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6719cddbd5109635954fc8924ec344ba8f2922b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:d2:4d:0c:ba:c3:29:eb:b8:30:30:0c:87:
18:5e:af:a2:89:22:ea:e7:8a:d1:c4:c7:b8:d2:aa:
15:b2:9f:55:85:79:8e:86:f9:56:50:9b:e2:b1:71:
61:f9:4a:eb:08:07:e3:a7:79:56:80:6d:c4:27:a8:
77:67:4c:ff:00:9d:b0:6c:af:9e:ca:46:6b:30:ea:
2d:40:a5:d5:b3:f4:8f:14:41:7d:13:8f:a7:15:60:
e2:0c:c7:8a:65:4f:b6:f7:e5:39:5c:62:8a:b5:d9:
67:cc:d2:39:9d:84:36:15:ec:89:ae:0e:29:fe:07:
c2:b3:b2:83:c5:34:c8:bc:dc:c9:5d:55:b7:4d:9d:
b0:48:41:7f:85:3c:8d:00:cd:a2:da:74:ce:55:61:
dc:e0:36:39:04:6f:38:69:12:6d:7d:a7:11:16:ef:
71:f7:10:24:5b:84:5d:84:ca:00:09:20:40:fd:69:
cd:7f:18:03:b9:6e:20:ff:d6:af:99:52:af:6b:6f:
19:f5:a7:50:f3:1a:3b:a1:e9:8e:ed:50:7c:06:b3:
98:4f:00:0f:f1:c6:26:2d:95:8b:53:1f:b2:68:cf:
52:42:76:0a:c7:d4:d0:36:32:34:ab:9c:7c:11:78:
ed:d3:6a:65:1c:af:18:b9:29:c7:dc:16:18:07:cb:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:CD:DB:D5:10:96:35:95:4F:C8:92:4E:C3:44:BA:8F:29:22:B0
X509v3 Authority Key Identifier:
keyid:B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/ZxnN29UQljWVT8iSTsNEuo8pIrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/swv12Qhf5a_l4gHXwjbO-b6SNa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.116.0/24
185.217.0.0/22
185.246.128.0/22
193.105.134.0/24
IPv6:
2a0b:c040::/31
2a0d:8980::/29
Signature Algorithm: sha256WithRSAEncryption
57:5c:7c:e0:50:cf:a5:92:55:ed:ae:e8:c6:41:35:92:6c:1c:
7b:9d:d9:73:c5:cf:d0:a5:c9:c5:ed:48:a4:54:a2:59:6c:5e:
23:49:58:cb:45:35:d0:87:36:49:fa:08:b7:79:31:03:69:17:
f5:73:65:ba:71:b2:d5:50:62:02:d2:fe:ff:b1:29:cc:47:66:
5d:9f:e8:67:21:d7:39:e2:8c:c5:ac:f1:e1:2e:ad:06:f3:e1:
f8:c0:5d:15:41:f1:7f:fa:3d:e7:90:6d:40:4b:73:3b:d9:f3:
5c:a9:85:d5:07:71:87:88:e3:66:db:77:66:6a:3c:44:bf:33:
a0:99:f3:18:60:a2:a2:fd:86:9f:fa:66:e4:f2:42:86:5f:36:
22:0f:57:6b:6f:41:33:da:42:d6:db:96:65:55:c2:8f:86:5f:
63:be:27:d5:30:5b:d3:28:2c:10:c1:88:ea:ef:f6:5b:80:90:
86:65:f6:4d:fc:a8:e5:d6:62:f3:ec:d1:b7:49:63:dc:32:7b:
09:61:5f:66:c3:4b:d4:b3:86:2e:5e:57:d7:e5:07:31:e3:0d:
ac:b1:89:99:98:d2:13:60:84:9a:2b:94:f0:65:bb:17:ce:fa:
33:91:f6:8d:de:e3:27:d7:9c:64:03:65:25:b3:dc:ee:08:58:
5c:58:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:55 2024 by rpki-client on console-fra.rpki-client.org