Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/19c428-6f77-4fdd-b388-c14b72f0ebd9/1/NZ-aT2i1LJmhxFU-513W6m13opc.roa
File: NZ-aT2i1LJmhxFU-513W6m13opc.roa (raw, json)
Hash identifier: nwQPniUFY9iApKaO8jGUWfBRgpdThoAlKVo7kFR3P9g=
Subject key identifier: 35:9F:9A:4F:68:B5:2C:99:A1:C4:55:3E:E7:5D:D6:EA:6D:77:A2:97
Certificate issuer: /CN=1bd7b74778f71513720ef7e98ff2e6e80b6f649e
Certificate serial: 01856FCBB612FB53D5211544CDE917E7B613
Authority key identifier: 1B:D7:B7:47:78:F7:15:13:72:0E:F7:E9:8F:F2:E6:E8:0B:6F:64:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/19c428-6f77-4fdd-b388-c14b72f0ebd9/1/NZ-aT2i1LJmhxFU-513W6m13opc.roa
Signing time: Mon 02 Jan 2023 00:04:59 +0000
ROA not before: Mon 02 Jan 2023 00:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209772
IP address blocks: 185.68.129.0/24 maxlen: 24
185.68.130.0/24 maxlen: 24
185.68.130.0/23 maxlen: 23
185.68.131.0/24 maxlen: 24
185.68.128.0/23 maxlen: 23
185.68.128.0/24 maxlen: 24
185.207.161.0/24 maxlen: 24
185.207.162.0/24 maxlen: 24
185.207.162.0/23 maxlen: 23
185.207.163.0/24 maxlen: 24
185.207.160.0/24 maxlen: 24
185.207.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b6:12:fb:53:d5:21:15:44:cd:e9:17:e7:b6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd7b74778f71513720ef7e98ff2e6e80b6f649e
Validity
Not Before: Jan 2 00:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=359f9a4f68b52c99a1c4553ee75dd6ea6d77a297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:08:75:91:51:16:5d:46:ae:39:86:10:d0:
5d:96:a7:5d:24:e1:2e:5e:4b:80:13:09:85:fb:fd:
00:95:59:aa:71:b4:fe:a6:2f:86:83:9e:b5:8d:a2:
f9:86:98:93:a6:06:00:aa:bb:68:5c:c7:db:0c:9a:
8f:44:61:d7:0e:2d:cd:88:bd:27:65:38:ce:37:76:
3b:da:50:4a:9f:d6:ac:e9:a1:01:ec:1a:f6:07:c0:
25:60:e5:ff:50:ee:7f:9b:15:71:a4:73:9c:0b:f1:
8d:cd:9c:17:30:ec:00:53:89:db:0b:73:6d:95:de:
b2:b5:7f:e0:34:7b:20:38:0a:9b:f6:b6:f8:58:37:
8b:84:10:c1:8e:86:8c:e3:f5:74:eb:26:f2:d1:50:
49:a8:34:e9:df:02:86:f2:02:2d:66:17:15:3a:3d:
50:a8:78:7b:8a:8c:2c:e3:a0:82:7f:5c:a1:53:11:
30:3c:b7:ae:9c:86:ce:70:80:68:f0:50:fb:49:9d:
47:a1:4b:bc:d1:8b:4f:29:c0:14:1b:c0:d2:79:08:
d7:44:cc:fd:08:89:49:25:20:99:84:9f:ab:45:2b:
ab:d3:bb:bd:9e:b1:ae:01:0f:ff:79:6a:37:22:c1:
83:61:47:c0:9c:38:01:fb:6f:ba:79:de:48:8a:31:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9F:9A:4F:68:B5:2C:99:A1:C4:55:3E:E7:5D:D6:EA:6D:77:A2:97
X509v3 Authority Key Identifier:
keyid:1B:D7:B7:47:78:F7:15:13:72:0E:F7:E9:8F:F2:E6:E8:0B:6F:64:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/19c428-6f77-4fdd-b388-c14b72f0ebd9/1/NZ-aT2i1LJmhxFU-513W6m13opc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/19c428-6f77-4fdd-b388-c14b72f0ebd9/1/G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.128.0/22
185.207.160.0/22
Signature Algorithm: sha256WithRSAEncryption
18:10:36:da:98:6d:9e:47:e6:ee:2b:04:80:e5:c2:57:82:e9:
b2:95:0d:93:2d:58:f5:67:d4:4c:b7:bb:5b:59:13:79:a9:16:
93:05:0d:a8:f7:93:83:52:28:5f:8c:09:2d:11:75:9c:09:75:
d9:f6:63:56:84:80:9e:da:7a:22:a8:9f:bf:94:49:d2:b9:ef:
2e:ab:18:5b:07:1c:18:72:74:cd:34:3b:12:b3:ef:d0:b8:84:
82:a4:c2:ce:44:1d:bd:8e:03:1b:c4:ec:c2:c6:66:b2:56:ab:
3e:97:a4:e0:b2:7a:bb:50:14:2f:0f:7a:6a:26:55:5e:24:db:
a5:e3:ab:0b:14:07:5b:84:04:16:6d:f1:56:38:bd:de:c0:cf:
ff:1e:7b:26:4b:e6:c0:0d:cb:38:9c:f6:94:dd:a7:0a:ec:11:
2e:66:61:7d:71:4f:e1:47:ea:21:94:70:ef:f5:68:69:c6:47:
27:da:3b:87:b8:41:c8:9c:90:3b:eb:67:8f:6b:6f:49:2c:1e:
06:6e:5e:7b:4c:07:7a:f2:02:30:72:f2:81:b3:ce:0e:bb:ab:
f3:3b:b1:63:53:13:16:c8:e5:04:95:4e:04:c7:c3:19:ba:23:
15:52:f0:c4:71:83:6e:04:c6:c9:b4:7c:39:4c:1a:62:7d:85:
cd:1f:0a:a7
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 13 11:15:15 2023 by rpki-client on console-fra.rpki-client.org