Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/SYZ-ReroFsCEpwYK_57zGAZEg5E.roa
File: SYZ-ReroFsCEpwYK_57zGAZEg5E.roa (raw, json)
Hash identifier: Pno1lMp4Tx60ATt/Lz6DAVysV5ypiG3VcrtvKwmPrP8=
Subject key identifier: 49:86:7E:45:EA:E8:16:C0:84:A7:06:0A:FF:9E:F3:18:06:44:83:91
Certificate issuer: /CN=cc464d9f8f4e6fd19808857b27d3416c78a89633
Certificate serial: 018CC7258E2723EEF677E3BDC1A2ECB1E883
Authority key identifier: CC:46:4D:9F:8F:4E:6F:D1:98:08:85:7B:27:D3:41:6C:78:A8:96:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEZNn49Ob9GYCIV7J9NBbHioljM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/SYZ-ReroFsCEpwYK_57zGAZEg5E.roa
Signing time: Mon 01 Jan 2024 22:29:36 +0000
ROA not before: Mon 01 Jan 2024 22:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48264
IP address blocks: 195.178.117.0/24 maxlen: 24
195.178.116.0/24 maxlen: 24
185.232.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:8e:27:23:ee:f6:77:e3:bd:c1:a2:ec:b1:e8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc464d9f8f4e6fd19808857b27d3416c78a89633
Validity
Not Before: Jan 1 22:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49867e45eae816c084a7060aff9ef31806448391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:65:5a:ca:ae:a9:a7:44:ab:75:94:bb:2e:
9e:92:e7:ce:b2:a6:64:e0:90:74:58:72:47:b3:75:
a3:22:c1:1e:1f:af:41:4c:f3:16:c4:26:b6:d4:4c:
17:63:c2:c5:81:b7:20:34:8c:cb:16:2e:fa:23:1e:
6d:99:2b:ef:38:e5:f5:f1:79:a2:53:01:6d:86:56:
7e:ef:92:1c:0a:4a:82:23:13:31:65:7c:2a:01:d7:
90:ac:4e:b8:21:2c:f1:f0:99:58:0a:77:74:b8:52:
5c:ff:02:94:ab:38:d3:71:ae:68:46:7f:b5:e2:d3:
15:2e:fc:e3:ff:83:2c:c9:77:0b:2c:45:0b:89:40:
79:2f:b3:6e:97:00:dd:30:9c:ba:63:0f:c5:6a:76:
b2:b3:4e:de:70:0b:86:31:b9:80:8d:b4:ac:cc:08:
4f:44:f4:95:bd:8c:27:06:df:7c:c1:f1:df:53:de:
76:41:5b:0a:0d:86:74:6e:6c:6c:71:37:ce:be:be:
a7:c4:1a:0d:d3:e0:16:77:46:fe:47:92:e6:f8:7f:
0c:ff:f2:a0:ba:da:6a:b5:02:92:68:75:39:e7:c5:
fc:e2:cb:fc:5a:ea:e8:4a:dd:f3:78:bc:37:43:26:
85:1d:28:30:e2:74:21:78:cd:0e:22:e9:c4:be:1f:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:7E:45:EA:E8:16:C0:84:A7:06:0A:FF:9E:F3:18:06:44:83:91
X509v3 Authority Key Identifier:
keyid:CC:46:4D:9F:8F:4E:6F:D1:98:08:85:7B:27:D3:41:6C:78:A8:96:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEZNn49Ob9GYCIV7J9NBbHioljM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/SYZ-ReroFsCEpwYK_57zGAZEg5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/zEZNn49Ob9GYCIV7J9NBbHioljM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.128.0/22
195.178.116.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:54:98:bd:32:45:a5:1f:28:d0:18:e0:a7:1a:4b:54:3a:2a:
d8:92:34:e3:80:a4:8b:8c:b0:9d:29:d7:8f:54:be:a6:20:a6:
98:a8:2a:77:b5:d3:88:67:1a:c9:52:08:36:a6:c0:63:e3:25:
11:6d:ab:a3:13:6e:5a:dd:be:39:7d:3d:c6:d6:79:b3:1b:ae:
01:49:0d:42:9e:96:c8:0a:4b:50:78:b3:40:4b:8e:1b:e6:de:
29:0e:74:7e:9e:ed:0e:41:02:c9:43:c0:c9:2c:d4:6d:7f:e1:
13:8c:05:cb:6b:20:60:e6:4f:70:de:ed:a5:c5:70:b1:97:11:
64:78:95:d2:bd:8d:38:f7:c5:b2:32:b1:eb:d3:9f:19:98:26:
b6:9a:9c:9f:34:fc:0b:b1:18:eb:1c:7f:fb:e5:02:26:6c:37:
84:31:14:71:a9:9e:9d:d3:d4:b5:89:ac:17:f7:36:d4:68:f7:
dc:1e:24:d9:a0:09:4b:32:83:b2:f7:08:bf:35:1f:c8:db:75:
58:3e:53:0f:25:1b:4d:d5:b5:d6:b9:50:0a:e2:e1:97:01:9b:
21:6a:2b:1b:6e:3e:07:c1:5b:64:bb:a8:a1:2a:9a:19:cf:90:
0b:b7:ce:ea:9c:47:08:29:16:69:3e:b8:86:4b:b9:41:c1:52:
8a:b1:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:46 2024 by rpki-client on console-fra.rpki-client.org