Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/ZsWmFJ1EiVTJogxd50yhIk_zokY.roa
File: ZsWmFJ1EiVTJogxd50yhIk_zokY.roa (raw, json)
Hash identifier: XGMpeAsDeOG5riF8IPxFXzSP6+wSwQB/CP9CdX5ElLI=
Subject key identifier: 66:C5:A6:14:9D:44:89:54:C9:A2:0C:5D:E7:4C:A1:22:4F:F3:A2:46
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 018571BA0BE4CC1FBB06B65DD0F625A85761
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/ZsWmFJ1EiVTJogxd50yhIk_zokY.roa
Signing time: Mon 02 Jan 2023 09:04:56 +0000
ROA not before: Mon 02 Jan 2023 09:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 176.118.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:0b:e4:cc:1f:bb:06:b6:5d:d0:f6:25:a8:57:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Jan 2 09:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66c5a6149d448954c9a20c5de74ca1224ff3a246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:f8:c5:51:bf:bd:c6:b8:92:c4:d4:d3:d7:
88:76:df:de:59:f4:16:b3:dc:33:d0:d5:da:e7:f6:
a5:79:9d:2b:fb:e3:47:14:c9:1c:3a:bc:38:9d:bd:
2f:0e:9f:ef:72:29:81:64:95:dc:8b:c3:2e:5b:66:
9e:bc:b7:89:a6:ef:c7:31:7b:5a:61:26:85:5f:aa:
48:bf:25:ea:a5:d0:e1:0a:fe:97:48:36:fd:46:b9:
bb:dc:c1:34:43:a9:dd:fc:8e:4e:76:a2:a3:b4:87:
a7:e0:0f:50:f6:68:59:c6:21:e6:9e:84:33:d8:08:
f6:bc:9d:4c:2f:e3:28:c6:67:fd:51:5e:2e:27:d0:
1a:6b:98:84:a7:82:b6:38:3f:cd:60:25:3e:f2:62:
19:57:6c:a5:d2:01:4e:6c:7d:31:99:54:63:00:be:
40:1d:1d:a4:46:f7:03:f2:ed:da:0b:93:23:d7:b3:
86:c3:90:27:33:f7:42:67:4f:48:73:db:28:d0:fb:
05:dc:3b:fa:41:e0:d1:15:cf:e6:5b:48:3b:9b:02:
e6:1e:21:a5:23:cb:3b:42:1a:dc:2c:25:96:a7:33:
2d:a6:ae:13:72:8f:9c:4e:95:35:66:7b:88:b8:1a:
f0:b6:07:9e:42:b3:ad:95:d5:b9:4c:df:01:d7:46:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C5:A6:14:9D:44:89:54:C9:A2:0C:5D:E7:4C:A1:22:4F:F3:A2:46
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/ZsWmFJ1EiVTJogxd50yhIk_zokY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.160.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:63:11:d1:60:20:70:bf:57:ed:c7:9a:1f:ef:af:f1:b5:34:
40:2f:46:db:0d:2b:de:e9:06:ae:fe:fb:2d:5e:9d:bb:09:a6:
f1:23:2d:aa:23:20:ad:eb:60:cc:89:32:c3:3f:a3:82:0a:79:
9e:a4:bd:4e:32:95:c9:1e:7c:d5:34:64:53:c4:37:3c:8f:09:
7e:27:8d:c4:50:83:67:3b:4d:bf:f1:27:75:4a:f0:bd:98:ee:
a1:9b:34:89:d4:66:0b:3b:47:8d:e3:4b:81:ff:1a:b1:e0:ba:
c0:4a:52:a3:24:5b:f6:a1:30:1a:35:c9:9f:7d:a7:8f:e3:51:
03:7c:99:b7:5f:ed:9a:09:78:bb:45:2f:e2:e5:b5:ab:c4:ec:
fd:cc:71:1e:33:c2:e9:d8:b3:05:2d:7e:5b:6d:27:d8:d5:7e:
c1:07:6b:93:0c:81:25:b0:8e:17:da:06:bc:89:d0:db:db:f1:
aa:da:33:08:19:ba:4e:50:e8:39:fb:a1:03:13:29:05:11:cc:
33:05:8a:98:41:fc:94:59:4e:57:2e:9c:f8:73:85:cb:80:0c:
91:ed:d2:39:53:82:de:f8:39:93:84:a6:22:a1:58:90:d5:51:
e1:a6:3e:54:e7:3d:18:a8:e8:a9:eb:10:6e:df:11:9d:02:9c:
1c:cb:a7:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxugvkzB+7BrZd0PYlqFdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWE5ZjE0Zjk3ZDRkYWQ4YzAwNGMyNTNhNWUxY2U3Yzdk
ZDdjNGIwHhcNMjMwMTAyMDkwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmM1YTYxNDlkNDQ4OTU0YzlhMjBjNWRlNzRjYTEyMjRmZjNhMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj74xVG/vca4ksTU09eIdt/eWfQW
s9wz0NXa5/aleZ0r++NHFMkcOrw4nb0vDp/vcimBZJXci8MuW2aevLeJpu/HMXta
YSaFX6pIvyXqpdDhCv6XSDb9Rrm73ME0Q6nd/I5OdqKjtIen4A9Q9mhZxiHmnoQz
2Aj2vJ1ML+Moxmf9UV4uJ9Aaa5iEp4K2OD/NYCU+8mIZV2yl0gFObH0xmVRjAL5A
HR2kRvcD8u3aC5Mj17OGw5AnM/dCZ09Ic9so0PsF3Dv6QeDRFc/mW0g7mwLmHiGl
I8s7QhrcLCWWpzMtpq4Tco+cTpU1ZnuIuBrwtgeeQrOtldW5TN8B10aUJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGbFphSdRIlUyaIMXedMoSJP86JGMB8GA1UdIwQY
MBaAFJ2qnxT5fU2tjABMJTpeHOfH3XxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2Nzct
NDE0MDEwMDhhNzBjLzEvWnNXbUZKMUVpVlRKb2d4ZDUweWhJa196b2tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2NzctNDE0MDEwMDhhNzBj
LzEvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHagMA0G
CSqGSIb3DQEBCwUAA4IBAQC3YxHRYCBwv1ftx5of76/xtTRAL0bbDSve6Qau/vst
Xp27CabxIy2qIyCt62DMiTLDP6OCCnmepL1OMpXJHnzVNGRTxDc8jwl+J43EUINn
O02/8Sd1SvC9mO6hmzSJ1GYLO0eN40uB/xqx4LrASlKjJFv2oTAaNcmffaeP41ED
fJm3X+2aCXi7RS/i5bWrxOz9zHEeM8Lp2LMFLX5bbSfY1X7BB2uTDIElsI4X2ga8
idDb2/Gq2jMIGbpOUOg5+6EDEykFEcwzBYqYQfyUWU5XLpz4c4XLgAyR7dI5U4Le
+DmThKYioViQ1VHhpj5U5z0YqOip6xBu3xGdApwcy6cK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:24 2024 by rpki-client on console-fra.rpki-client.org