Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/PZTDYNXEVXGMmHHQw0mZ36Zrwjo.roa
File: PZTDYNXEVXGMmHHQw0mZ36Zrwjo.roa (raw, json)
Hash identifier: yPUc2YWZJIaOE44UCjJV4FYlxJT7J1h6g05Q4PvdxOA=
Subject key identifier: 3D:94:C3:60:D5:C4:55:71:8C:98:71:D0:C3:49:99:DF:A6:6B:C2:3A
Certificate issuer: /CN=45afe0d73419f8aade65d2c7115c01420472ba5c
Certificate serial: 018CC7934598DF616AC373F34C53473F3F5E
Authority key identifier: 45:AF:E0:D7:34:19:F8:AA:DE:65:D2:C7:11:5C:01:42:04:72:BA:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra_g1zQZ-KreZdLHEVwBQgRyulw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/PZTDYNXEVXGMmHHQw0mZ36Zrwjo.roa
Signing time: Tue 02 Jan 2024 00:29:26 +0000
ROA not before: Tue 02 Jan 2024 00:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 80.91.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:45:98:df:61:6a:c3:73:f3:4c:53:47:3f:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45afe0d73419f8aade65d2c7115c01420472ba5c
Validity
Not Before: Jan 2 00:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d94c360d5c455718c9871d0c34999dfa66bc23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:57:9d:55:eb:f4:aa:9c:f2:a1:75:4e:bc:
a8:2d:89:13:c5:52:e0:46:9f:3a:e1:65:00:cf:bc:
81:4e:a9:00:60:28:4e:96:29:37:b1:20:ee:08:dd:
d3:ff:80:66:21:fc:2d:78:76:91:a5:69:cc:bd:55:
d3:3d:17:b4:77:e6:af:ae:bb:37:ff:2f:bf:0d:c9:
21:a1:f2:79:64:fa:c0:98:36:db:ce:e3:4c:6b:43:
c9:02:04:0a:42:5b:f7:60:ba:2d:94:4a:ae:70:76:
e9:c9:d5:1c:c8:5c:7a:e3:06:db:0a:4b:5e:4a:5a:
78:a2:3b:b7:1e:7e:c5:c8:ac:0c:18:de:05:78:ca:
17:68:17:0d:fd:33:dc:c0:e6:84:1d:3c:ef:38:74:
c7:94:22:1f:fc:5e:a8:e0:15:b1:42:ba:50:6b:a1:
ef:7b:02:b7:db:7b:a3:f0:24:4d:7b:fa:99:0b:ac:
6d:3d:07:1d:a4:b4:3b:ca:9e:bd:03:41:4f:aa:ff:
7d:e6:2e:af:2e:38:08:4a:26:c7:75:24:f6:49:f1:
27:cf:bf:cc:f5:8c:3b:36:eb:6e:33:28:cf:65:2b:
dd:9e:5c:1e:58:5b:e1:88:8f:a2:b6:a4:1d:12:71:
cb:a9:1b:44:48:34:b8:b5:96:ff:38:9a:7e:0f:1f:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:C3:60:D5:C4:55:71:8C:98:71:D0:C3:49:99:DF:A6:6B:C2:3A
X509v3 Authority Key Identifier:
keyid:45:AF:E0:D7:34:19:F8:AA:DE:65:D2:C7:11:5C:01:42:04:72:BA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra_g1zQZ-KreZdLHEVwBQgRyulw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/PZTDYNXEVXGMmHHQw0mZ36Zrwjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/Ra_g1zQZ-KreZdLHEVwBQgRyulw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.213.0/24
Signature Algorithm: sha256WithRSAEncryption
44:24:26:5c:fe:1e:f1:ce:59:cc:e6:08:80:b0:ca:e0:d0:a2:
cc:e7:be:7f:ba:44:41:13:b9:fd:15:5a:f8:cc:45:1f:ed:03:
97:7f:01:2b:a5:4d:75:44:4c:a3:45:2a:e9:6c:ff:11:af:3f:
93:26:3a:b0:79:25:fa:3d:b9:c2:1c:35:6f:bf:ba:4d:57:9d:
8d:66:fd:40:e1:e8:8c:58:b6:25:2c:7e:ec:24:f7:d7:a4:7f:
f5:4e:4b:a5:6f:bf:ec:84:79:10:37:93:3f:02:6e:e6:35:d3:
cb:ce:f8:8b:87:37:83:87:d1:1e:33:42:3f:f7:c2:6c:d4:2f:
26:8b:97:42:4c:64:c5:d6:e5:8e:e8:fb:a2:aa:a1:55:f8:b4:
4c:0d:ef:bd:a1:1c:45:03:82:ea:b7:79:fd:40:19:c0:d0:d5:
37:41:ee:16:70:d8:d9:50:b2:08:de:b2:ca:f0:06:79:c1:a2:
a1:4a:06:bd:1e:e5:58:49:34:d8:07:b9:a8:79:c8:10:5d:35:
ed:a8:10:32:5a:c6:cb:2a:e9:08:f6:5c:3c:57:09:02:7c:85:
26:d7:dc:9c:f0:e2:b6:06:77:eb:0b:0e:6e:b4:ba:fb:7d:e3:
be:cc:df:ec:7c:3b:be:e4:79:e9:02:83:44:8e:61:8a:99:7b:
39:ba:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:13 2024 by rpki-client on console-ams.rpki-client.org