Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ZtcCEvegX3WBKw7fTA5n-cLr5j8.roa
File: ZtcCEvegX3WBKw7fTA5n-cLr5j8.roa (raw, json)
Hash identifier: mTjpMDDHaMOWkW4cNv0+WEfykh8FbSjLB74schOrOds=
Subject key identifier: 66:D7:02:12:F7:A0:5F:75:81:2B:0E:DF:4C:0E:67:F9:C2:EB:E6:3F
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0183C2F58F024220008E4EDD494A25F16116
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ZtcCEvegX3WBKw7fTA5n-cLr5j8.roa
Signing time: Mon 10 Oct 2022 17:33:36 +0000
ROA not before: Mon 10 Oct 2022 17:33:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212416
IP address blocks: 85.209.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:f5:8f:02:42:20:00:8e:4e:dd:49:4a:25:f1:61:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Oct 10 17:33:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66d70212f7a05f75812b0edf4c0e67f9c2ebe63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:a5:84:d9:6a:98:f5:7c:44:bb:7c:13:26:
fd:19:81:47:d9:bd:44:f4:da:34:e6:21:ae:52:1f:
a6:0e:28:5f:ab:d9:42:6b:c6:41:2c:bb:e7:5c:81:
f1:3a:b6:7c:ac:39:1b:4c:23:0e:71:28:c6:61:ff:
c3:7c:04:65:9b:34:45:4e:3d:3e:a6:d7:ed:e7:d0:
59:b2:7f:a9:b9:0d:e4:8f:41:dc:ae:dc:b7:df:e6:
fb:50:dd:ad:9d:73:9c:ee:2d:68:f1:50:04:e7:ab:
08:e8:aa:0f:d3:9d:75:ec:8a:5c:11:de:9f:0a:07:
79:90:63:c3:6f:d3:61:d3:50:60:0d:d8:ae:ee:c8:
32:fc:5f:38:d2:63:0e:3c:18:24:66:e8:c8:0e:6d:
65:6d:50:cf:a4:12:a7:a9:0f:fe:b3:0a:5a:d4:04:
02:0d:26:5c:c4:dd:4e:09:67:53:91:e2:61:53:4a:
b0:1f:c8:5f:21:4e:5d:91:c2:3f:1c:ba:b7:d8:78:
04:2a:d3:b4:94:cc:45:d7:05:f8:50:b9:b2:f5:b1:
40:62:86:c0:85:23:97:f1:b1:ef:bf:23:ec:c6:5d:
d8:9e:8e:4f:dd:69:b8:6f:66:db:4d:3e:60:62:13:
ff:a7:bb:78:f4:15:77:23:84:ed:2b:34:a9:09:23:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D7:02:12:F7:A0:5F:75:81:2B:0E:DF:4C:0E:67:F9:C2:EB:E6:3F
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ZtcCEvegX3WBKw7fTA5n-cLr5j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c6:02:1d:49:2f:f1:54:1f:e8:a7:66:bd:58:63:a0:22:70:
16:90:45:1b:98:e2:8e:ce:a8:4f:12:dd:e9:54:b0:2c:46:d7:
d7:21:06:da:5a:75:40:af:2c:3e:bd:c5:96:75:3c:81:e3:78:
31:71:4f:99:17:66:7e:53:49:fe:7f:99:ca:65:6c:ca:74:06:
67:fc:37:d0:2f:8b:33:53:25:ff:c8:09:8c:1d:60:bc:b7:0a:
42:c5:68:6c:f7:da:81:ac:d3:ce:85:ed:db:e8:e6:24:ea:14:
53:15:26:63:64:43:b1:ee:97:46:0a:0f:0c:27:dd:9c:43:6d:
ff:c5:50:25:20:fe:af:b6:ec:c3:3a:9b:72:bc:4d:cc:f5:a2:
19:b1:57:0f:f6:7e:9c:c4:a1:fe:57:6a:e0:26:14:95:4a:c7:
e9:d6:de:a6:c7:01:97:ca:b3:96:a0:62:57:28:f5:cd:b1:85:
39:a5:4b:75:ae:50:e8:b9:0f:33:d8:59:2e:f3:a9:7c:c0:0a:
11:aa:13:ce:82:1a:e3:59:5c:48:bc:76:0a:e1:3a:c0:f6:5c:
2a:b0:d6:fb:6b:f5:d6:08:a4:b3:33:6b:3c:07:12:e7:a7:22:
f5:5a:f2:18:3c:11:0a:0d:ab:1c:64:fd:0d:6e:54:48:2f:4e:
8e:2c:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:01 2025 by rpki-client