Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/zbCoEdfRSZhA_tzymAfLPTV-t9I.roa
File: zbCoEdfRSZhA_tzymAfLPTV-t9I.roa (raw, json)
Hash identifier: Ssj/DnAfX/RynMzuNoqn0dVhGtpyJGxTC1elYNEj1ik=
Subject key identifier: CD:B0:A8:11:D7:D1:49:98:40:FE:DC:F2:98:07:CB:3D:35:7E:B7:D2
Certificate issuer: /CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Certificate serial: 018CC801100E11487243781F98FCC770388A
Authority key identifier: 91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/zbCoEdfRSZhA_tzymAfLPTV-t9I.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205911
IP address blocks: 185.51.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:10:0e:11:48:72:43:78:1f:98:fc:c7:70:38:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdb0a811d7d1499840fedcf29807cb3d357eb7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:7f:29:bd:a4:bc:aa:3f:9c:d8:40:8a:cf:
93:52:59:75:8d:4b:f8:30:48:a2:e6:11:1a:73:3c:
67:37:7d:7d:f2:8b:e8:21:ad:00:b6:cd:5e:6c:05:
c6:0b:e1:56:91:8d:5f:49:05:8e:d9:f3:4e:04:b4:
65:f2:5e:21:39:ad:39:ec:43:7a:da:62:fb:4d:5f:
4d:b2:3d:c6:d4:5f:29:b3:5a:32:95:5a:df:f8:03:
79:06:94:35:4a:ce:c0:90:96:5f:32:85:d4:1f:8d:
63:2a:cd:a1:ce:b8:4e:44:3b:bc:cf:3b:f6:a1:da:
a1:0d:da:99:b7:4f:43:1a:e5:53:f5:2e:8b:dd:6b:
3f:25:7e:9a:da:4e:a0:9d:44:6b:c2:61:f0:8c:63:
c8:70:28:a7:da:75:24:e5:4c:77:81:2d:f9:5b:78:
68:57:05:18:51:3b:6b:af:7d:03:14:a1:19:39:9d:
98:bb:67:2e:ff:b7:80:f4:51:5d:ad:ee:78:fc:c8:
b9:cd:83:0b:99:ec:28:fa:c0:cd:8a:26:06:23:62:
18:a3:72:6f:ed:a0:e9:17:3f:21:f3:a5:19:b0:49:
41:f1:b3:3a:99:1b:fe:1e:db:31:a9:4c:48:3b:cc:
7c:f1:78:59:7f:aa:6e:49:0b:28:7e:c8:43:c0:9d:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:A8:11:D7:D1:49:98:40:FE:DC:F2:98:07:CB:3D:35:7E:B7:D2
X509v3 Authority Key Identifier:
keyid:91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/zbCoEdfRSZhA_tzymAfLPTV-t9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:64:6d:73:ca:c1:a8:f9:df:85:7b:63:d7:74:31:a0:28:4e:
1b:a4:60:e0:fa:a7:2e:b0:00:e3:5a:92:26:39:32:35:b0:a9:
45:56:cd:3c:14:04:e0:77:19:73:5b:85:9a:74:60:94:fb:e2:
85:53:31:51:a0:ff:3b:5f:11:c2:3b:8e:0c:cb:76:42:5e:c8:
cd:6b:f9:4c:26:f4:26:f5:e9:dd:fc:11:b0:d6:d7:78:c0:34:
a4:6e:2d:35:6f:3a:4b:c8:dc:ac:f6:44:d2:bb:8e:3c:2c:3d:
56:cf:7a:5e:0d:53:ef:60:d3:f6:81:e9:ad:fb:07:0c:41:89:
ae:a6:73:2f:36:03:e2:a2:8b:34:dd:41:0a:82:fd:e5:71:af:
60:1f:b1:19:51:c7:9e:59:32:f9:ef:08:53:f0:37:87:6d:3c:
02:b3:36:e7:a0:dd:7f:4b:05:32:db:b3:c6:ed:84:bf:7d:00:
1d:cb:11:33:ec:e2:b1:7a:fe:d1:6f:a3:44:2c:44:2b:a8:f9:
a6:c1:72:b5:6b:54:bc:7a:bd:b5:1c:a4:31:41:69:d2:d5:95:
60:22:b7:73:b3:af:58:34:12:a0:3e:ce:20:99:6b:e2:a0:1b:
82:70:3a:14:ee:81:05:c2:07:a8:e9:b0:2a:a3:01:3a:50:0a:
66:bd:f5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:24 2024 by rpki-client on console.sobornost.net