Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/zZ6j5ZmoDP6GWs1y8SN_ZUx6myg.roa
File: zZ6j5ZmoDP6GWs1y8SN_ZUx6myg.roa (raw, json)
Hash identifier: Cn/Ys3NZbhyLBIA6BEZ68Rch61h8c7NO9YsxpJeufT4=
Subject key identifier: CD:9E:A3:E5:99:A8:0C:FE:86:5A:CD:72:F1:23:7F:65:4C:7A:9B:28
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 019252D8209E9591F468FABA04B2091863A6
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/zZ6j5ZmoDP6GWs1y8SN_ZUx6myg.roa
Signing time: Thu 03 Oct 2024 14:45:48 +0000
ROA not before: Thu 03 Oct 2024 14:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 212.68.172.0/22 maxlen: 22
212.68.172.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.176.0/22 maxlen: 22
212.68.176.0/24 maxlen: 24
212.68.177.0/24 maxlen: 24
212.68.178.0/24 maxlen: 24
212.68.179.0/24 maxlen: 24
212.68.180.0/22 maxlen: 22
212.68.180.0/24 maxlen: 24
212.68.181.0/24 maxlen: 24
212.68.182.0/24 maxlen: 24
212.68.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:d8:20:9e:95:91:f4:68:fa:ba:04:b2:09:18:63:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Oct 3 14:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd9ea3e599a80cfe865acd72f1237f654c7a9b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:9f:6f:d6:18:9b:22:78:16:7c:6d:cd:fa:
87:75:27:63:62:b3:3e:f3:65:f9:ed:19:c0:fc:26:
81:84:be:d0:c7:c1:64:db:67:e4:3e:c6:75:c7:7a:
e8:b9:b8:66:af:1b:e5:cc:f0:a3:77:28:ae:db:54:
d9:bc:d5:58:35:bd:8e:b1:05:41:66:d0:0f:ab:86:
a5:d2:b3:6b:5c:f9:ae:8a:f4:06:63:0f:5b:e8:45:
32:46:78:d7:b7:76:2c:f2:bc:94:91:2b:61:6d:13:
e1:82:52:2d:b1:13:1f:88:86:a4:2a:a1:4d:0b:dc:
a9:ec:a0:a9:6e:54:67:6b:3e:50:26:59:c3:bc:72:
44:c9:ef:00:6f:b2:60:13:59:a4:2c:35:ac:f4:44:
f8:c7:3e:86:35:c2:37:1a:54:a6:9e:60:6b:46:11:
09:69:13:5f:3a:d0:6e:d5:a8:a4:e8:27:74:1f:40:
49:f0:dc:2c:d8:08:87:72:77:6c:d1:e5:d2:bc:3a:
33:f3:37:a0:b2:8d:75:bc:02:66:18:88:0e:a6:de:
49:95:d4:60:01:d7:a1:85:25:fd:1e:90:c3:ff:7c:
78:49:9d:5d:bd:f5:88:9f:0d:e6:af:e4:78:1a:e4:
4c:71:ab:1d:0f:c0:bd:9e:12:d2:c8:20:ca:c3:56:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:A3:E5:99:A8:0C:FE:86:5A:CD:72:F1:23:7F:65:4C:7A:9B:28
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/zZ6j5ZmoDP6GWs1y8SN_ZUx6myg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.172.0-212.68.183.255
Signature Algorithm: sha256WithRSAEncryption
3b:55:d2:5a:5b:1b:7c:37:c8:80:ee:18:57:0e:64:c4:24:38:
37:32:22:94:d2:ef:0d:d9:e4:3f:d5:16:c0:67:1b:18:3d:ed:
06:c0:35:03:2a:32:02:28:be:ee:b5:42:75:7f:d7:45:2f:ac:
56:d3:d1:39:b5:a6:29:26:ed:d0:aa:1e:1b:38:83:91:be:2b:
4a:81:73:cf:c5:ea:de:63:e5:d5:45:e8:5a:e0:e0:ac:51:0f:
6a:01:6d:9b:df:e2:93:c4:cd:23:33:27:e2:0d:85:1b:85:f6:
56:42:ed:ee:eb:6d:c8:e8:c1:05:9d:ad:ec:b5:7c:3c:76:f6:
cc:0a:bc:ce:3e:91:84:36:89:31:69:9f:86:82:80:42:72:a0:
86:57:a5:28:3e:4a:d3:e4:c6:7b:a5:3f:57:2b:dd:e9:f9:16:
69:66:5a:ff:d2:17:f4:80:3b:96:c6:2b:9a:24:a6:27:c4:2a:
ff:f5:24:88:8f:9d:8e:a7:72:b8:4f:72:0a:ec:5b:3f:be:07:
b9:ed:eb:3f:78:a6:72:24:da:e7:a0:ab:68:a9:b4:9f:7d:bf:
9e:88:d6:96:a9:1c:5e:3a:7a:9a:51:1e:8a:c1:c1:74:c2:9d:
0c:21:ab:93:ca:3d:f5:ac:ff:a0:c4:76:30:d8:9d:77:2a:bd:
5b:49:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:39 2024 by rpki-client on console.sobornost.net