Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ZlTb8miQpzRPLSC8g-gxG8qy0s0.roa
File: ZlTb8miQpzRPLSC8g-gxG8qy0s0.roa (raw, json)
Hash identifier: TrJWu/jHO/0LWIlvC6hakBW7MGGHAluig5S6Gle9YkA=
Subject key identifier: 66:54:DB:F2:68:90:A7:34:4F:2D:20:BC:83:E8:31:1B:CA:B2:D2:CD
Certificate issuer: /CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Certificate serial: 0183C87C0CCEB30D36F2DD989284382DBEA7
Authority key identifier: 72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ZlTb8miQpzRPLSC8g-gxG8qy0s0.roa
Signing time: Tue 11 Oct 2022 19:18:36 +0000
ROA not before: Tue 11 Oct 2022 19:18:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 212.52.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:7c:0c:ce:b3:0d:36:f2:dd:98:92:84:38:2d:be:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Validity
Not Before: Oct 11 19:18:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6654dbf26890a7344f2d20bc83e8311bcab2d2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:31:65:59:18:38:09:8c:d6:2e:b2:f0:80:
fa:3e:f4:fb:3e:bb:37:33:b9:de:81:69:1b:a7:e7:
7e:e6:a5:1d:25:1a:95:38:76:1f:41:9f:09:57:98:
2e:3d:cc:0a:0d:2a:bf:82:3a:dc:98:d0:47:b4:c6:
ef:22:be:e5:d5:7c:b8:36:e6:61:0d:32:c2:b3:cb:
c1:6c:19:92:5a:bb:35:5d:71:f2:a5:39:1d:91:55:
98:6e:0e:01:b1:d7:cd:b6:7a:80:ac:6d:70:4a:cc:
96:d6:95:4e:08:19:b3:de:dc:e1:ba:27:81:d7:90:
94:7a:d1:3e:40:bb:c1:54:64:24:5e:43:bb:3a:11:
86:a1:a2:25:a6:61:02:ae:87:72:2f:42:d5:d1:1d:
40:3d:31:5a:d6:05:1e:d9:b4:75:80:66:ed:1d:21:
80:56:c7:f4:a7:41:9e:18:a4:f0:41:e6:28:e9:00:
59:f4:72:03:3a:2e:43:20:9f:9b:f1:a3:46:fe:a7:
dc:c9:65:aa:b7:4c:9a:a0:8d:da:95:1e:f8:62:ce:
75:79:c1:fc:82:d2:d9:71:d9:f5:a4:d5:2d:df:8a:
78:af:d8:2b:11:ba:ca:1a:5d:65:cc:e8:75:73:8a:
d0:3a:db:79:73:28:59:51:72:b0:38:e8:2c:4e:c1:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:54:DB:F2:68:90:A7:34:4F:2D:20:BC:83:E8:31:1B:CA:B2:D2:CD
X509v3 Authority Key Identifier:
keyid:72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ZlTb8miQpzRPLSC8g-gxG8qy0s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
03:26:0f:b1:24:14:4c:5d:dd:15:f9:8b:25:76:14:9a:5f:7e:
89:c2:6f:51:9b:26:07:30:f6:5c:ec:6e:1e:56:61:38:ca:74:
6f:1c:0d:9c:73:e8:eb:2b:cb:0e:93:fd:b9:94:12:72:12:0d:
b8:d4:81:82:40:a3:e1:57:2a:b3:04:66:e9:89:72:7e:65:9c:
b7:1e:51:3f:00:f9:2c:03:e1:d4:f1:85:f2:5d:b8:72:d4:06:
cc:c1:28:84:0b:35:ad:43:9a:6a:35:1b:61:4c:96:52:3a:ec:
e4:dd:11:13:ff:f1:03:f8:18:97:2b:a3:63:61:c9:b4:6d:e4:
88:48:af:df:62:49:4e:23:38:40:cb:dc:73:a3:7f:1b:f1:30:
3d:9f:e2:2f:2a:8e:ac:23:8f:1a:bc:85:5c:90:c6:84:ce:49:
c3:c5:6e:13:06:98:fc:d1:db:50:5a:91:0b:46:a7:9a:40:a0:
ef:5e:4d:a4:83:ab:f4:b1:77:97:b2:44:99:32:72:25:8d:47:
0f:8e:88:f6:16:f8:b6:f8:21:cd:19:6f:5d:50:e1:70:6a:f2:
21:d3:a8:1f:c0:3c:45:51:f8:d6:f1:56:f1:c4:55:ba:e3:d1:
1a:85:bb:31:af:75:ca:12:d6:1f:5c:3d:a7:66:ee:5f:36:28:
03:6c:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net