Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/Zqq1qG3pO3-o9iMGyU11ZwWceEs.roa
File: Zqq1qG3pO3-o9iMGyU11ZwWceEs.roa (raw, json)
Hash identifier: o9zt9tTLERTrAMJ2lHSkEao/cZz4wp6PPxPQgj3soC4=
Subject key identifier: 66:AA:B5:A8:6D:E9:3B:7F:A8:F6:23:06:C9:4D:75:67:05:9C:78:4B
Certificate issuer: /CN=a5ec62f54e5a3b2f4f887baaf252a5f571b85891
Certificate serial: 01857094F151DC35B7C2D7DF91F58D74760E
Authority key identifier: A5:EC:62:F5:4E:5A:3B:2F:4F:88:7B:AA:F2:52:A5:F5:71:B8:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pexi9U5aOy9PiHuq8lKl9XG4WJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/Zqq1qG3pO3-o9iMGyU11ZwWceEs.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 212.18.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f1:51:dc:35:b7:c2:d7:df:91:f5:8d:74:76:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec62f54e5a3b2f4f887baaf252a5f571b85891
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66aab5a86de93b7fa8f62306c94d7567059c784b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:79:b7:af:4f:8a:7e:a9:41:c1:0c:27:e7:
c4:34:b1:4c:dc:78:72:fb:be:66:1e:4d:b2:33:98:
a7:1f:da:39:90:df:84:68:14:06:83:f9:e9:61:07:
fb:62:91:81:41:ee:b8:29:d8:10:25:ba:c3:8e:de:
f6:75:c8:ca:8e:28:a9:e9:2f:50:65:3d:ce:c0:bb:
a9:94:bc:7b:be:fb:62:5f:a6:48:25:fb:d2:be:38:
36:c2:b5:da:85:fc:90:a0:32:a4:c6:fb:f5:4e:28:
19:5c:7a:be:96:3e:bd:57:32:c5:ce:89:42:cc:f4:
d5:1b:09:42:a2:fc:c7:87:66:e6:7a:c3:8a:aa:58:
cb:d2:f6:75:98:6c:1a:c9:de:5e:a8:af:75:ab:06:
c6:71:cf:f3:9d:bf:d8:fa:3c:f8:4f:4e:92:e2:c9:
df:13:d6:e3:87:46:a5:ee:e9:fa:04:c7:a7:5c:ec:
96:18:78:06:c4:f7:36:f8:c5:0e:22:5d:e2:c4:aa:
f8:f5:37:33:9f:1e:a3:b3:4a:bf:99:5a:c1:96:f8:
17:93:29:37:57:ef:ed:82:30:06:e0:c0:68:f5:1c:
c1:4f:b9:df:89:56:5f:b2:29:11:97:91:90:19:ca:
b7:97:b4:87:12:d5:67:e4:02:9a:14:92:64:cc:65:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AA:B5:A8:6D:E9:3B:7F:A8:F6:23:06:C9:4D:75:67:05:9C:78:4B
X509v3 Authority Key Identifier:
keyid:A5:EC:62:F5:4E:5A:3B:2F:4F:88:7B:AA:F2:52:A5:F5:71:B8:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pexi9U5aOy9PiHuq8lKl9XG4WJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/Zqq1qG3pO3-o9iMGyU11ZwWceEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/pexi9U5aOy9PiHuq8lKl9XG4WJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:53:e5:01:93:55:eb:42:c0:27:02:1b:99:76:8e:e7:66:f7:
b7:1b:4a:36:bf:0f:88:3d:2e:26:e2:4e:58:69:62:f8:d8:86:
c8:9e:9a:76:47:80:de:e2:9a:58:69:28:e5:f7:99:c0:7f:6d:
80:ca:9f:55:7a:aa:17:6f:da:58:7a:61:3c:e4:46:9f:96:80:
be:dc:09:94:02:ea:45:32:1b:f8:ba:5d:3c:1c:eb:47:d0:d3:
05:7c:aa:20:49:a1:51:b4:1f:d6:85:48:05:41:5a:95:f2:0c:
7a:ef:2a:27:62:2c:52:a7:b9:b8:71:66:26:8e:97:f3:fe:98:
49:3f:07:57:95:cb:4e:be:b6:10:74:ee:60:2d:83:97:71:42:
67:08:98:38:b3:53:a8:a0:2a:23:74:4b:9c:1f:35:59:12:6e:
0f:4a:ba:4d:24:44:a7:2b:1c:f8:a4:9a:61:08:9f:32:a8:c9:
f7:7a:50:d8:21:21:6e:ff:a3:d3:a1:d6:fc:5a:a0:2a:e0:07:
e9:53:3c:7e:20:b7:c3:da:0e:c1:e1:cd:23:e7:fc:12:af:ea:
50:76:d5:55:d1:25:6d:8f:0c:4b:14:5a:79:6c:13:04:6f:ae:
04:10:b3:b6:87:ac:d1:c8:f1:af:87:6b:5d:2d:eb:f1:b8:44:
dd:2e:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net