Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fd56a1-09d5-431a-b97e-82657d0c4979/1/6Sm5IUuxe6T3Xmf_CUdoIz6y_Qk.roa
File: 6Sm5IUuxe6T3Xmf_CUdoIz6y_Qk.roa (raw, json)
Hash identifier: k0BxVc2kYQkbxeFUzJ+am5kYeeLyVNgbUjryh9L1fa4=
Subject key identifier: E9:29:B9:21:4B:B1:7B:A4:F7:5E:67:FF:09:47:68:23:3E:B2:FD:09
Certificate issuer: /CN=ba6a94da5ae2b56a910e92ac91c99e770439bfdc
Certificate serial: 01863A3A596770FFBA004320F36AD231066E
Authority key identifier: BA:6A:94:DA:5A:E2:B5:6A:91:0E:92:AC:91:C9:9E:77:04:39:BF:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umqU2lritWqRDpKskcmedwQ5v9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fd56a1-09d5-431a-b97e-82657d0c4979/1/6Sm5IUuxe6T3Xmf_CUdoIz6y_Qk.roa
Signing time: Fri 10 Feb 2023 07:29:07 +0000
ROA not before: Fri 10 Feb 2023 07:29:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20668
IP address blocks: 62.106.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:3a:59:67:70:ff:ba:00:43:20:f3:6a:d2:31:06:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6a94da5ae2b56a910e92ac91c99e770439bfdc
Validity
Not Before: Feb 10 07:29:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e929b9214bb17ba4f75e67ff094768233eb2fd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:42:59:b7:63:a8:fc:63:f4:b5:1b:5f:cf:
9a:dd:df:6f:9f:5c:4e:ae:48:ec:bc:c6:36:1a:e4:
f2:11:8d:09:a0:3d:5f:f0:b6:1c:20:38:99:e6:2f:
3c:fd:dd:b6:ba:36:d5:43:9e:11:cd:4c:6c:dc:c7:
c3:6a:f5:40:5c:2f:70:d4:a6:78:4b:70:6e:0c:44:
10:a7:ee:46:d8:79:40:61:43:66:ba:31:6e:e9:e2:
1a:d8:cb:81:c5:b5:59:bb:10:d0:0e:26:d6:26:58:
43:73:69:66:36:c2:a4:fd:79:96:82:f3:c9:70:ae:
1f:b6:79:fc:a0:ce:9e:28:bf:9d:f8:7a:2f:4e:dd:
0c:4f:7f:94:26:49:8d:71:3e:c6:ba:b1:76:ef:e9:
d0:c4:ad:12:81:ac:ca:43:a0:aa:c3:c3:40:8f:1b:
88:73:81:39:a7:26:63:62:73:1f:a6:d4:11:b1:4e:
0d:3a:56:6a:ea:35:35:d3:79:74:6b:57:dc:d9:02:
5f:ad:0b:dd:73:6f:b1:4c:00:ab:ab:e8:c2:fc:43:
93:65:dd:f9:6f:86:e1:bf:49:28:70:88:8a:2e:b2:
a2:ff:0e:e2:44:38:5e:a8:b9:81:43:65:d6:ac:25:
c6:0c:27:88:d6:9f:8c:7b:8f:a4:93:61:b7:84:9d:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:B9:21:4B:B1:7B:A4:F7:5E:67:FF:09:47:68:23:3E:B2:FD:09
X509v3 Authority Key Identifier:
keyid:BA:6A:94:DA:5A:E2:B5:6A:91:0E:92:AC:91:C9:9E:77:04:39:BF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umqU2lritWqRDpKskcmedwQ5v9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fd56a1-09d5-431a-b97e-82657d0c4979/1/6Sm5IUuxe6T3Xmf_CUdoIz6y_Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fd56a1-09d5-431a-b97e-82657d0c4979/1/umqU2lritWqRDpKskcmedwQ5v9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.92.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5e:e6:e4:86:e7:61:f4:9c:a4:65:93:46:44:6a:83:e6:9e:
2c:6c:69:91:1c:33:5f:d5:c8:15:74:bf:9c:c9:01:21:92:82:
03:45:f0:45:1f:b6:7a:e0:34:e9:49:a2:c1:25:9b:e2:7a:2b:
d3:07:0f:86:1e:77:ef:04:89:0e:ba:0e:51:45:2c:cc:28:fb:
b6:42:db:d4:dc:d0:29:16:56:db:4f:cf:2d:65:3e:39:75:05:
9e:47:d6:9e:c6:bc:be:9c:67:49:bd:60:68:60:b7:b8:7d:19:
f2:66:56:9e:0f:d5:b7:e7:ca:18:0e:f9:a4:2e:05:9f:a6:fe:
1f:2f:18:40:5b:a5:7b:6e:73:73:aa:e7:9b:c1:cc:71:43:5c:
09:e1:f9:5f:51:67:15:de:b7:3b:fa:4e:8d:79:d0:d9:dc:60:
40:2e:77:9a:ff:3b:a5:8f:e5:11:0c:e8:d7:ed:5f:82:af:0a:
f8:42:dc:da:e7:a9:7c:6c:ad:a6:11:44:c1:2c:28:64:bd:63:
99:b4:f8:14:33:ad:59:3b:69:6d:4d:13:85:f4:c4:f6:2b:7f:
59:6a:3d:92:b9:7e:97:a0:10:0a:88:b5:0c:24:e6:de:a4:ff:
21:ea:36:9a:4e:68:f5:ed:dc:ec:2a:ce:6d:89:66:e9:57:5c:
df:ad:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-fra.rpki-client.org