Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/ubG7_iBlnDuO67qRGyfiX3CdhHo.roa
File: ubG7_iBlnDuO67qRGyfiX3CdhHo.roa (raw, json)
Hash identifier: OPWXfDLIVZpOLldZwAYR0d9ngvVRIzVnyCA6/CQEy0Y=
Subject key identifier: B9:B1:BB:FE:20:65:9C:3B:8E:EB:BA:91:1B:27:E2:5F:70:9D:84:7A
Certificate issuer: /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial: 0183C797929100D8E20DCADCD85CA9C65F6D
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/ubG7_iBlnDuO67qRGyfiX3CdhHo.roa
Signing time: Tue 11 Oct 2022 15:09:02 +0000
ROA not before: Tue 11 Oct 2022 15:09:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:97:92:91:00:d8:e2:0d:ca:dc:d8:5c:a9:c6:5f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Validity
Not Before: Oct 11 15:09:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9b1bbfe20659c3b8eebba911b27e25f709d847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:7c:01:cf:e3:a2:e9:70:71:6b:7e:bf:8c:
e8:62:06:0d:24:fe:e4:c5:4b:a8:64:41:78:fe:b8:
86:43:56:59:e5:4b:c3:03:e7:ab:aa:ec:16:a5:b0:
b6:e2:32:ca:8d:11:f2:ea:95:cf:72:f9:7c:e1:e0:
e1:3d:09:29:b8:49:85:ba:05:06:d1:d1:2f:bb:b6:
0e:8c:49:dc:2b:85:80:ce:20:54:c5:7c:31:ff:bc:
43:e4:85:1e:d6:1f:33:c0:64:f0:5d:b6:89:68:4a:
c9:2d:fd:96:fa:ae:4b:ef:57:85:fd:ce:03:e4:ca:
f3:9f:58:a2:65:6b:56:1c:be:fd:74:42:53:23:0a:
41:f8:c2:2e:1d:fe:42:d1:21:c0:9c:5b:b8:5c:17:
ed:cf:bb:91:a2:b0:44:07:da:a8:53:c8:20:98:b0:
d6:85:c5:bb:4f:39:69:6e:9a:09:02:56:d1:8a:a2:
39:54:8b:c2:05:5a:bb:f1:f2:d8:4d:96:d6:ef:52:
d7:b8:f5:78:2d:46:f7:b7:a9:18:05:57:1e:ce:35:
92:1b:7d:02:5f:51:35:b8:da:c7:32:10:2f:d4:be:
32:00:51:91:d9:4f:85:6c:a7:54:96:7c:65:9f:68:
d0:80:90:12:1d:ba:da:c4:46:58:b8:c0:cc:f7:d8:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:BB:FE:20:65:9C:3B:8E:EB:BA:91:1B:27:E2:5F:70:9D:84:7A
X509v3 Authority Key Identifier:
keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/ubG7_iBlnDuO67qRGyfiX3CdhHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c4:99:55:60:d3:9b:d4:9f:af:52:00:f8:0b:2d:59:11:be:
a2:67:b9:44:1a:97:01:23:a8:ca:b9:ae:0a:07:ab:43:2e:eb:
ec:cc:b5:16:33:3a:32:36:72:8a:27:ee:ec:09:92:79:8c:bd:
81:3d:23:c6:7f:51:c6:92:83:e0:28:34:53:ba:0a:97:16:ee:
54:ea:ea:d1:4a:9b:b3:eb:7d:8f:da:df:f8:eb:1f:63:5f:b0:
01:24:2e:29:80:68:46:8f:b4:84:73:ac:b5:2e:7f:4c:c0:51:
61:70:12:e2:79:b1:86:13:2b:24:18:17:80:f4:ee:d6:70:9d:
88:d5:08:02:04:00:b2:c6:15:77:20:54:dd:8d:6d:de:2c:96:
a7:5a:75:3c:df:40:e2:22:d1:7d:0f:6f:14:6f:35:00:50:97:
7b:46:77:4b:38:68:6d:de:73:19:62:a9:9b:19:bd:7f:8e:01:
40:71:ec:81:32:e5:39:e8:d8:bb:4d:02:44:15:b1:88:48:c4:
8a:f4:11:3e:f8:8d:5a:5e:97:25:30:fb:bf:b2:27:bc:8c:23:
1b:78:14:37:6e:d8:c5:5e:b8:06:b8:73:7f:3f:29:91:05:b4:
cc:e6:ac:3a:8b:d4:7a:15:e9:b3:bf:f6:b1:fa:a3:45:ab:c9:
a5:98:70:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:01 2025 by rpki-client