Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/5okpLQzNkzodaUtXj1urzw6e6TY.roa
File: 5okpLQzNkzodaUtXj1urzw6e6TY.roa (raw, json)
Hash identifier: op4axQt0kikXYwU0VD9jdjtz8aToO9yLLl5tyGj6lvA=
Subject key identifier: E6:89:29:2D:0C:CD:93:3A:1D:69:4B:57:8F:5B:AB:CF:0E:9E:E9:36
Certificate issuer: /CN=8f94223a15ed65e520f5ec2c64f9423630ccafbc
Certificate serial: 018A1F0B29ED58A076D6E0559504163224C4
Authority key identifier: 8F:94:22:3A:15:ED:65:E5:20:F5:EC:2C:64:F9:42:36:30:CC:AF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5QiOhXtZeUg9ewsZPlCNjDMr7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/5okpLQzNkzodaUtXj1urzw6e6TY.roa
Signing time: Tue 22 Aug 2023 20:58:59 +0000
ROA not before: Tue 22 Aug 2023 20:58:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147049
IP address blocks: 62.3.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:0b:29:ed:58:a0:76:d6:e0:55:95:04:16:32:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f94223a15ed65e520f5ec2c64f9423630ccafbc
Validity
Not Before: Aug 22 20:58:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e689292d0ccd933a1d694b578f5babcf0e9ee936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:ef:b6:35:c4:40:08:ca:80:6f:1a:16:ee:
20:3a:76:ba:fe:fc:fc:38:cd:e3:8e:cd:62:1d:f6:
57:5e:94:18:de:f1:b5:b8:d1:19:33:ab:29:d9:e9:
98:36:46:6c:2c:92:80:93:00:27:74:5b:cc:9b:7a:
f9:5c:3d:9c:3c:7d:5c:42:2d:be:db:94:1e:40:73:
fc:c5:21:c8:6e:7b:90:d3:41:9d:25:ea:e8:37:8b:
85:00:02:be:34:64:aa:c8:49:99:57:bb:b7:b0:c9:
2c:67:19:bb:79:ec:1f:a3:ac:7f:01:fd:2b:f0:bd:
fa:f4:f4:3e:54:2e:48:fb:01:bc:4e:4a:6e:0f:7a:
20:97:75:7b:2b:21:0f:fb:9b:43:11:e3:64:ee:19:
71:c8:20:f1:9c:c3:44:3e:00:ca:87:c6:1a:0a:e9:
02:2f:0e:34:ec:a0:3b:79:63:a9:10:6b:2f:02:c8:
ff:fe:c5:60:96:3c:c7:27:25:c8:08:00:b8:8c:29:
76:36:03:d4:a4:a7:a8:2d:95:7e:3a:42:8f:2d:a1:
7d:87:12:48:1d:ab:72:69:c4:c1:bb:8f:ec:c5:ca:
71:c6:ed:70:98:17:84:6e:16:c2:2a:94:9f:2a:44:
3e:cb:ab:37:73:4d:1f:fb:5f:e6:88:ee:30:f4:28:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:89:29:2D:0C:CD:93:3A:1D:69:4B:57:8F:5B:AB:CF:0E:9E:E9:36
X509v3 Authority Key Identifier:
keyid:8F:94:22:3A:15:ED:65:E5:20:F5:EC:2C:64:F9:42:36:30:CC:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5QiOhXtZeUg9ewsZPlCNjDMr7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/5okpLQzNkzodaUtXj1urzw6e6TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/j5QiOhXtZeUg9ewsZPlCNjDMr7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:af:9f:b5:93:27:46:0c:50:b6:50:0a:2f:7f:4c:6f:65:8c:
78:c6:60:f2:0f:8d:4d:28:ab:db:a2:b3:77:5f:62:59:ec:f2:
3a:ff:43:99:bd:f4:c4:66:34:b1:9f:9a:48:4b:b0:c4:0f:8a:
ad:f1:b1:67:35:cc:35:c3:30:bb:76:f7:03:db:1b:70:53:ed:
e6:e3:5e:44:29:45:a4:a6:4d:3b:06:05:56:83:78:92:36:d3:
89:c7:83:77:c1:10:ee:d7:5e:5d:26:a4:28:1f:ab:38:29:04:
e7:9e:0a:94:69:8c:04:ef:06:97:66:01:c6:98:00:a7:c3:54:
c0:e0:69:4b:00:15:6b:e5:ec:5a:50:7b:66:a3:cf:49:91:e0:
da:3f:f6:23:da:3b:5b:67:b5:64:cd:b6:33:d3:10:9c:ae:1e:
21:a2:a9:31:ab:48:72:1b:51:61:95:06:6a:8a:1e:cc:9f:bf:
8a:54:c5:11:b1:a6:e3:75:08:83:c1:0a:ff:5c:35:81:54:26:
51:08:4f:f1:a5:ec:7c:be:18:73:60:bf:ed:f3:98:1f:44:ed:
80:37:48:96:3f:19:bc:68:65:b7:08:27:a4:c5:bf:a6:9c:ce:
4d:4c:7d:0e:cc:f6:46:0c:9c:31:0b:f3:af:be:70:38:94:5f:
f9:64:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:05 2024 by rpki-client on console-fra.rpki-client.org