Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/1jDpbzVFNBDTPbixPeyGMQkYB6k.roa
File: 1jDpbzVFNBDTPbixPeyGMQkYB6k.roa (raw, json)
Hash identifier: 4Mqjaq0CmpF7HLtWhmWFigL1p3i/jX02AnpA8YPjHaM=
Subject key identifier: D6:30:E9:6F:35:45:34:10:D3:3D:B8:B1:3D:EC:86:31:09:18:07:A9
Certificate issuer: /CN=66423285998e8c1fc3cf34714d6415b5aba9f093
Certificate serial: 018D13D7F10C8519F465821EB93283E2113A
Authority key identifier: 66:42:32:85:99:8E:8C:1F:C3:CF:34:71:4D:64:15:B5:AB:A9:F0:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkIyhZmOjB_DzzRxTWQVtaup8JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/1jDpbzVFNBDTPbixPeyGMQkYB6k.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15626
IP address blocks: 62.68.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f1:0c:85:19:f4:65:82:1e:b9:32:83:e2:11:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66423285998e8c1fc3cf34714d6415b5aba9f093
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d630e96f35453410d33db8b13dec8631091807a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:95:70:a6:95:e0:86:f7:9e:38:7a:b0:69:
5d:e2:ed:54:9f:44:32:c3:b4:25:c7:d3:20:83:12:
70:39:45:3d:45:9d:19:b6:64:5f:2b:2e:d2:8a:89:
a1:de:bd:59:f2:a6:6e:55:2d:04:95:00:7c:16:42:
53:46:8e:75:d3:1b:df:e5:d4:f7:2f:22:d9:95:7c:
59:c1:d2:0b:35:ba:0b:77:26:82:90:d3:49:e1:27:
15:c9:41:07:96:ee:32:5e:9c:79:55:ea:8b:9a:d7:
ac:2d:72:a3:13:89:94:46:6a:09:66:89:55:59:9a:
fa:64:ec:37:b1:66:86:6d:c3:f9:3a:d5:b7:5d:a6:
1f:db:0c:2d:6e:5e:52:d0:b4:a9:61:f4:bc:c3:4f:
02:9a:b8:12:36:d9:05:bb:15:65:31:da:ad:91:e7:
6a:68:13:64:e2:af:68:1d:7b:de:a1:16:0d:ce:25:
8f:47:fd:f7:91:cb:21:37:16:87:f6:9b:cd:be:15:
62:94:d9:01:d7:ae:e8:0d:47:97:a6:d9:ea:6c:26:
c5:bd:df:4a:48:6f:cc:dd:10:87:5d:31:49:d5:b7:
77:a4:26:7e:8d:5d:d0:45:25:b4:5a:26:a5:80:66:
f4:2b:d1:7d:52:7d:b9:ae:aa:a1:9d:51:8a:58:7b:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:E9:6F:35:45:34:10:D3:3D:B8:B1:3D:EC:86:31:09:18:07:A9
X509v3 Authority Key Identifier:
keyid:66:42:32:85:99:8E:8C:1F:C3:CF:34:71:4D:64:15:B5:AB:A9:F0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkIyhZmOjB_DzzRxTWQVtaup8JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/1jDpbzVFNBDTPbixPeyGMQkYB6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/ZkIyhZmOjB_DzzRxTWQVtaup8JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.86.0/24
Signature Algorithm: sha256WithRSAEncryption
42:19:77:08:68:d5:3a:aa:fc:39:f0:d4:d3:44:00:53:96:5c:
de:6a:5a:72:d4:a5:69:5e:b3:a3:64:e6:6d:7b:0d:ec:ca:6c:
93:cf:8d:ca:ee:85:b1:0a:00:9b:4e:6a:d3:9d:30:c5:8d:c9:
fa:d7:eb:02:45:85:27:9a:4c:be:5a:2b:fe:b1:bf:33:28:b1:
fa:e2:7f:8d:b9:b1:14:74:07:47:48:0b:a0:7e:74:7c:e5:07:
81:10:2a:71:5a:ea:14:1d:80:cc:84:ff:36:6a:e6:ed:22:b7:
cf:75:14:83:1b:11:28:e9:b4:7e:dc:c2:58:c6:e0:eb:7c:06:
b7:60:e2:9e:62:c1:dd:63:3c:8c:df:94:04:50:f7:ff:8b:38:
b1:02:bc:30:0d:7d:7b:7e:80:4b:2b:d3:9b:80:aa:58:3c:d4:
88:a7:eb:c6:48:18:e8:c4:91:7d:bf:0b:da:d3:40:f8:f3:4b:
9d:58:55:19:a3:5b:45:f6:93:a9:4a:d2:7a:b6:1c:5c:cc:b4:
5b:67:89:33:aa:bd:95:d0:f1:89:5d:b9:a8:5c:79:2a:38:5a:
2c:d5:53:db:5f:d0:e6:c1:9f:01:1b:69:d2:83:dc:71:34:a6:
85:84:ee:33:20:8b:9c:e5:75:4f:22:ed:64:5d:ec:f4:d9:f7:
bd:9b:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:08 2024 by rpki-client on console-fra.rpki-client.org