Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/p_KUv-6mD4ujP8XmcqGQnuIr_14.roa
File: p_KUv-6mD4ujP8XmcqGQnuIr_14.roa (raw, json)
Hash identifier: kv6JjDc5Zf3rzppfs8px+yJpBtE9dMq9UUIukDYIeuA=
Subject key identifier: A7:F2:94:BF:EE:A6:0F:8B:A3:3F:C5:E6:72:A1:90:9E:E2:2B:FF:5E
Certificate issuer: /CN=66423285998e8c1fc3cf34714d6415b5aba9f093
Certificate serial: 018D13D7F18664063072B1986712A0E5ABC6
Authority key identifier: 66:42:32:85:99:8E:8C:1F:C3:CF:34:71:4D:64:15:B5:AB:A9:F0:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkIyhZmOjB_DzzRxTWQVtaup8JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/p_KUv-6mD4ujP8XmcqGQnuIr_14.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 62.68.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f1:86:64:06:30:72:b1:98:67:12:a0:e5:ab:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66423285998e8c1fc3cf34714d6415b5aba9f093
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7f294bfeea60f8ba33fc5e672a1909ee22bff5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:2e:ae:3c:77:4c:a3:f2:f6:02:0f:d6:cf:
5c:9f:c1:5e:a5:2a:33:36:f0:1b:98:9e:e6:9a:96:
b6:fb:c4:fa:43:d1:56:7c:29:fc:ad:3a:fc:7e:e6:
39:b8:61:95:24:2a:f9:5a:19:3c:33:46:90:38:13:
ff:60:1e:b2:6d:98:b8:9a:c5:08:b6:a6:fd:5d:a0:
58:3e:81:c4:70:85:fe:c4:9d:0a:2a:dd:13:9d:96:
30:b6:e6:2c:2c:43:fe:e7:db:62:e3:39:a1:62:8a:
7a:af:7a:95:fc:dd:01:45:fa:95:e5:e1:0f:e1:bf:
17:f2:da:b5:bb:7a:32:d6:7d:9c:52:86:f1:1f:b5:
b1:51:ea:1d:5e:11:71:49:db:70:f3:15:87:6a:8b:
91:4d:96:fb:bb:6d:4e:82:b8:66:8b:5d:0a:f3:77:
0a:de:34:7e:7d:c6:cc:de:c2:19:b0:41:16:2c:bd:
7b:5b:b2:a7:22:70:5e:97:c5:10:d7:13:52:7f:7c:
33:8c:60:4f:77:1f:d8:28:db:d5:c7:c9:0c:1a:31:
14:45:14:b6:a0:5e:a2:7f:b6:1b:d0:6a:d2:6f:37:
5e:f3:49:dd:e4:d1:f1:7b:84:49:b5:d1:6d:06:69:
56:d7:a5:49:52:d4:cd:82:cc:1e:5a:f2:39:11:15:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:94:BF:EE:A6:0F:8B:A3:3F:C5:E6:72:A1:90:9E:E2:2B:FF:5E
X509v3 Authority Key Identifier:
keyid:66:42:32:85:99:8E:8C:1F:C3:CF:34:71:4D:64:15:B5:AB:A9:F0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkIyhZmOjB_DzzRxTWQVtaup8JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/p_KUv-6mD4ujP8XmcqGQnuIr_14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/ZkIyhZmOjB_DzzRxTWQVtaup8JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5b:81:5c:54:f8:ef:ec:8e:c0:dc:72:88:30:d8:10:dc:44:
db:21:93:66:53:1c:83:b3:e5:0c:a9:57:d5:ee:ca:34:2f:c9:
88:c4:1b:09:62:14:cd:b8:bc:e9:2a:77:ea:bb:cb:e3:15:39:
91:e9:b6:24:f2:db:44:b6:ed:e0:89:74:66:40:df:2e:bb:46:
be:8d:ee:4c:eb:c7:ad:a2:3f:1c:a7:6b:9e:c8:f5:78:8a:97:
31:c3:92:e1:c9:89:99:8d:43:5a:8f:2b:6a:5e:af:03:47:ea:
e3:fc:59:ea:05:12:45:6f:fd:54:c3:59:e0:6e:0b:9b:f2:fa:
42:a5:66:d2:8a:57:10:ce:7f:d2:e7:21:83:a4:a1:e5:33:c2:
84:0f:10:db:21:45:99:04:3e:73:92:f0:c2:3f:b0:33:86:f9:
71:79:ce:ef:32:d6:e5:ac:e0:6b:a3:38:2d:23:fe:20:81:89:
72:e0:72:4a:5e:cf:96:ba:04:af:49:b4:d9:a0:60:fb:82:01:
86:fa:0d:07:cf:a8:1a:bc:a3:f3:15:fc:cd:77:ee:55:c7:80:
fc:4c:94:36:1a:e0:f5:eb:91:b9:a3:75:b8:68:51:56:50:71:
38:a7:84:c6:92:2d:59:17:cc:65:e0:fc:c5:79:6c:e2:fa:10:
39:dd:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:55 2024 by rpki-client on console-ams.rpki-client.org