Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/3mJsHYD1FodxAYqRJCor74QSA_8.roa
File: 3mJsHYD1FodxAYqRJCor74QSA_8.roa (raw, json)
Hash identifier: YqKJFHFH43xMYHMwZ3pYxAGXI732EAHXQYK0wPKgtUA=
Subject key identifier: DE:62:6C:1D:80:F5:16:87:71:01:8A:91:24:2A:2B:EF:84:12:03:FF
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 0182773F72F7EE24B51B7F3C0222A8BF9200
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/3mJsHYD1FodxAYqRJCor74QSA_8.roa
Signing time: Sun 07 Aug 2022 07:40:23 +0000
ROA not before: Sun 07 Aug 2022 07:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 62.112.128.0/20 maxlen: 20
62.112.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:77:3f:72:f7:ee:24:b5:1b:7f:3c:02:22:a8:bf:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Aug 7 07:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de626c1d80f5168771018a91242a2bef841203ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:68:fc:7a:4f:7e:76:43:ec:94:4f:81:78:
73:5f:1a:a0:19:c3:15:c9:df:ba:bf:d7:20:78:e8:
3f:60:0e:ae:89:8a:8e:c3:b1:70:db:c6:c0:b5:fc:
d2:20:35:29:e8:ac:c5:71:9b:01:67:9f:2c:45:7c:
92:3f:b7:2d:77:e2:b3:d4:89:27:f6:f0:a5:4a:4b:
93:f9:fd:60:ef:a3:64:a5:e0:fa:15:ac:99:59:33:
81:c9:36:b0:5d:a5:02:d3:91:f7:d8:fc:b0:0c:38:
21:7d:f8:e5:43:76:e8:5d:73:d1:0e:4c:ba:bc:70:
97:46:12:e5:d8:b0:8d:f4:91:60:e2:96:58:f6:c1:
b6:2a:f5:e3:52:6d:32:b5:75:67:bb:a8:c5:8d:19:
56:8d:de:7b:9c:2b:ac:3e:c1:c6:28:18:3e:60:93:
82:31:34:d6:ed:d4:1c:54:42:14:67:ff:90:8c:03:
a2:0e:5d:90:34:4c:21:39:98:4a:90:bc:82:d3:90:
f9:de:d1:3d:a3:a6:83:8f:5e:6f:8f:2c:9d:a4:3d:
cd:d2:70:53:ea:62:82:d7:c8:00:20:f3:41:de:8d:
32:f4:d6:07:08:2a:ee:81:a0:ac:e2:ea:6c:ee:48:
15:51:37:0b:6d:82:a5:86:6c:65:e1:a1:7a:4b:f4:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:62:6C:1D:80:F5:16:87:71:01:8A:91:24:2A:2B:EF:84:12:03:FF
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/3mJsHYD1FodxAYqRJCor74QSA_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/19
Signature Algorithm: sha256WithRSAEncryption
09:dc:b8:07:d5:69:19:5d:7a:44:84:7f:e6:6e:93:e1:51:cb:
ac:38:a8:08:06:c2:22:58:c4:d2:c7:ac:d9:62:e7:ac:18:8b:
7e:47:02:b6:fd:e7:1a:ae:a4:ce:d8:7c:a3:42:b9:9e:fa:8b:
fd:36:14:97:76:39:ee:2a:13:68:c8:6a:59:3d:5f:27:0a:b9:
fe:ad:e6:17:42:7d:da:ea:8a:63:bf:af:03:03:90:79:86:e8:
4a:c0:29:7a:d9:01:40:c6:87:23:70:88:85:d1:77:62:8d:61:
2d:57:b6:f4:04:12:08:01:78:67:a7:55:45:ff:90:f1:d7:18:
e6:97:e3:7d:43:3a:25:58:a3:fe:4b:8d:4e:04:d4:e6:51:2e:
55:b8:c6:82:20:5b:b4:c1:1e:d0:ad:ac:3b:b2:e9:1b:ff:45:
e6:c5:0f:53:77:1f:c1:85:62:d6:5d:b1:69:d9:8d:73:a6:49:
87:9d:ac:54:a6:8f:4f:4b:ec:74:9e:28:cf:ae:0c:e5:b1:1e:
87:9e:2e:33:4e:b9:b3:fd:cb:99:8f:2c:d4:44:a5:9c:5d:0e:
e6:1a:0a:21:8b:6d:1c:e6:23:77:a1:89:c5:31:c5:60:13:e5:
1b:6f:0c:46:46:9e:0e:94:67:d9:31:0f:e8:73:47:9f:f2:8b:
07:84:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:14 2023 by rpki-client on console-fra.rpki-client.org