Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/7Ypw0cxkicgMkJzNe2P1ki0Jg_Q.roa
File: 7Ypw0cxkicgMkJzNe2P1ki0Jg_Q.roa (raw, json)
Hash identifier: Zk9Hzp8wv5KrCUsFQTBzTeWoHkn82o1aY2f8ncOLXi0=
Subject key identifier: ED:8A:70:D1:CC:64:89:C8:0C:90:9C:CD:7B:63:F5:92:2D:09:83:F4
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01852F30EBA20AD38B6C0382CBBE111E819D
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/7Ypw0cxkicgMkJzNe2P1ki0Jg_Q.roa
Signing time: Tue 20 Dec 2022 11:00:13 +0000
ROA not before: Tue 20 Dec 2022 11:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 62.112.128.0/20 maxlen: 20
185.2.160.0/23 maxlen: 23
62.112.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:30:eb:a2:0a:d3:8b:6c:03:82:cb:be:11:1e:81:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Dec 20 11:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed8a70d1cc6489c80c909ccd7b63f5922d0983f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:26:b5:0d:b1:56:62:69:ee:6c:aa:be:3e:
9a:1c:34:05:1f:c9:b7:99:77:98:ac:b0:5c:89:0d:
8c:2d:6d:89:ce:4b:59:04:0f:42:17:d6:88:0d:85:
57:4e:8d:b6:ac:09:b9:24:4d:00:ce:3e:6d:6b:c6:
f3:80:65:68:4d:66:a0:31:ca:e6:e1:a4:e7:cc:fc:
f6:02:27:6d:8b:ab:44:6e:1b:72:26:5f:06:5a:93:
1b:f5:a6:fd:a8:73:3d:49:d7:8a:22:48:c5:4f:a7:
a3:12:ec:3a:66:82:fb:70:bc:13:e5:7c:5c:62:78:
c0:78:e1:1b:28:3e:e9:33:5b:1d:92:a7:15:ae:83:
ce:20:31:37:fb:d6:7c:b3:46:42:45:44:e6:69:e6:
67:53:4e:5b:4e:38:e8:6f:3d:ac:31:51:3d:dc:ce:
a4:73:4a:88:d4:02:f2:be:2a:2b:41:ff:fe:5a:83:
00:57:cf:09:cc:ef:e9:62:1f:2a:75:52:eb:5c:67:
88:02:83:a2:b1:d9:74:f3:0f:91:1c:09:e3:c1:a0:
4d:15:63:32:60:39:2e:7a:5b:6c:02:d3:a1:a0:7b:
2d:fd:31:fc:a8:bd:ce:bd:cc:b2:5e:81:a9:63:55:
e3:0b:2a:19:eb:66:01:ed:bb:29:f4:ac:01:3a:e8:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8A:70:D1:CC:64:89:C8:0C:90:9C:CD:7B:63:F5:92:2D:09:83:F4
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/7Ypw0cxkicgMkJzNe2P1ki0Jg_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/19
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
33:cd:4f:f7:88:3d:33:2d:db:33:2f:a9:9c:b6:f8:02:65:40:
bb:ca:35:2b:91:32:d1:bb:0d:4e:61:f8:32:45:7e:0d:0e:32:
e6:2d:c3:23:a4:25:5d:26:1d:a2:1e:b1:de:2e:58:88:20:e9:
ee:ed:07:0b:56:f0:2c:9a:ba:ae:f0:af:b1:9e:e7:fd:6b:e7:
b9:a3:89:ff:92:b6:ed:e4:b2:c5:d1:d7:e2:f1:b6:c4:56:54:
6d:10:49:52:cd:3d:d8:89:32:24:86:39:06:43:73:9e:ba:8b:
58:cb:52:e7:be:2a:d4:7c:5d:19:6b:e4:10:72:e5:6a:b1:5e:
19:fd:9b:ac:6e:cd:a6:21:5e:d8:e5:16:e6:c4:cb:2a:d3:70:
5f:20:89:5b:a3:56:04:dd:28:ea:04:b9:b2:50:d8:e9:79:76:
ef:1d:8f:32:27:ee:85:e2:e0:84:7a:d3:7a:96:07:d2:df:44:
d4:9c:fc:69:89:0f:83:47:1a:6a:b1:34:00:d1:16:db:f7:6f:
d8:3a:db:85:1b:3a:4c:2e:74:7a:69:8e:32:b3:b3:ee:99:a3:
72:03:3c:8a:59:1e:c7:c6:63:62:40:91:a0:74:aa:99:11:4b:
4a:4c:f3:a3:3a:7c:f1:b5:d3:15:80:c9:7a:17:88:bd:cb:df:
cb:aa:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org