Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/8nO4Y8rhBfEPUH76IraEsGSdYUo.roa
File: 8nO4Y8rhBfEPUH76IraEsGSdYUo.roa (raw, json)
Hash identifier: 2wfLDKRWXdCp0pop1ju+VzcoQIagbViz8m2AAwUUlGo=
Subject key identifier: F2:73:B8:63:CA:E1:05:F1:0F:50:7E:FA:22:B6:84:B0:64:9D:61:4A
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 0187FEDDECEB22B1CFDBF4B4B99AC6935859
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/8nO4Y8rhBfEPUH76IraEsGSdYUo.roa
Signing time: Tue 09 May 2023 04:56:09 +0000
ROA not before: Tue 09 May 2023 04:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 62.112.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fe:dd:ec:eb:22:b1:cf:db:f4:b4:b9:9a:c6:93:58:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: May 9 04:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f273b863cae105f10f507efa22b684b0649d614a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:f5:4e:3e:29:2e:69:37:25:7d:f6:e5:26:
78:5a:7f:fb:d8:ec:55:1f:d9:56:da:ee:3e:a7:b9:
58:67:91:d1:b6:c3:e2:0f:82:7d:32:18:a5:0c:6a:
16:ca:ba:ac:55:f2:22:a3:86:01:a2:16:ed:3e:f7:
ac:0b:2a:db:2c:4e:c7:31:c7:94:1c:48:69:b0:e7:
61:6c:a8:01:69:0e:13:8c:cb:3f:a2:09:e7:29:74:
0f:f4:e4:ad:1c:67:bc:16:86:75:b5:ce:4e:d0:71:
93:c9:e3:09:c3:1b:30:94:a9:26:f4:a1:6c:c4:77:
6d:3b:92:b2:7d:6c:65:8c:53:6d:bb:81:f9:39:bd:
67:dc:20:fb:fc:e6:4a:04:60:51:5e:8c:88:86:3f:
49:11:2a:b7:e4:85:a5:6f:ce:9e:dd:17:af:fa:9f:
62:c5:95:0c:ae:72:c2:ae:14:08:40:f5:01:d9:70:
78:e9:2d:d9:02:f3:d1:a4:1e:64:e0:5d:e8:f5:b8:
bd:58:87:45:1f:84:0a:fa:11:1e:f9:fb:57:da:24:
f9:c6:02:49:73:f7:fb:90:e9:9c:3b:bd:32:c2:49:
8c:17:ad:af:f1:5f:7b:03:98:ee:a1:bc:96:02:74:
85:84:2b:26:f4:80:72:6d:99:90:12:41:c8:b7:a0:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:B8:63:CA:E1:05:F1:0F:50:7E:FA:22:B6:84:B0:64:9D:61:4A
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/8nO4Y8rhBfEPUH76IraEsGSdYUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.144.0/20
Signature Algorithm: sha256WithRSAEncryption
31:56:5b:26:8b:e1:6c:87:f9:3d:f6:33:b6:86:4d:33:d9:12:
8f:17:15:0a:44:f0:77:b0:7b:ea:16:32:15:90:f6:ba:d0:8d:
f2:9e:b5:8c:da:29:f8:db:8a:ae:67:84:fa:90:b3:b6:01:12:
4c:a2:60:6f:6b:c8:f5:50:40:07:39:c7:a2:3b:34:41:de:5e:
68:c2:31:b6:8a:53:5a:da:74:68:45:c9:a6:fd:ca:58:5e:9d:
47:39:dc:4c:56:f6:09:3e:82:bf:17:de:f1:59:e5:28:b6:84:
23:44:99:81:d6:88:e2:d5:51:35:ef:f4:d2:86:1f:cf:06:f4:
33:be:84:a9:59:45:c2:e2:85:a4:c6:41:ad:fd:64:93:c5:a5:
d4:03:31:57:52:57:a2:bb:d2:6f:ba:52:74:aa:5f:7f:85:c1:
d3:99:ce:c6:7e:91:dd:e4:5d:c8:d8:45:56:2a:75:28:5d:d9:
b4:28:af:03:50:fd:88:7d:8f:0c:49:bd:e6:9a:98:40:f4:a9:
0c:3e:3a:9f:2e:5c:86:3a:bd:6e:62:e3:92:86:71:84:e0:38:
a5:96:32:43:4d:ea:50:e3:a3:f3:87:89:e2:5e:ff:5f:b6:fc:
13:6b:a9:53:59:93:94:c2:d4:bb:f0:29:36:ea:35:76:39:c3:
d5:de:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org