Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/x0DnEq6mH6CY-SjR2zqL2qPKAEc.roa
File: x0DnEq6mH6CY-SjR2zqL2qPKAEc.roa (raw, json)
Hash identifier: 0/hZ4eP1P8Oymbgx6mEETuEKp/PlyQ2cRqE0fIb8K38=
Subject key identifier: C7:40:E7:12:AE:A6:1F:A0:98:F9:28:D1:DB:3A:8B:DA:A3:CA:00:47
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 018650144C1B148E2A43F69E5B12285AC32A
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/x0DnEq6mH6CY-SjR2zqL2qPKAEc.roa
Signing time: Tue 14 Feb 2023 13:19:12 +0000
ROA not before: Tue 14 Feb 2023 13:19:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57770
IP address blocks: 62.112.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:14:4c:1b:14:8e:2a:43:f6:9e:5b:12:28:5a:c3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Feb 14 13:19:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c740e712aea61fa098f928d1db3a8bdaa3ca0047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:89:3d:a9:ad:53:32:0f:7e:cb:83:32:33:
3f:32:98:83:91:e2:67:46:69:89:af:3e:81:0f:0e:
aa:93:56:bc:7f:87:d6:e3:3a:ec:a9:59:ce:2d:6d:
3e:0e:22:c4:b5:77:52:4f:c8:42:4d:ee:59:43:c4:
d9:b9:86:40:93:4b:c6:e3:f9:7a:de:3e:9a:a8:bc:
5e:83:95:c4:37:8b:4d:d4:38:43:26:1e:b9:39:18:
7d:17:bb:01:1d:06:2c:4a:fd:e9:e6:e8:39:6a:34:
02:91:f4:ea:7c:ba:f2:76:9a:84:ab:a7:a8:76:35:
44:df:51:6d:70:ed:85:d0:17:06:c5:5b:1a:10:fa:
66:a0:89:57:6a:07:f8:36:ed:73:a1:da:30:39:69:
fb:a1:8d:b5:64:34:aa:c7:48:19:82:79:26:c9:ee:
bc:e3:e3:6d:13:33:a7:9f:0a:3d:d6:bc:f0:27:d3:
09:17:e1:29:52:f0:a3:ab:5b:c2:29:65:e1:c8:28:
99:9c:4e:74:1e:5f:32:6b:fc:99:78:29:ba:7a:d7:
b9:75:41:03:c2:a4:ae:d1:24:d1:5b:e3:9d:5f:b5:
91:87:fa:2b:c3:b8:4e:8b:ea:3f:3b:13:cb:05:04:
77:4b:29:c5:75:6c:33:33:3a:8c:63:e8:22:c2:ca:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:40:E7:12:AE:A6:1F:A0:98:F9:28:D1:DB:3A:8B:DA:A3:CA:00:47
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/x0DnEq6mH6CY-SjR2zqL2qPKAEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/20
Signature Algorithm: sha256WithRSAEncryption
64:da:83:d4:16:5d:63:5f:78:2e:33:b7:9d:6c:17:58:65:a8:
73:0c:6e:08:06:d0:8b:ad:64:bd:1f:1a:4f:c7:86:f7:45:1c:
62:95:3c:4c:82:f0:da:2a:8d:56:c2:88:86:5b:3c:6c:ba:60:
fd:9d:33:74:d8:2f:1d:56:2c:39:c9:e1:47:8b:b1:e2:0f:9b:
0d:db:5c:11:06:78:41:17:2d:35:1f:6f:e9:ca:d1:bd:79:d0:
d4:db:a9:11:ca:48:1b:ae:13:98:ac:e1:25:e2:18:71:8d:98:
c4:a9:ff:e5:4a:6e:30:27:b4:82:b3:0a:ef:24:21:29:95:72:
13:92:20:94:bc:d4:18:c7:70:fe:67:53:22:7d:7a:03:51:25:
57:a2:76:36:54:10:d3:7e:bf:43:12:30:e8:aa:41:5d:ab:0f:
01:9b:e3:cf:ee:91:b3:e9:8b:5e:7a:b9:6a:31:96:1e:ac:6e:
da:37:dd:d4:a4:d5:d7:b0:ef:6d:ee:78:f1:4a:66:25:2a:ac:
82:b9:04:32:81:da:e9:77:7b:6b:90:45:68:dc:8c:70:62:f2:
2f:d3:48:10:3c:13:9e:52:14:fb:b3:42:65:6e:c8:e8:ef:c5:
e0:1e:5d:92:f9:cb:f6:96:38:4e:5c:46:7e:17:b7:56:0d:fc:
e8:51:09:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org