Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/jzM5g_KPgxBY9clyBi-LtTUcbQA.roa
File: jzM5g_KPgxBY9clyBi-LtTUcbQA.roa (raw, json)
Hash identifier: KMACcxEPIHM3EvJ8nR9AIKC59zYJZQ2E2rj8mVqqaFM=
Subject key identifier: 8F:33:39:83:F2:8F:83:10:58:F5:C9:72:06:2F:8B:B5:35:1C:6D:00
Certificate issuer: /CN=55de7c1b5c5265bcb90c144c563076fdcfab6a1e
Certificate serial: 01C39EF7
Authority key identifier: 55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd58G1xSZby5DBRMVjB2_c-rah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/jzM5g_KPgxBY9clyBi-LtTUcbQA.roa
Signing time: Wed 23 Feb 2022 22:36:36 +0000
ROA not before: Wed 23 Feb 2022 22:36:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62579
IP address blocks: 62.122.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29597431 (0x1c39ef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55de7c1b5c5265bcb90c144c563076fdcfab6a1e
Validity
Not Before: Feb 23 22:36:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f333983f28f831058f5c972062f8bb5351c6d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:b9:f7:cf:99:0c:16:19:e2:30:bd:c8:fc:
70:7b:55:46:95:99:77:36:fa:56:33:f3:63:4a:07:
1b:71:bb:47:44:77:79:e9:42:11:5b:0e:8b:f6:11:
44:d0:97:99:69:49:ae:2d:31:3a:fd:44:9f:ad:c6:
f0:27:03:52:0d:6a:bd:60:dd:d6:c4:40:f0:46:39:
c3:ce:4b:2c:2b:17:4f:9c:79:9e:8f:86:53:5f:df:
20:2a:08:9c:f7:fb:12:c4:92:10:c5:e7:73:e2:0c:
6f:ae:63:ee:17:33:4d:0a:7e:1f:76:e0:59:7c:47:
a8:11:90:04:4c:71:88:76:bc:25:3c:42:65:ec:7c:
1e:97:00:39:59:ed:ac:a4:32:9c:e5:c8:ec:bc:8c:
da:4f:6f:aa:12:94:0b:89:07:cb:2d:e2:04:82:d0:
df:75:c8:f4:ee:97:1e:89:79:7d:10:9d:2c:b3:c5:
03:1a:0e:f0:ba:b0:c5:a6:bd:0f:03:cf:25:de:0a:
77:79:1c:f9:2b:08:f6:35:f0:29:73:6f:87:ea:b7:
1c:07:03:01:5e:d0:fa:33:20:bc:c2:4b:51:76:0a:
4c:fa:9c:62:b1:ce:8e:85:7f:e2:8b:01:31:79:3f:
46:e0:74:f7:b0:1c:a3:bc:54:27:af:5d:19:ad:a0:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:33:39:83:F2:8F:83:10:58:F5:C9:72:06:2F:8B:B5:35:1C:6D:00
X509v3 Authority Key Identifier:
keyid:55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd58G1xSZby5DBRMVjB2_c-rah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/jzM5g_KPgxBY9clyBi-LtTUcbQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/Vd58G1xSZby5DBRMVjB2_c-rah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b2:63:73:b4:70:ed:4b:93:fd:6d:e7:90:cc:c6:5f:4b:dd:
11:6f:9f:86:cb:50:34:31:c0:19:62:fb:56:e5:be:d3:11:ad:
c3:09:f0:d6:85:a3:cb:54:e1:28:45:64:c4:22:90:a8:57:cf:
a4:42:0b:a0:94:76:c5:a3:f1:5c:30:b9:12:34:c7:54:72:c5:
03:d1:58:36:91:79:58:a5:d9:da:1a:bb:1a:d6:e2:62:70:57:
8c:68:ff:42:93:66:1d:0e:55:51:75:f0:3a:dd:fb:67:aa:fe:
30:cd:d5:d0:18:25:f3:5c:31:8a:a5:4f:49:39:f9:e4:82:67:
73:64:f0:e6:f0:cd:dc:0f:4f:ae:f5:de:54:ff:12:be:63:c3:
15:b7:ab:21:57:b8:54:08:38:25:cb:d1:be:3f:b7:f8:a5:01:
4f:9e:f4:cb:6d:d5:68:96:86:2f:99:86:60:54:16:56:9d:cd:
1a:82:11:ea:8b:e0:ed:a5:28:69:4a:4b:68:5a:24:4b:b2:15:
bd:07:89:26:eb:5e:1f:ae:a0:dc:e1:6b:18:70:dd:fc:dc:9d:
33:52:c7:41:12:43:32:ee:54:53:5d:92:99:ad:65:c6:64:4f:
e6:3f:fb:14:1c:5d:3b:a1:82:d1:c0:a2:d6:a1:dd:e0:fe:95:
27:bc:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:53 2024 by rpki-client on console-fra.rpki-client.org