Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/ErP6T8Zn2N8TcUe27h8uODygCyA.roa
File: ErP6T8Zn2N8TcUe27h8uODygCyA.roa (raw, json)
Hash identifier: vRPOPnPBkEZ1SZK1CzMfs6zuOeUjErzYzzEwcjLU+V8=
Subject key identifier: 12:B3:FA:4F:C6:67:D8:DF:13:71:47:B6:EE:1F:2E:38:3C:A0:0B:20
Certificate issuer: /CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
Certificate serial: 01856F0238F4B4D67699CDD9606068DADAE9
Authority key identifier: 9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/ErP6T8Zn2N8TcUe27h8uODygCyA.roa
Signing time: Sun 01 Jan 2023 20:24:54 +0000
ROA not before: Sun 01 Jan 2023 20:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 62.233.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:38:f4:b4:d6:76:99:cd:d9:60:60:68:da:da:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
Validity
Not Before: Jan 1 20:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12b3fa4fc667d8df137147b6ee1f2e383ca00b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:6b:5f:c8:dd:ac:6f:c7:11:6b:32:fd:17:
18:f6:01:ce:ff:69:f8:04:57:43:36:e2:78:98:7d:
78:59:88:78:7d:a0:d4:67:6c:e5:33:ac:e5:aa:b2:
08:0d:bd:d8:e5:3b:9e:0f:6b:a5:f3:3b:12:31:03:
98:e8:bf:fe:0e:59:2d:6f:ee:67:27:9a:17:95:e7:
21:db:f4:36:2d:76:a8:a4:e3:96:82:cc:1e:4f:7a:
27:9f:f9:fc:ad:fe:5e:8c:bb:60:df:7a:f2:95:87:
0e:93:21:00:da:21:db:7f:f6:f7:19:db:97:cd:88:
ca:eb:e8:15:09:fb:76:09:e7:87:31:d9:c4:5b:aa:
85:db:60:5a:89:21:d9:cd:15:85:2c:34:ea:6f:3e:
a1:48:ad:e9:17:1e:3c:44:89:a0:46:08:20:88:d0:
04:a9:4f:a3:cd:90:1f:5b:4a:e3:5c:23:d1:03:92:
a0:ab:24:dd:7f:2f:a7:3b:02:a0:56:87:f5:4f:32:
43:80:e2:75:15:04:d7:57:5d:54:82:11:7c:1c:64:
3f:52:6d:0f:81:4c:bc:3c:09:ab:2e:e1:17:10:82:
6a:3a:7b:a6:19:a4:f6:dc:d8:91:5c:8e:cc:43:34:
3f:b4:24:e2:cd:fd:b2:73:80:13:dc:f1:72:67:71:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:FA:4F:C6:67:D8:DF:13:71:47:B6:EE:1F:2E:38:3C:A0:0B:20
X509v3 Authority Key Identifier:
keyid:9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/ErP6T8Zn2N8TcUe27h8uODygCyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.60.0/24
Signature Algorithm: sha256WithRSAEncryption
14:60:48:0b:d6:37:96:70:37:f3:41:4f:be:d6:af:6d:a1:d7:
b7:33:46:a9:63:f9:ba:59:5b:3d:31:2f:c7:e6:e8:47:16:00:
0a:7a:bf:a2:10:6d:5f:a3:da:63:0c:86:2b:95:df:56:ca:fe:
8c:a6:f3:cc:b7:5e:cd:c2:7f:c8:ed:ca:77:7d:4c:5e:1b:4e:
2b:4e:a0:4c:85:6a:91:58:2e:78:30:10:12:3f:20:9e:e4:44:
05:95:d0:22:42:5f:af:9e:e6:2e:76:b7:d3:ec:64:6a:52:37:
a0:42:88:5d:1a:f9:1f:31:7e:6c:2d:b8:7a:d1:63:8d:85:91:
77:1e:82:3c:54:b9:91:cf:d0:2d:d0:6b:82:8f:ae:a7:97:8f:
fc:65:4f:fb:df:c8:d7:b9:bf:f0:33:30:d2:48:3b:76:a3:af:
57:28:80:d3:d6:7b:5b:42:74:81:22:af:2d:25:20:aa:0b:94:
eb:b7:3a:f8:5f:f5:4d:25:35:31:36:65:d4:56:01:8f:95:33:
70:a7:e5:91:1b:84:d0:51:56:a6:8e:1d:3c:0b:ec:e8:c3:6a:
f5:58:1a:2c:1b:3d:51:d2:6d:1b:51:9f:f5:d1:b0:3a:0e:39:
df:c8:33:d3:e4:e1:eb:41:35:d6:fb:93:aa:a0:87:50:5f:40:
19:fc:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 13:54:43 2023 by rpki-client on console-fra.rpki-client.org