Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/AIGN4zzrpIYd4N9rwE_fKhfyEms.roa
File: AIGN4zzrpIYd4N9rwE_fKhfyEms.roa (raw, json)
Hash identifier: HNCQo2b/jbSgQpAxucBdMHWr8E8Y6J/dbBP/H5Z8Rl4=
Subject key identifier: 00:81:8D:E3:3C:EB:A4:86:1D:E0:DF:6B:C0:4F:DF:2A:17:F2:12:6B
Certificate issuer: /CN=815f961a7373170da35dbdfc88f510c7d45a60a0
Certificate serial: 018326ED37E56539504573F02B78E65B6D76
Authority key identifier: 81:5F:96:1A:73:73:17:0D:A3:5D:BD:FC:88:F5:10:C7:D4:5A:60:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV-WGnNzFw2jXb38iPUQx9RaYKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/AIGN4zzrpIYd4N9rwE_fKhfyEms.roa
Signing time: Sat 10 Sep 2022 10:23:44 +0000
ROA not before: Sat 10 Sep 2022 10:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ed:37:e5:65:39:50:45:73:f0:2b:78:e6:5b:6d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815f961a7373170da35dbdfc88f510c7d45a60a0
Validity
Not Before: Sep 10 10:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00818de33ceba4861de0df6bc04fdf2a17f2126b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ee:5b:01:32:6a:e9:16:a3:f3:20:6b:f6:c1:
43:e0:6f:c5:3e:53:8b:31:e4:7c:32:e2:cb:60:53:
6e:8e:af:d6:bc:78:80:4a:ab:a1:af:e2:b5:41:52:
3f:3c:bb:fc:a5:2b:69:2e:8e:dc:f3:fc:cb:1b:b3:
9f:3b:cb:4b:b9:eb:92:65:0b:45:57:17:6d:54:13:
72:72:61:0e:3d:f5:2d:52:02:6a:47:b7:c4:88:1f:
05:d6:c1:a4:79:74:64:01:39:b1:28:d7:f8:0a:c4:
ff:10:20:8a:dd:01:bc:10:e4:b0:d8:67:1b:6b:f4:
f1:d8:57:35:7b:59:76:62:05:40:f9:64:32:05:24:
f2:35:f9:95:b7:d6:61:ce:18:49:48:14:12:31:93:
4d:67:67:b0:1b:b3:45:03:3a:5d:25:4d:04:85:a6:
05:62:be:48:19:90:77:b4:6c:fe:60:ff:c6:2d:78:
0a:12:91:ca:62:42:cf:6f:e8:56:f6:da:61:fd:db:
d7:22:82:a1:30:c9:ab:d6:7f:d2:18:ab:e1:fe:9d:
0f:ff:cc:04:27:f7:df:e4:26:42:91:75:0c:ae:6e:
04:1a:e3:38:61:d7:b5:54:c5:16:c0:66:04:a9:98:
15:b4:66:04:8c:2b:82:54:94:51:81:b4:d2:3a:2b:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:8D:E3:3C:EB:A4:86:1D:E0:DF:6B:C0:4F:DF:2A:17:F2:12:6B
X509v3 Authority Key Identifier:
keyid:81:5F:96:1A:73:73:17:0D:A3:5D:BD:FC:88:F5:10:C7:D4:5A:60:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV-WGnNzFw2jXb38iPUQx9RaYKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/AIGN4zzrpIYd4N9rwE_fKhfyEms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/gV-WGnNzFw2jXb38iPUQx9RaYKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.64.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0f:ac:bd:f3:f6:87:e0:9b:5d:e2:91:73:ba:3a:09:0c:58:
bb:44:da:77:eb:9f:48:ec:bf:12:6a:11:43:d5:30:01:95:2d:
7b:13:4c:4d:02:0e:94:be:5a:d2:a9:d4:5d:b4:df:4e:e0:dc:
f6:49:b1:a5:54:a8:7a:64:a6:41:86:58:ac:d4:83:5d:ad:9e:
9e:cf:49:79:11:e1:d1:c5:b7:ea:6f:14:b5:95:45:39:57:f3:
46:42:3e:a8:41:23:d2:80:8b:4b:5e:c3:2a:1b:ad:cd:3a:ef:
49:7b:20:81:3e:ec:fc:76:45:b3:1d:28:07:7f:2b:f8:b0:1e:
84:45:7d:bb:83:6f:38:10:2f:52:e6:d3:e4:a6:a5:79:26:4e:
84:ee:d3:7b:98:a0:63:a2:3e:b4:ed:a1:84:56:f7:b9:59:eb:
e7:79:6d:86:b0:63:76:5e:5c:2d:52:c3:77:4f:e5:9b:2f:1a:
37:e5:5d:e4:cb:c4:3e:ae:2f:e1:06:77:25:b5:ee:6b:5f:b1:
bd:8f:79:3a:08:0a:fa:3a:23:f5:74:18:d7:83:30:20:5e:86:
b8:ff:8d:51:a9:10:27:b7:12:31:d1:f0:6f:aa:19:08:d9:85:
eb:52:58:51:f5:be:fe:74:53:32:dd:1a:99:7a:97:cb:77:82:
c5:27:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:10 2024 by rpki-client on console-fra.rpki-client.org