Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/KrvORIkftlVrw9oeVEaHkHHnNEw.roa
File: KrvORIkftlVrw9oeVEaHkHHnNEw.roa (raw, json)
Hash identifier: zg/l4Y/u9+7s2YFX39kg1nzvQydA/ifC6hSu8giTD2M=
Subject key identifier: 2A:BB:CE:44:89:1F:B6:55:6B:C3:DA:1E:54:46:87:90:71:E7:34:4C
Certificate issuer: /CN=a55f47787b6d21a5d95960232fef2f4db2b98ec3
Certificate serial: 01884906872A5C8554B84F16180E93418612
Authority key identifier: A5:5F:47:78:7B:6D:21:A5:D9:59:60:23:2F:EF:2F:4D:B2:B9:8E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pV9HeHttIaXZWWAjL-8vTbK5jsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/KrvORIkftlVrw9oeVEaHkHHnNEw.roa
Signing time: Tue 23 May 2023 14:32:24 +0000
ROA not before: Tue 23 May 2023 14:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 62.233.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:06:87:2a:5c:85:54:b8:4f:16:18:0e:93:41:86:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55f47787b6d21a5d95960232fef2f4db2b98ec3
Validity
Not Before: May 23 14:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2abbce44891fb6556bc3da1e5446879071e7344c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:32:86:75:1d:58:26:0f:b2:a9:77:c6:23:
0a:be:67:d9:45:3b:a6:36:5c:29:1b:5b:d5:da:a5:
ad:45:c7:fb:8b:12:c7:a5:26:3a:d5:ac:d4:20:86:
f7:28:24:29:7e:5f:40:b9:d8:88:64:c3:04:36:2a:
88:50:29:fb:7b:14:83:ba:d9:8a:db:a1:16:a9:1d:
c5:c8:6f:c6:fe:1d:12:a6:68:a8:c6:b8:10:03:40:
95:2b:45:d3:52:13:34:cf:fd:d6:57:74:cb:8f:bd:
82:b5:50:f6:58:5e:16:95:d0:72:9b:55:6f:42:4a:
86:20:40:b4:80:d7:c4:c2:e9:fe:5e:29:f9:07:b3:
53:00:28:a6:84:19:4e:b1:16:ec:89:87:f2:0f:20:
70:f3:bf:7a:45:59:23:1e:ef:f2:1e:bf:ea:a9:c9:
43:38:6a:62:98:04:df:0a:4d:c6:51:de:fb:8b:0d:
ab:99:36:2e:ab:86:a4:76:fe:73:5f:90:f1:e0:46:
f5:08:49:db:32:ba:f4:6f:20:65:bc:5c:8f:59:38:
a4:d8:13:df:7f:48:3f:db:a4:28:13:e6:eb:dc:50:
15:2f:7c:49:0e:27:a2:bf:60:01:85:91:3a:e4:02:
9e:16:33:ee:52:7d:83:03:65:8a:35:5f:e2:f4:01:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:CE:44:89:1F:B6:55:6B:C3:DA:1E:54:46:87:90:71:E7:34:4C
X509v3 Authority Key Identifier:
keyid:A5:5F:47:78:7B:6D:21:A5:D9:59:60:23:2F:EF:2F:4D:B2:B9:8E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pV9HeHttIaXZWWAjL-8vTbK5jsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/KrvORIkftlVrw9oeVEaHkHHnNEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/pV9HeHttIaXZWWAjL-8vTbK5jsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.39.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b1:ff:7b:55:29:43:4d:75:2b:ff:63:7d:c6:5a:da:73:77:
05:77:dc:68:71:2f:33:df:ac:64:a5:b8:6f:a6:42:81:ba:14:
8c:a7:58:48:ae:7f:23:29:8b:df:13:a2:a5:7e:b0:be:a5:e8:
c0:59:bd:55:30:c4:56:fe:0b:b6:7d:fd:59:0c:5c:98:80:a4:
14:aa:91:70:e3:ed:b3:1a:00:81:48:d6:15:2e:0d:52:bf:82:
c9:5c:12:57:fc:4a:ca:27:9b:4f:fd:0c:79:cb:69:a5:3a:2e:
5c:92:22:b3:28:55:26:85:85:ad:4a:d9:ff:35:de:47:82:5c:
e4:58:9c:89:8c:4f:37:a0:9d:08:b1:de:89:d5:f0:86:fd:cc:
d9:1b:f3:c3:15:41:fc:c4:f0:b6:b2:60:e8:c0:81:81:4f:be:
80:6f:6c:76:bb:c0:03:a6:86:45:d7:51:a1:dc:9c:ad:a1:c3:
cd:56:cd:6b:ce:a6:38:a3:e5:91:e6:d7:64:c1:4f:ce:be:37:
eb:35:a5:17:5c:56:72:fd:0d:05:06:cd:1f:90:61:3e:71:8d:
f3:50:4d:dd:6d:aa:08:3b:bc:1a:71:f2:9d:50:6d:d1:fc:de:
0f:d1:c9:24:7b:5d:98:95:42:51:d6:ab:9c:f8:86:ca:9b:00:
76:38:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:34 2024 by rpki-client on console-ams.rpki-client.org