Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/Mz0Ft8Q7yjN4_JkursDQHPeHIxs.roa
File: Mz0Ft8Q7yjN4_JkursDQHPeHIxs.roa (raw, json)
Hash identifier: d923UjSYr/27rz7CjADK8Rs2ksD0FsJkFbVHrJ4hO8k=
Subject key identifier: 33:3D:05:B7:C4:3B:CA:33:78:FC:99:2E:AE:C0:D0:1C:F7:87:23:1B
Certificate issuer: /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial: 018D13D7F12F08D176FBEA226B962AAB754C
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/Mz0Ft8Q7yjN4_JkursDQHPeHIxs.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 62.233.56.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f1:2f:08:d1:76:fb:ea:22:6b:96:2a:ab:75:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=333d05b7c43bca3378fc992eaec0d01cf787231b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:d8:15:c0:90:e3:f7:2e:fa:ba:06:42:80:
85:b1:f1:a0:e2:d8:27:0b:ef:06:89:65:e2:6e:30:
41:a0:c0:10:25:6a:7a:d8:bd:ff:e6:88:2e:53:e2:
1e:0b:bf:dd:37:6b:28:29:69:cd:7e:4f:8f:bc:dd:
f2:03:62:27:57:0b:b4:f2:58:9b:2e:65:76:a5:8e:
9a:0c:00:96:50:e6:27:41:d1:81:18:ea:6c:2b:9e:
ca:fc:e3:a2:62:64:78:a3:9a:ce:68:bb:9d:f4:ae:
1b:2a:03:de:4c:bf:ae:bc:e3:cc:08:67:74:a7:af:
b7:b3:90:d4:c2:af:a6:59:3a:28:12:a5:9e:6f:bd:
fb:a7:5a:43:e8:2f:34:84:0e:7a:b9:bc:50:c7:1f:
37:78:7e:f2:03:08:cb:c5:0e:dc:ef:d3:37:d2:fb:
9d:8e:83:fc:f7:50:33:77:c9:a4:80:3c:fa:65:da:
20:ce:34:14:41:49:de:15:34:3f:bd:00:c5:db:9d:
2f:47:a2:70:00:cf:a7:b7:a6:07:b1:d1:47:ad:63:
22:a6:8e:88:1a:21:c8:41:41:98:47:9d:63:93:e1:
7d:2a:cb:02:ca:b7:65:7a:9a:f6:58:1d:9e:ad:f1:
ef:b1:18:3a:f1:46:71:32:ff:76:8d:a6:2e:6c:6f:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:05:B7:C4:3B:CA:33:78:FC:99:2E:AE:C0:D0:1C:F7:87:23:1B
X509v3 Authority Key Identifier:
keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/Mz0Ft8Q7yjN4_JkursDQHPeHIxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.56.0/24
146.19.152.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:29:b4:48:2b:c9:9f:9a:0d:01:36:49:b3:3e:38:fb:64:87:
3e:a9:31:3f:9f:df:9d:30:92:58:2b:ce:16:0b:39:20:c1:46:
0d:6a:eb:e6:94:9e:b6:cd:25:1d:fb:52:a1:86:d4:3c:d1:b0:
02:ff:e1:06:98:0b:62:50:1d:a9:37:e7:13:ff:57:5b:7f:b3:
fd:21:de:d1:e1:55:b8:6e:08:29:ba:36:0b:22:07:e5:5d:e9:
c2:48:b8:8f:d6:f6:5e:61:c0:01:58:53:de:1d:77:38:13:30:
b1:67:91:21:b9:52:6a:20:f2:3c:28:65:59:2f:49:e7:2c:67:
56:3d:41:3f:90:cf:fd:2e:df:d9:ac:4a:6a:d5:24:12:4c:8e:
d3:96:77:b9:2a:76:f7:e6:ba:ab:f8:00:7b:35:0d:cc:73:8f:
88:58:72:a4:56:68:1b:b8:15:d5:47:01:65:27:8b:5e:8c:a9:
25:2f:11:fe:06:d0:1e:f3:ed:39:dc:25:46:ef:aa:84:2c:b5:
a8:5f:f5:79:e4:d5:80:ec:ed:a1:27:bf:a9:93:6a:5a:a2:bb:
46:55:49:be:c7:66:8b:5f:ba:76:98:53:0c:56:ad:8d:77:b4:
bf:e5:62:c1:f0:fc:7a:2b:1b:7b:f5:a1:db:e2:69:ce:28:f5:
5f:cd:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:23 2024 by rpki-client on console-ams.rpki-client.org