Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/b6Cd18E--U53lU0Pzd6y4m3zLOk.roa
File: b6Cd18E--U53lU0Pzd6y4m3zLOk.roa (raw, json)
Hash identifier: XMuzypxnAfjt+PUUOpzWSr5jiNWZJ2EXpiJGW7qhe3A=
Subject key identifier: 6F:A0:9D:D7:C1:3E:F9:4E:77:95:4D:0F:CD:DE:B2:E2:6D:F3:2C:E9
Certificate issuer: /CN=e02a93acae2cea321b7caa4ec551675ab9907b56
Certificate serial: 01857169E52E406ED50B3304BC4765683339
Authority key identifier: E0:2A:93:AC:AE:2C:EA:32:1B:7C:AA:4E:C5:51:67:5A:B9:90:7B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/b6Cd18E--U53lU0Pzd6y4m3zLOk.roa
Signing time: Mon 02 Jan 2023 07:37:23 +0000
ROA not before: Mon 02 Jan 2023 07:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 62.3.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:e5:2e:40:6e:d5:0b:33:04:bc:47:65:68:33:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02a93acae2cea321b7caa4ec551675ab9907b56
Validity
Not Before: Jan 2 07:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa09dd7c13ef94e77954d0fcddeb2e26df32ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:d5:53:0c:35:65:d4:2a:48:f8:cc:7e:ab:
37:6a:27:be:76:16:99:3d:4b:b4:f7:d2:a7:8f:dc:
cc:7b:5e:7a:a3:f8:14:5f:22:63:61:3b:77:80:7c:
83:4a:64:11:4b:7b:3b:e7:ea:0c:46:1a:78:5a:c1:
ec:e3:53:a9:31:51:bb:42:68:31:be:bd:01:de:9e:
21:07:3f:01:97:bd:7b:9d:7b:40:b3:b5:ac:13:16:
2f:f2:e9:b9:b5:27:53:8a:6e:d8:b2:71:d1:43:a6:
af:3a:c4:4d:ad:9a:60:ec:92:c7:b1:cd:2f:d9:98:
61:c6:e8:13:a0:74:34:1a:79:90:58:0d:6e:cc:aa:
a6:93:7b:92:bb:28:5c:8a:d6:f3:2e:77:a0:44:c7:
ff:ef:e4:65:9a:1c:a3:93:10:f4:58:8c:50:30:31:
3f:9a:d2:b0:55:ef:ea:59:0e:ff:eb:36:16:c9:11:
af:68:c4:c9:a9:7c:74:77:9c:89:0b:aa:b2:fd:43:
0e:51:00:bb:e9:08:d5:6b:7b:a6:25:4d:c3:ac:23:
80:88:21:fc:c3:55:b3:f6:fa:c1:4b:dc:04:8a:70:
92:55:e5:9f:a9:cc:0a:a6:9d:42:30:65:6c:73:e0:
55:3b:25:92:26:82:6a:2d:93:d6:9e:3e:18:73:f8:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:9D:D7:C1:3E:F9:4E:77:95:4D:0F:CD:DE:B2:E2:6D:F3:2C:E9
X509v3 Authority Key Identifier:
keyid:E0:2A:93:AC:AE:2C:EA:32:1B:7C:AA:4E:C5:51:67:5A:B9:90:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/b6Cd18E--U53lU0Pzd6y4m3zLOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.23.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0b:f1:80:41:8e:77:de:a5:6f:5e:ae:95:d9:a6:bd:f7:e9:
c5:09:8a:91:63:1b:49:34:a8:0c:9a:b0:0e:7a:23:0a:db:be:
be:32:bc:81:87:d8:63:88:b6:b4:5e:c6:73:66:1e:04:ff:e7:
89:16:be:a8:c5:32:9f:e9:f3:59:3a:b9:62:ec:94:ec:2a:37:
cd:a9:79:fd:7f:3d:ea:3a:a8:a1:40:70:db:57:8b:2c:d0:8d:
32:5d:20:55:5d:f7:61:4f:e4:c4:56:0a:61:31:84:0a:03:28:
f3:5a:89:fd:90:fa:bf:dd:9e:06:c3:6a:52:7d:97:67:76:48:
2d:bd:c9:be:af:04:44:31:4e:b6:15:e1:04:67:75:9c:c9:cb:
0c:ba:6d:d1:4d:5a:d2:18:b5:19:cd:f2:09:1b:33:91:2d:04:
0e:a5:2f:64:b1:a5:b3:77:82:48:1a:85:6e:bd:b7:c4:1d:ed:
1d:db:db:07:89:e6:99:b9:5c:ec:1a:aa:a5:04:a8:85:9f:97:
ec:86:f3:df:07:7d:4a:1c:2a:c4:56:f3:da:84:33:76:3a:29:
7b:32:d2:0b:d1:c8:1c:16:f5:84:34:0a:60:06:a0:21:33:5f:
62:f8:ab:b5:7c:fb:0b:f1:1a:a5:a4:ae:91:10:46:93:91:2c:
6c:13:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 09:16:26 2023 by rpki-client on console-fra.rpki-client.org