Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/mlUpcUIVnEzjQ8P6Z-R1uSwrwwU.roa
File: mlUpcUIVnEzjQ8P6Z-R1uSwrwwU.roa (raw, json)
Hash identifier: lyS6rf4+QRYdwEc72ye1wYyZWKVAGO3pLU62xHlLZfQ=
Subject key identifier: 9A:55:29:71:42:15:9C:4C:E3:43:C3:FA:67:E4:75:B9:2C:2B:C3:05
Certificate issuer: /CN=47e01c89d68f7fdedc2ddfb2553459cc8cbdbce8
Certificate serial: 0185710C2149EE9868F7B04EF3CF804B1078
Authority key identifier: 47:E0:1C:89:D6:8F:7F:DE:DC:2D:DF:B2:55:34:59:CC:8C:BD:BC:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-AcidaPf97cLd-yVTRZzIy9vOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/mlUpcUIVnEzjQ8P6Z-R1uSwrwwU.roa
Signing time: Mon 02 Jan 2023 05:54:58 +0000
ROA not before: Mon 02 Jan 2023 05:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210506
IP address blocks: 62.3.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:21:49:ee:98:68:f7:b0:4e:f3:cf:80:4b:10:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e01c89d68f7fdedc2ddfb2553459cc8cbdbce8
Validity
Not Before: Jan 2 05:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a55297142159c4ce343c3fa67e475b92c2bc305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:5d:af:4a:16:62:fd:95:5b:21:a9:23:aa:
27:b7:b2:6a:2b:9a:69:e9:1c:3b:01:d0:dc:a2:88:
fc:dd:e8:e7:18:0e:54:5e:d2:e7:c4:b5:b0:1c:4c:
88:a0:79:72:b0:58:d6:49:ca:e7:73:af:1e:07:80:
01:62:61:cc:28:dc:eb:a5:8e:05:e8:6c:7b:3b:a9:
11:33:5e:39:a6:e0:d2:0f:2c:c9:93:fa:62:46:de:
8a:70:41:ba:c8:45:05:f7:10:4c:f9:fd:6e:bc:8f:
a6:5f:98:8c:a0:a2:ae:b5:ae:1e:03:bd:57:23:67:
70:27:19:80:ee:03:1a:d6:cd:fa:58:21:96:6d:aa:
3e:e9:5d:85:66:29:29:3e:9e:85:f5:5c:8a:1d:d9:
ea:b8:bd:55:de:67:f3:f3:ac:e5:69:2a:72:50:8f:
52:7b:dd:3f:d6:0c:7f:23:77:10:2a:55:c2:a5:0e:
1d:b0:81:0e:df:32:3f:e6:b5:dc:0a:5c:97:86:2a:
3c:d8:43:06:53:07:20:fb:94:cd:a3:53:a3:44:64:
ba:a7:02:f1:d0:c0:22:de:72:9b:19:05:d2:25:0f:
bb:31:04:a5:e6:4c:c9:e6:3e:e6:ec:43:5f:3a:40:
33:f8:17:49:5b:3e:78:91:b8:8c:e7:c7:c4:a4:cc:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:29:71:42:15:9C:4C:E3:43:C3:FA:67:E4:75:B9:2C:2B:C3:05
X509v3 Authority Key Identifier:
keyid:47:E0:1C:89:D6:8F:7F:DE:DC:2D:DF:B2:55:34:59:CC:8C:BD:BC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-AcidaPf97cLd-yVTRZzIy9vOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/mlUpcUIVnEzjQ8P6Z-R1uSwrwwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/R-AcidaPf97cLd-yVTRZzIy9vOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.38.0/24
Signature Algorithm: sha256WithRSAEncryption
39:52:a2:d4:b6:98:d7:0d:25:c1:c6:0d:9d:83:f2:d5:2f:90:
67:4e:b0:ba:eb:18:b4:f0:79:01:aa:45:69:18:27:e0:87:5b:
0e:ca:85:1d:52:2a:68:e5:44:bb:f6:35:59:d2:49:79:f8:4b:
45:aa:d1:f7:77:1f:fb:a5:a7:bf:25:df:bd:1f:51:b5:80:96:
65:b3:92:26:84:db:a6:e0:4f:d6:02:c6:3d:2e:92:d5:d0:df:
3b:0d:22:5a:e7:a7:cd:46:39:8a:28:bb:8b:a7:18:f0:77:08:
10:30:bf:dc:8a:0f:16:5b:6d:11:77:44:f6:a1:dc:e3:cd:03:
82:55:7b:a6:95:ba:79:25:b6:e8:fe:fe:a4:00:16:85:59:03:
1f:5f:fa:45:65:5e:6e:75:3c:82:a0:39:b0:87:b9:8d:07:49:
6d:ae:1d:34:72:40:da:78:b0:ff:88:a0:0a:6e:7a:9d:ff:83:
4e:d0:ec:3d:91:b0:cd:1b:f9:71:bf:d9:2a:92:73:fb:27:84:
dd:cd:cd:49:2d:09:91:e2:14:c1:4d:62:d7:d0:01:32:00:fa:
d3:18:82:df:4b:d7:65:38:f9:f8:62:a4:65:cf:33:59:cb:a6:
fe:61:8f:97:85:08:9b:bb:05:bb:8e:f7:26:4b:23:c5:47:8b:
22:93:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org