Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/7m-K1WWx7ZyutnGzacInX4FgeJo.roa
File: 7m-K1WWx7ZyutnGzacInX4FgeJo.roa (raw, json)
Hash identifier: +mokTBbz4YThpc/b4hEH8v3qKIIJ9MPZre2m5V49Jx0=
Subject key identifier: EE:6F:8A:D5:65:B1:ED:9C:AE:B6:71:B3:69:C2:27:5F:81:60:78:9A
Certificate issuer: /CN=1b812bb8ff6bd05689dfa7bd5322bb9a98cee715
Certificate serial: 01856FD5175B103388992E857F47E70F927D
Authority key identifier: 1B:81:2B:B8:FF:6B:D0:56:89:DF:A7:BD:53:22:BB:9A:98:CE:E7:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G4EruP9r0FaJ36e9UyK7mpjO5xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/7m-K1WWx7ZyutnGzacInX4FgeJo.roa
Signing time: Mon 02 Jan 2023 00:15:14 +0000
ROA not before: Mon 02 Jan 2023 00:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 62.204.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:17:5b:10:33:88:99:2e:85:7f:47:e7:0f:92:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b812bb8ff6bd05689dfa7bd5322bb9a98cee715
Validity
Not Before: Jan 2 00:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee6f8ad565b1ed9caeb671b369c2275f8160789a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:e9:19:e4:b4:62:78:7b:db:d9:bb:31:75:
80:59:04:cc:8e:d4:ba:87:5d:69:07:85:0f:00:c9:
28:51:e7:ed:55:79:19:eb:97:77:8a:25:15:7e:ca:
36:04:13:7b:69:52:f0:b9:b4:b7:31:36:b0:f6:7a:
10:fe:78:2f:7b:ad:26:57:47:4c:9f:e3:7a:27:01:
55:e9:7b:f4:b2:97:2d:19:da:a0:a6:8f:50:b6:88:
f2:9c:75:ca:6e:f8:0c:2e:ef:74:6f:81:bd:cc:a4:
6b:e2:9c:d5:40:00:5c:58:e1:68:5f:88:dc:8c:50:
d2:1b:d7:05:f1:09:b7:49:66:e6:3d:a6:58:e4:8a:
7c:b6:e6:b0:61:fa:e5:b8:00:b8:1a:b4:cd:19:a5:
ea:a5:c9:db:41:8e:78:fc:38:8e:c7:5e:9c:0c:f0:
4d:54:ff:aa:7d:8c:c9:04:c9:17:d3:88:ec:cf:fa:
94:73:06:e7:08:7d:a5:cd:13:1a:58:d0:02:a4:d3:
4b:aa:22:3f:fa:2b:01:a2:aa:64:68:ee:87:ab:b2:
33:fb:47:1c:c4:aa:51:6c:5f:59:ce:8c:6c:37:63:
a6:b6:06:17:d3:7e:3e:6d:d6:92:d5:a9:4d:28:e4:
ed:15:16:81:22:af:6b:0a:9e:96:b9:4e:d7:2b:4c:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:8A:D5:65:B1:ED:9C:AE:B6:71:B3:69:C2:27:5F:81:60:78:9A
X509v3 Authority Key Identifier:
keyid:1B:81:2B:B8:FF:6B:D0:56:89:DF:A7:BD:53:22:BB:9A:98:CE:E7:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G4EruP9r0FaJ36e9UyK7mpjO5xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/7m-K1WWx7ZyutnGzacInX4FgeJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/G4EruP9r0FaJ36e9UyK7mpjO5xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:0a:29:83:46:ea:70:13:e6:e3:0a:b8:a2:f3:09:73:ec:df:
56:27:35:74:95:c6:2f:09:ac:28:99:30:56:cd:26:a3:0b:fe:
d3:12:27:15:06:c1:c2:06:e9:31:e1:4f:37:7e:37:11:85:93:
a2:84:5e:89:a0:ca:37:b5:71:2b:cd:1f:00:49:66:4b:bf:7f:
cb:b8:a7:42:5c:ab:42:e1:b5:11:14:c8:8a:79:09:a8:2e:ee:
7b:4b:4d:d5:19:d2:6c:d1:91:ae:17:70:42:8f:59:d2:e5:09:
7e:30:97:f7:f8:11:42:fb:43:9a:db:b7:ff:03:29:03:d5:3e:
4d:21:98:3e:30:fd:91:6c:a2:a3:3e:ba:33:0d:a3:e7:b7:81:
8b:94:b0:63:46:dc:e3:b4:69:f4:78:29:7e:a7:db:b9:e1:de:
0a:c2:2d:cb:70:c3:8d:ce:bd:bc:35:b1:90:43:12:32:28:d0:
2a:b0:44:65:54:e4:8d:35:87:61:4d:0d:63:1e:63:d7:d9:43:
f1:c2:c6:6f:c2:9c:88:0c:f4:93:61:77:89:40:1e:25:6e:50:
16:6a:39:af:21:70:dc:4f:d0:d0:94:2f:a7:83:f3:e5:58:27:
86:13:f4:5f:e4:db:7e:31:5b:e9:c2:3c:a3:ba:8b:75:66:2d:
65:ba:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:58 2024 by rpki-client on console-ams.rpki-client.org