Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/195f9f-61dd-433c-a035-22b1b5f8cbf8/1/A2H0J84BoQhwnO2H936igQ_dh50.roa
File: A2H0J84BoQhwnO2H936igQ_dh50.roa (raw, json)
Hash identifier: 6PfmlzTF/20S3zJHK77uwvjBojIhif66FptSqE5Huw8=
Subject key identifier: 03:61:F4:27:CE:01:A1:08:70:9C:ED:87:F7:7E:A2:81:0F:DD:87:9D
Certificate issuer: /CN=90fdf3d98b7b1264bf02b134f91ed14b4b36145d
Certificate serial: 01856BDC6163E6CC5EAD4ED75ED2D7C67A17
Authority key identifier: 90:FD:F3:D9:8B:7B:12:64:BF:02:B1:34:F9:1E:D1:4B:4B:36:14:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP3z2Yt7EmS_ArE0-R7RS0s2FF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/195f9f-61dd-433c-a035-22b1b5f8cbf8/1/A2H0J84BoQhwnO2H936igQ_dh50.roa
Signing time: Sun 01 Jan 2023 05:44:42 +0000
ROA not before: Sun 01 Jan 2023 05:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64484
IP address blocks: 62.3.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:61:63:e6:cc:5e:ad:4e:d7:5e:d2:d7:c6:7a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fdf3d98b7b1264bf02b134f91ed14b4b36145d
Validity
Not Before: Jan 1 05:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0361f427ce01a108709ced87f77ea2810fdd879d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:4e:6d:80:5f:5b:72:d8:4e:05:6e:70:c9:
7c:a8:7e:3e:ca:4c:8b:89:1e:a7:77:56:1b:93:52:
3d:eb:a6:ac:61:45:be:4e:b0:c3:7b:c6:1a:7d:37:
25:bb:3b:0c:e9:54:87:4b:3b:a0:3c:2d:e0:42:66:
82:a8:a1:b2:d9:d2:28:58:67:a9:34:33:17:a5:9d:
0a:d0:d1:d4:b7:e7:b9:72:50:e3:73:01:1f:ed:f4:
84:55:db:13:fa:d7:09:e6:31:4c:94:0e:ce:59:a0:
4d:18:47:d9:56:26:60:78:7f:b2:2e:8e:dd:09:db:
f6:42:c1:05:28:8a:ff:f3:93:7e:ef:b8:20:86:1c:
d8:f6:a9:74:59:1b:34:24:ba:63:31:9c:74:2d:9e:
b4:bd:cf:19:01:10:96:5a:bc:5d:87:07:d1:2f:b4:
08:13:94:1a:5d:28:04:ec:c6:11:02:a2:ed:90:25:
65:b4:09:3d:84:31:2d:68:ef:1c:11:20:e6:93:89:
a4:c3:c4:e9:38:e5:c1:0f:c7:e1:f2:cb:48:98:26:
1e:c1:2e:cc:cf:39:3d:56:7d:a6:31:a1:73:f5:c4:
cb:fe:20:08:08:04:fa:56:57:dc:d2:e9:e9:7d:00:
dd:ab:09:e5:20:4d:f3:ff:fa:17:27:2c:53:6c:1e:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:61:F4:27:CE:01:A1:08:70:9C:ED:87:F7:7E:A2:81:0F:DD:87:9D
X509v3 Authority Key Identifier:
keyid:90:FD:F3:D9:8B:7B:12:64:BF:02:B1:34:F9:1E:D1:4B:4B:36:14:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP3z2Yt7EmS_ArE0-R7RS0s2FF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/195f9f-61dd-433c-a035-22b1b5f8cbf8/1/A2H0J84BoQhwnO2H936igQ_dh50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/195f9f-61dd-433c-a035-22b1b5f8cbf8/1/kP3z2Yt7EmS_ArE0-R7RS0s2FF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.33.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ea:c0:d9:5f:fc:cc:b7:30:24:61:fb:9e:47:a4:90:76:75:
ab:58:42:70:49:f5:af:2c:34:85:36:66:75:47:cf:8c:d1:8d:
5e:73:1c:86:35:e4:b7:c8:01:ba:fc:32:cb:de:1f:2a:14:ce:
8b:4a:f6:58:2a:ba:19:b9:0c:fc:76:e7:a0:dd:e5:2f:b3:39:
fa:6d:1d:95:0e:5f:c2:11:1f:17:1b:fd:24:8a:b5:b0:bf:51:
9f:a8:9e:17:df:d3:df:55:bc:b3:39:ef:b4:b2:0f:98:36:23:
c1:71:8a:62:95:7a:e9:60:74:36:31:d1:dc:bd:e9:a9:ad:22:
e9:33:2d:62:29:a8:cf:a6:98:53:95:5b:cb:ae:56:c0:ed:14:
01:61:83:7c:09:43:31:63:9e:d6:68:41:f4:4b:f0:c4:0a:16:
68:60:9a:e7:7f:b3:29:0b:ca:f0:db:19:ed:de:55:d2:f9:c2:
de:c1:dd:e8:bc:c2:ef:1d:97:6a:f3:d5:2e:0d:70:a2:54:46:
a6:dc:25:ee:ef:bb:1a:78:50:36:1b:08:61:f2:e0:d6:90:53:
a6:bc:d7:7f:50:63:a1:23:b8:30:a6:b9:d4:01:8f:b7:0b:61:
70:39:d1:2e:4e:c9:3c:0f:0c:95:79:b8:20:49:d8:ae:65:be:
8e:d1:6d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:38 2024 by rpki-client on console-fra.rpki-client.org