Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/5ZEGqy-Sk_DCNX7OvL9-cpU1nhQ.roa
File: 5ZEGqy-Sk_DCNX7OvL9-cpU1nhQ.roa (raw, json)
Hash identifier: mpiWd7SDzbpePqslKOAEyAiXqknE6sKHftv40c6ynRI=
Subject key identifier: E5:91:06:AB:2F:92:93:F0:C2:35:7E:CE:BC:BF:7E:72:95:35:9E:14
Certificate issuer: /CN=4b2d90122264719147a561e7c6c61f7cc1706c92
Certificate serial: B279
Authority key identifier: 4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/5ZEGqy-Sk_DCNX7OvL9-cpU1nhQ.roa
Signing time: Thu 07 Apr 2022 01:35:32 +0000
ROA not before: Thu 07 Apr 2022 01:35:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 62.106.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45689 (0xb279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2d90122264719147a561e7c6c61f7cc1706c92
Validity
Not Before: Apr 7 01:35:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e59106ab2f9293f0c2357ecebcbf7e7295359e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:1d:d0:8b:63:05:cf:04:c1:b2:08:98:c1:
16:a4:d6:dd:0a:c2:c1:4d:0a:b3:d7:7c:d7:29:92:
65:cc:bc:00:8f:77:ee:10:5b:fc:d7:82:9b:34:09:
e1:ff:14:bc:48:cf:e9:62:55:d0:96:eb:e7:f4:f8:
26:1b:b2:3f:ca:ad:f0:61:7e:01:9d:e7:f3:51:8a:
46:c0:aa:0b:97:79:21:a0:6a:66:79:bf:c4:15:6a:
8f:2c:4a:42:d9:2e:54:f6:a0:e3:cc:d5:1d:88:60:
df:f4:47:23:41:11:13:24:22:3b:d5:c7:99:a3:5c:
52:7b:26:d2:b4:70:c3:07:59:b4:b5:45:5f:b5:fb:
8d:0b:a8:43:0a:38:cc:46:49:5e:90:1c:5a:10:a0:
45:4d:50:c2:65:8a:76:c0:7f:d1:72:9e:68:39:6f:
93:65:50:af:f0:4b:6c:a4:08:ea:c1:e2:da:59:73:
81:73:d5:14:f8:e0:ce:79:30:a9:c4:53:20:4d:a6:
d8:5b:ab:e5:7e:13:16:8b:b6:c9:17:de:b6:f9:8c:
c4:ce:bf:41:d1:a6:bf:4c:a6:47:8f:8a:d4:75:e2:
a6:5e:db:b0:4e:5d:8b:02:4a:ac:ca:93:bd:1e:a0:
af:bb:61:41:52:59:45:34:a6:27:a3:54:1b:49:9c:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:91:06:AB:2F:92:93:F0:C2:35:7E:CE:BC:BF:7E:72:95:35:9E:14
X509v3 Authority Key Identifier:
keyid:4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/5ZEGqy-Sk_DCNX7OvL9-cpU1nhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/Sy2QEiJkcZFHpWHnxsYffMFwbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:92:87:9b:3d:0d:6d:d0:43:b4:09:c5:c7:8c:09:03:36:0d:
2a:61:31:dd:43:3c:c5:dd:da:f4:16:5d:b4:84:63:c4:a3:21:
83:b6:c0:66:11:04:9a:2c:35:89:4a:e3:2f:95:3c:72:85:c7:
d1:da:72:c1:d0:e5:9b:65:9a:10:a0:69:6a:4d:53:c0:d4:f0:
2e:bf:1b:fa:e4:83:fb:e1:5f:5f:7e:35:21:91:1b:c1:6a:8f:
7f:eb:9f:25:ba:bb:5e:fe:b8:53:3f:4f:04:96:a6:89:17:16:
c6:95:d1:38:e4:5b:98:77:e7:e5:2b:5d:92:c5:2a:ec:08:17:
f8:b5:3f:fd:0f:ce:02:17:64:ab:57:04:7b:80:44:f8:be:68:
07:6d:fb:4b:06:2e:07:9b:e2:44:87:4d:36:71:ed:39:a2:49:
b6:5f:cd:74:e9:f2:54:d7:72:77:cd:e9:04:1d:10:25:35:45:
31:bd:bd:3b:e7:ce:9a:f6:e2:5e:ce:75:e7:32:1f:f7:81:b4:
d5:03:cd:9d:9a:b2:ec:d1:44:d5:32:02:87:30:fd:43:73:9c:
78:fc:3b:d9:4f:2d:9d:84:e2:49:51:fa:21:70:ec:2c:76:1d:
47:72:d7:b8:4f:66:e8:70:71:c1:51:93:aa:c8:b1:ec:8c:0b:
d5:77:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:31 2024 by rpki-client on console-ams.rpki-client.org