Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/IB5idwM_jcdlVOrHBrVRqBiT7-8.roa
File: IB5idwM_jcdlVOrHBrVRqBiT7-8.roa (raw, json)
Hash identifier: znKTXgvA8sVgLZvO2fSz3ukLWUAirlYVFiOedYdA8II=
Subject key identifier: 20:1E:62:77:03:3F:8D:C7:65:54:EA:C7:06:B5:51:A8:18:93:EF:EF
Certificate issuer: /CN=e39176c5a602527533c2b541406ae83f209e620c
Certificate serial: 018CC726F631A58824963EBD1A23AE6E3066
Authority key identifier: E3:91:76:C5:A6:02:52:75:33:C2:B5:41:40:6A:E8:3F:20:9E:62:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45F2xaYCUnUzwrVBQGroPyCeYgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/IB5idwM_jcdlVOrHBrVRqBiT7-8.roa
Signing time: Mon 01 Jan 2024 22:31:08 +0000
ROA not before: Mon 01 Jan 2024 22:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206286
IP address blocks: 62.68.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f6:31:a5:88:24:96:3e:bd:1a:23:ae:6e:30:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39176c5a602527533c2b541406ae83f209e620c
Validity
Not Before: Jan 1 22:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=201e6277033f8dc76554eac706b551a81893efef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7d:51:d9:c3:67:a8:b9:9b:4d:a7:5a:ca:6a:
86:da:7b:24:ac:8d:10:70:ec:17:fd:2b:97:5c:5f:
98:4d:cd:b4:8d:78:48:b6:52:ef:cb:e8:0c:d1:35:
7a:b1:a2:b6:d9:9c:6c:e9:57:e3:ac:ae:e7:1e:09:
48:8d:4b:22:2e:ee:a3:74:1d:92:e8:f3:6a:68:5c:
44:b3:69:65:fe:bd:7d:95:1d:55:27:be:ea:af:1d:
21:0a:e1:86:07:f3:29:2e:6f:e5:f3:fb:2b:7a:d2:
c5:2d:0d:53:f7:a7:47:d9:84:dd:1a:21:88:56:c8:
c3:d5:37:df:d2:8f:6a:ad:86:f7:3d:33:97:56:62:
9b:a3:5a:0f:68:2c:f0:02:aa:ab:02:1d:ee:57:44:
8e:23:f6:74:64:3c:1b:a4:2a:ac:91:23:c9:e6:c1:
b5:f2:bf:88:78:d7:ca:1e:7c:74:b0:62:fe:67:3d:
7e:bf:ad:0c:23:3e:55:ed:b4:60:d3:56:5e:84:4c:
81:16:2a:aa:a0:2d:3e:bd:dd:aa:69:d3:80:ed:3d:
b6:11:61:1c:99:83:27:1a:25:ac:03:d2:30:44:e9:
f5:41:0b:49:8d:c5:93:87:da:f1:4e:0f:39:19:13:
c3:43:2c:6a:79:11:d9:27:96:d1:d3:d0:95:4c:11:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1E:62:77:03:3F:8D:C7:65:54:EA:C7:06:B5:51:A8:18:93:EF:EF
X509v3 Authority Key Identifier:
keyid:E3:91:76:C5:A6:02:52:75:33:C2:B5:41:40:6A:E8:3F:20:9E:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45F2xaYCUnUzwrVBQGroPyCeYgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/IB5idwM_jcdlVOrHBrVRqBiT7-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/45F2xaYCUnUzwrVBQGroPyCeYgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.68.0/24
Signature Algorithm: sha256WithRSAEncryption
76:12:0e:1f:da:e7:55:04:e3:1d:2a:12:b2:7d:5c:19:75:4b:
4e:b1:6a:59:66:cc:83:cf:1e:5e:ea:ab:49:39:e9:be:2a:e6:
be:ad:24:0a:e1:f9:9d:1e:50:4f:32:a2:c6:db:16:74:61:3d:
0f:83:15:38:49:04:48:6d:f0:ad:ad:7b:36:91:46:05:75:ec:
25:73:ad:ad:78:38:be:e0:3a:63:db:eb:f6:2e:fc:4a:c9:68:
f8:ea:09:a6:35:08:de:86:5d:0a:6e:a9:67:92:13:67:d9:f4:
4c:9d:20:15:11:cd:e1:a3:27:3c:3b:7c:1c:ef:36:c8:e6:a4:
b5:3f:a6:6b:7a:57:20:4b:7d:d7:65:76:55:97:02:a2:8b:44:
f7:fa:a9:98:9f:18:6d:af:e0:c7:54:27:97:57:6e:c9:ae:c1:
3d:a3:88:3b:3d:5a:ad:ad:1b:1f:66:2e:8c:c9:18:f9:05:30:
82:40:b1:92:7a:1f:d7:9a:66:37:46:93:7b:6b:e0:6d:6a:f3:
cc:e7:a2:35:de:29:06:d0:e8:61:06:04:d1:8d:03:c1:90:06:
0e:d0:bc:47:45:75:f7:f7:7d:9f:40:35:ad:28:db:28:53:0a:
06:a8:66:24:3d:6e:3d:4d:29:99:2d:ae:f5:e4:65:17:70:27:
d7:ca:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:10 2024 by rpki-client on console-ams.rpki-client.org