Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e4bfda-e708-4eef-919a-4b594278e80e/1/MhZnxgdFl4AXbr8k-xBBa_F2Jak.roa
File: MhZnxgdFl4AXbr8k-xBBa_F2Jak.roa (raw, json)
Hash identifier: nsMkpKwDYkXUu0Bz6KDcylbn502j9H7X2/7ghv79iO0=
Subject key identifier: 32:16:67:C6:07:45:97:80:17:6E:BF:24:FB:10:41:6B:F1:76:25:A9
Certificate issuer: /CN=394c4f1d8bccc14046093102d57b34c9129bc47e
Certificate serial: 01856BC10815556B4781C13AC7685454C23B
Authority key identifier: 39:4C:4F:1D:8B:CC:C1:40:46:09:31:02:D5:7B:34:C9:12:9B:C4:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxPHYvMwUBGCTEC1Xs0yRKbxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e4bfda-e708-4eef-919a-4b594278e80e/1/MhZnxgdFl4AXbr8k-xBBa_F2Jak.roa
Signing time: Sun 01 Jan 2023 05:14:50 +0000
ROA not before: Sun 01 Jan 2023 05:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212963
IP address blocks: 62.3.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:08:15:55:6b:47:81:c1:3a:c7:68:54:54:c2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394c4f1d8bccc14046093102d57b34c9129bc47e
Validity
Not Before: Jan 1 05:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=321667c607459780176ebf24fb10416bf17625a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:6f:c3:4f:9b:b8:ac:8d:ec:96:a6:3c:58:
04:3b:cc:43:97:8a:d5:e2:57:52:61:7a:66:97:12:
95:79:c6:ba:41:4f:c9:e3:1d:02:3f:73:12:0c:82:
eb:10:e6:d6:da:8a:e5:96:72:6a:2d:e2:0f:22:74:
ea:fd:63:20:20:79:67:60:f2:12:97:e3:49:72:4a:
b6:3b:8e:70:bb:b8:0f:53:8f:bb:4e:88:35:0c:e9:
d5:6b:72:7c:02:e8:7a:70:a0:a9:84:5a:ef:11:03:
6d:21:7c:21:9f:e2:d2:76:20:97:60:1b:f2:77:b4:
41:a0:cf:d8:f3:3f:15:3e:79:2d:f0:56:5b:13:cd:
8d:df:91:bd:2f:88:d6:cb:e1:51:fc:a0:3e:28:a3:
1c:c8:ab:39:58:4d:9f:ad:d8:9c:e4:f1:26:e1:07:
be:13:5d:27:e5:e8:22:64:a5:6e:25:a5:e4:c5:4e:
48:a6:41:be:3c:0c:68:43:eb:32:92:4f:89:f5:8c:
30:89:84:77:83:31:2c:6e:ec:e5:82:49:d8:b4:21:
21:b8:32:ef:8d:e9:b3:47:b8:af:35:da:74:44:5d:
84:40:5f:80:e0:a2:18:4f:c4:5b:d4:fa:2a:92:32:
50:ef:be:1e:47:96:61:1d:d7:af:1a:4e:ed:b6:c4:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:16:67:C6:07:45:97:80:17:6E:BF:24:FB:10:41:6B:F1:76:25:A9
X509v3 Authority Key Identifier:
keyid:39:4C:4F:1D:8B:CC:C1:40:46:09:31:02:D5:7B:34:C9:12:9B:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxPHYvMwUBGCTEC1Xs0yRKbxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e4bfda-e708-4eef-919a-4b594278e80e/1/MhZnxgdFl4AXbr8k-xBBa_F2Jak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e4bfda-e708-4eef-919a-4b594278e80e/1/OUxPHYvMwUBGCTEC1Xs0yRKbxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.49.0/24
Signature Algorithm: sha256WithRSAEncryption
12:fa:c7:0c:fb:45:86:66:16:58:f2:97:41:3d:15:c0:23:e4:
70:48:72:85:3e:43:ba:ae:04:ed:10:ae:35:89:9a:aa:e8:c8:
87:fe:32:96:0e:40:44:c9:a9:84:44:9b:3e:56:19:07:84:71:
d4:78:91:3d:11:88:4d:41:40:59:32:b7:8e:f2:30:02:30:95:
81:4c:bb:e1:ee:d1:11:22:f1:81:7b:27:2f:9f:b0:29:e5:cd:
50:1f:aa:85:eb:19:f0:40:fc:6c:dd:37:1a:a6:6a:c5:03:05:
45:aa:5b:45:1d:f3:0e:71:14:9b:a0:67:b7:76:9d:2c:a4:80:
23:cf:c1:a1:35:c6:f2:c6:43:82:7f:a8:4b:0f:42:02:1c:93:
3c:db:7d:a6:62:a4:87:9c:58:90:d8:fc:14:26:fe:91:1a:50:
40:af:1d:72:e5:1d:6e:75:7d:44:62:d7:80:47:2f:34:8c:4e:
aa:10:67:7f:1b:eb:24:da:09:b5:2b:b9:94:da:72:db:88:42:
58:c1:f6:34:6a:c5:9a:f0:7c:9b:7b:95:0a:78:f2:ac:2f:bc:
58:71:f5:a4:2d:05:86:02:5a:a4:d4:a9:d1:68:b9:be:70:41:
00:69:16:55:95:a1:07:33:6d:15:e3:63:ac:b6:4c:2f:a1:15:
6b:e7:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 14:34:14 2023 by rpki-client on console-ams.rpki-client.org