Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/lxGFRzAIMhwtD4Eh9z3vZpoBV4s.roa
File: lxGFRzAIMhwtD4Eh9z3vZpoBV4s.roa (raw, json)
Hash identifier: gtlcSUvGo6dAtliCYqyz/S5JKQ5W7+GQ+Exhb5Bt/Y0=
Subject key identifier: 97:11:85:47:30:08:32:1C:2D:0F:81:21:F7:3D:EF:66:9A:01:57:8B
Certificate issuer: /CN=3294455862b60844ada81040ad073ccaead5135b
Certificate serial: 018964C05E8521881711D7110403DFD2B318
Authority key identifier: 32:94:45:58:62:B6:08:44:AD:A8:10:40:AD:07:3C:CA:EA:D5:13:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpRFWGK2CEStqBBArQc8yurVE1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/lxGFRzAIMhwtD4Eh9z3vZpoBV4s.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 62.204.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5e:85:21:88:17:11:d7:11:04:03:df:d2:b3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3294455862b60844ada81040ad073ccaead5135b
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=971185473008321c2d0f8121f73def669a01578b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:6a:41:be:00:9c:ea:7b:d9:80:58:a3:77:
5e:71:30:50:f5:35:e8:d0:9c:7b:a5:76:37:09:dc:
7b:79:24:c0:c3:9e:9b:f6:89:f5:79:78:3a:5a:ae:
eb:14:f6:ef:37:21:67:d1:fc:03:1f:09:01:64:a1:
92:3f:6f:f2:08:a9:64:ac:0d:ce:9b:9b:b3:2d:1c:
07:eb:6c:f0:fd:d1:0a:b0:00:2a:b0:15:8b:ca:10:
fa:40:d1:b1:76:e9:59:a9:9e:85:8f:26:33:c9:ce:
35:91:f4:67:57:50:91:cb:82:f7:07:ef:2f:d6:af:
a5:0f:bd:4a:8c:30:41:89:7e:e0:fc:e6:45:e5:3f:
c4:a3:12:d7:a4:e6:55:9b:e3:1d:d1:6c:7b:65:6e:
e8:81:86:d2:f2:94:b4:75:a7:56:5d:15:fc:a4:63:
f9:57:b0:a8:60:7c:bd:14:a1:31:15:1f:4d:ec:bf:
b4:1a:36:78:70:22:90:19:23:70:a2:91:19:73:5e:
be:1e:98:7a:64:cf:d7:3b:7b:22:c4:cc:90:f9:18:
8d:73:05:1d:be:37:ec:c4:ba:a6:87:6a:6f:f2:71:
a3:0f:0c:1d:4a:de:a4:c1:58:4f:b6:81:e3:58:dd:
7f:62:c5:29:8b:19:e2:4b:dc:4d:8d:4a:1a:ca:3c:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:11:85:47:30:08:32:1C:2D:0F:81:21:F7:3D:EF:66:9A:01:57:8B
X509v3 Authority Key Identifier:
keyid:32:94:45:58:62:B6:08:44:AD:A8:10:40:AD:07:3C:CA:EA:D5:13:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpRFWGK2CEStqBBArQc8yurVE1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/lxGFRzAIMhwtD4Eh9z3vZpoBV4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/MpRFWGK2CEStqBBArQc8yurVE1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.34.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fd:c6:ce:8e:44:af:65:3c:67:1f:9c:d9:59:6e:5c:2a:ce:
77:02:3e:8e:cf:9f:34:a3:6e:34:08:ea:f5:35:58:de:ee:cb:
c3:5d:88:29:01:fb:ca:07:dc:77:16:7b:35:be:af:2c:e1:a0:
39:5b:8e:94:38:c4:50:b8:a3:5b:3a:07:b4:18:f0:0c:11:19:
9e:e4:ca:17:31:78:7d:10:fb:09:4b:3b:b3:4c:f6:99:63:b9:
63:06:36:eb:77:15:5d:8d:1b:dc:64:37:93:ad:bd:d1:19:5d:
96:89:c8:d8:e9:74:38:13:e2:17:1b:ce:77:8e:13:b9:13:d6:
dd:47:82:7e:a6:99:85:ae:7f:c7:e2:88:8a:a8:50:67:1b:3e:
01:6b:b0:8e:c6:de:66:eb:04:60:b8:f1:3d:69:73:b8:b0:83:
87:63:9f:df:2a:ee:32:fe:e6:b1:f4:7f:6b:c8:34:26:28:8f:
09:71:98:45:64:d0:3b:72:fa:85:a5:b2:bf:75:8d:f4:5c:f9:
07:ff:6e:23:28:91:fc:ff:fc:7d:53:48:53:27:a8:ab:8d:20:
13:5f:6d:49:a5:bb:b2:0f:03:4b:ba:8c:9b:33:c0:1b:e2:ea:
20:3f:9a:74:0c:65:ee:a8:7d:a9:2f:ab:6a:71:fc:de:0b:dd:
72:51:69:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwF6FIYgXEdcRBAPf0rMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTQ0NTU4NjJiNjA4NDRhZGE4MTA0MGFkMDczY2NhZWFk
NTEzNWIwHhcNMjMwNzE3MTY0NzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzExODU0NzMwMDgzMjFjMmQwZjgxMjFmNzNkZWY2NjlhMDE1NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuudqQb4AnOp72YBYo3decTBQ9TXo
0Jx7pXY3Cdx7eSTAw56b9on1eXg6Wq7rFPbvNyFn0fwDHwkBZKGSP2/yCKlkrA3O
m5uzLRwH62zw/dEKsAAqsBWLyhD6QNGxdulZqZ6FjyYzyc41kfRnV1CRy4L3B+8v
1q+lD71KjDBBiX7g/OZF5T/EoxLXpOZVm+Md0Wx7ZW7ogYbS8pS0dadWXRX8pGP5
V7CoYHy9FKExFR9N7L+0GjZ4cCKQGSNwopEZc16+Hph6ZM/XO3sixMyQ+RiNcwUd
vjfsxLqmh2pv8nGjDwwdSt6kwVhPtoHjWN1/YsUpixniS9xNjUoayjz5PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcRhUcwCDIcLQ+BIfc972aaAVeLMB8GA1UdIwQY
MBaAFDKURVhitghEragQQK0HPMrq1RNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBSRldHSzJDRVN0cUJCQXJRYzh5dXJWRTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMGFhYmItNmYyMC00NzdmLWE5MWEt
MDEzZDEwODM4ODYzLzEvbHhHRlJ6QUlNaHd0RDRFaDl6M3ZacG9CVjRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMGFhYmItNmYyMC00NzdmLWE5MWEtMDEzZDEwODM4ODYz
LzEvTXBSRldHSzJDRVN0cUJCQXJRYzh5dXJWRTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPswiMA0G
CSqGSIb3DQEBCwUAA4IBAQAi/cbOjkSvZTxnH5zZWW5cKs53Aj6Oz580o240COr1
NVje7svDXYgpAfvKB9x3Fns1vq8s4aA5W46UOMRQuKNbOge0GPAMERme5MoXMXh9
EPsJSzuzTPaZY7ljBjbrdxVdjRvcZDeTrb3RGV2WicjY6XQ4E+IXG853jhO5E9bd
R4J+ppmFrn/H4oiKqFBnGz4Ba7COxt5m6wRguPE9aXO4sIOHY5/fKu4y/uax9H9r
yDQmKI8JcZhFZNA7cvqFpbK/dY30XPkH/24jKJH8//x9U0hTJ6irjSATX21Jpbuy
DwNLuoybM8Ab4uogP5p0DGXuqH2pL6tqcfzeC91yUWlZ
-----END CERTIFICATE-----
Generated at Mon Oct 16 15:24:02 2023 by rpki-client on console-fra.rpki-client.org