Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/DqcvtMQYXNrF7CIyY3hwLnPLv3o.roa
File: DqcvtMQYXNrF7CIyY3hwLnPLv3o.roa (raw, json)
Hash identifier: lUYaXHdvJXJs+h1m09JC56wuwoaQgQu6Zq9udZ+c8Kw=
Subject key identifier: 0E:A7:2F:B4:C4:18:5C:DA:C5:EC:22:32:63:78:70:2E:73:CB:BF:7A
Certificate issuer: /CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
Certificate serial: 0185724C990F23F3C5CDEFBD979564713D17
Authority key identifier: 31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/DqcvtMQYXNrF7CIyY3hwLnPLv3o.roa
Signing time: Mon 02 Jan 2023 11:45:00 +0000
ROA not before: Mon 02 Jan 2023 11:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49305
IP address blocks: 62.204.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:99:0f:23:f3:c5:cd:ef:bd:97:95:64:71:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
Validity
Not Before: Jan 2 11:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ea72fb4c4185cdac5ec22326378702e73cbbf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:fb:53:30:b4:ab:01:6b:98:67:8c:b8:65:
5d:35:50:fa:e0:ae:44:89:60:6b:13:4e:3f:3e:47:
3f:df:2a:53:09:a0:f0:5a:e2:39:42:b5:d1:67:f7:
d3:1a:4b:c4:1c:11:22:28:13:70:fb:64:be:05:6a:
2b:5d:49:53:67:35:de:63:c9:31:d1:c1:50:30:cb:
e9:52:6c:8d:2a:8a:f7:68:9e:61:39:1d:69:09:95:
4e:ad:4f:fd:90:19:88:dc:5f:65:ee:c5:5a:cd:93:
21:ad:40:89:3f:e8:53:e6:f4:f0:2b:e8:dd:45:bf:
81:8d:20:c5:e1:a7:62:a8:9b:80:37:c9:4c:b1:72:
10:0f:47:e6:1e:de:c1:64:9d:2a:f2:66:54:15:f3:
7e:7c:03:48:8b:fc:4a:da:5a:c9:1e:4e:6c:e0:39:
4e:c1:39:d4:24:ff:c3:c8:0a:f1:80:33:80:1d:2d:
09:86:ee:9d:04:8a:05:95:e3:2f:c1:38:66:a5:ff:
f4:5a:4f:cf:a8:d8:89:cf:2d:62:99:19:e3:7f:6f:
45:72:a1:c1:00:5f:26:f4:33:8c:ed:b3:77:60:27:
06:a4:14:e3:9f:8d:15:54:2f:1b:66:d0:00:37:99:
ec:cb:c4:f0:c4:19:10:75:c9:16:0a:fd:45:95:2e:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A7:2F:B4:C4:18:5C:DA:C5:EC:22:32:63:78:70:2E:73:CB:BF:7A
X509v3 Authority Key Identifier:
keyid:31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/DqcvtMQYXNrF7CIyY3hwLnPLv3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.50.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8f:26:02:65:e1:fd:70:2e:44:34:77:35:ef:4e:ef:ec:be:
e4:ff:ce:00:2f:66:2c:6d:10:27:ff:e6:92:2e:18:34:90:d4:
c2:fc:56:23:5e:ef:e4:23:4a:e8:31:9e:b9:0c:5f:c8:5a:98:
5a:cf:cb:23:3f:e3:50:1b:cd:9c:6d:09:fb:ee:ff:5a:70:b5:
71:59:f2:1b:56:cf:71:f9:fc:81:f7:3b:c8:50:62:a9:40:52:
85:f6:4d:b2:93:bc:dc:46:1e:24:ea:29:b6:f3:52:6e:bc:87:
16:f6:e1:4b:41:21:3e:72:36:da:b0:6c:6a:a9:21:96:c4:2d:
3d:03:40:7c:0d:b4:b9:4b:fa:9c:bd:f0:46:2b:df:0a:fb:56:
ae:f0:2b:43:e1:4b:ba:83:49:29:73:a7:bc:0e:04:e4:c4:48:
1c:11:7c:9a:bb:7b:e2:c6:52:7b:05:b9:13:61:cb:0b:bb:e1:
5c:de:7c:02:82:e8:6b:87:9c:ef:ad:d0:a4:07:a8:2f:b1:d2:
25:66:a6:1e:6c:43:55:1f:0b:f7:71:21:94:72:97:e5:96:93:
c6:ea:0d:a4:c9:d8:86:42:d9:fa:46:36:fb:bb:e9:1f:90:67:
a7:06:12:f2:64:2d:83:b2:19:5f:22:b2:b0:05:21:f0:a7:46:
6f:3c:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:52 2024 by rpki-client on console-fra.rpki-client.org