Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/3u_IbOzqEP00_DPC-6_PJmX-RBM.roa
File: 3u_IbOzqEP00_DPC-6_PJmX-RBM.roa (raw, json)
Hash identifier: yuc8NRtORdDuq/mk1zq/dt/1FI2KzYZ4qJ8AuTpBuWo=
Subject key identifier: DE:EF:C8:6C:EC:EA:10:FD:34:FC:33:C2:FB:AF:CF:26:65:FE:44:13
Certificate issuer: /CN=cc99251a572c4046e0ad55a04e6b7b6e4664386c
Certificate serial: 018572D5AAA1D66177FA1CEA11BFF5DB4227
Authority key identifier: CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJklGlcsQEbgrVWgTmt7bkZkOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/3u_IbOzqEP00_DPC-6_PJmX-RBM.roa
Signing time: Mon 02 Jan 2023 14:14:43 +0000
ROA not before: Mon 02 Jan 2023 14:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 62.3.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:aa:a1:d6:61:77:fa:1c:ea:11:bf:f5:db:42:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc99251a572c4046e0ad55a04e6b7b6e4664386c
Validity
Not Before: Jan 2 14:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deefc86cecea10fd34fc33c2fbafcf2665fe4413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:3c:2a:dd:51:8b:7e:c4:ac:03:9f:2e:b1:
a8:d6:29:d8:95:14:3c:b6:0c:0c:a0:b5:e7:8a:9e:
19:e2:1d:ae:8a:d1:45:6c:73:34:ea:b3:60:0e:49:
d2:db:2b:9c:90:6b:16:cc:6a:bf:a8:01:03:48:9c:
fa:f0:c1:4d:9a:24:93:6a:7e:65:20:d8:f3:ac:79:
d8:99:ed:e1:22:b3:0c:33:14:0d:0f:e7:20:bf:25:
de:69:d8:80:42:40:5e:f5:44:07:ce:14:4e:93:7b:
22:4c:83:ab:89:90:a9:9f:43:09:9d:c2:3a:75:27:
c2:fb:a6:3e:fa:2e:ef:9c:ac:1e:56:12:71:c3:48:
83:7a:5f:1d:f9:ce:db:cc:7a:49:c8:dc:63:fc:7a:
5d:05:67:48:6e:fd:06:9c:93:a1:95:56:42:cf:f3:
68:34:4f:da:8a:b1:38:97:45:d8:39:d4:db:a7:e8:
0e:e4:39:9f:b8:ca:41:93:20:d5:76:ca:29:d6:6e:
6b:e2:3d:07:c5:a9:10:2a:f5:bc:0d:e4:b6:d3:dc:
49:ea:aa:67:6c:f8:a8:cd:9b:fe:f5:3d:8e:6d:cf:
c7:9a:d8:bf:1b:71:33:a2:d7:ce:d7:de:f2:14:fa:
a0:a8:bd:6c:61:97:64:68:57:a6:02:1f:43:d6:60:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EF:C8:6C:EC:EA:10:FD:34:FC:33:C2:FB:AF:CF:26:65:FE:44:13
X509v3 Authority Key Identifier:
keyid:CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJklGlcsQEbgrVWgTmt7bkZkOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/3u_IbOzqEP00_DPC-6_PJmX-RBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.4.0/24
Signature Algorithm: sha256WithRSAEncryption
28:39:c7:36:ea:29:5c:95:f2:d2:65:ca:dc:9b:07:70:4a:09:
e0:5a:a1:15:d1:13:99:72:1f:cf:c3:52:fb:c4:68:1f:3e:5a:
21:cc:b1:a9:42:1e:66:1c:4e:da:6a:1a:ea:d8:e3:2f:73:10:
d8:d7:02:6e:39:74:e2:05:12:cd:70:1e:70:ab:05:3c:cb:0f:
56:f5:e9:8c:97:4e:66:dc:9f:ce:3e:d8:0d:cc:9f:70:32:dd:
e5:41:1b:84:f4:b5:94:49:b8:92:e7:ea:d2:bb:aa:fe:f2:42:
85:19:73:1d:8d:32:ac:7d:d0:c4:e5:4e:e2:d9:0d:65:20:48:
18:1f:dc:57:98:ae:99:a9:6f:fa:09:ab:79:9b:07:10:03:17:
77:a6:99:ea:be:46:14:42:2b:83:45:0d:65:08:78:6c:19:1b:
21:32:96:0d:72:11:f8:a1:ce:8a:5b:ad:32:f0:8d:9a:6b:4c:
8d:01:83:a3:b8:a1:80:8e:4d:45:6a:51:a3:0c:80:ff:e3:bf:
60:8a:68:97:21:f9:4f:e9:0b:48:5d:e6:d6:a5:25:50:94:6a:
cb:6e:1b:09:63:e1:9d:35:ed:af:6c:7b:59:a5:56:79:9e:02:
4d:47:0b:c6:2a:5a:4e:85:d7:13:f0:85:bc:1b:fc:52:8e:3a:
4a:7c:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:36 2025 by rpki-client