Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/ZXUptOT0SXpWV09Id95UhBPJHUM.roa
File: ZXUptOT0SXpWV09Id95UhBPJHUM.roa (raw, json)
Hash identifier: WM1r18lV9fABTwBZb38F2K4Bcb2u97nes/LiUwvOG3Q=
Subject key identifier: 65:75:29:B4:E4:F4:49:7A:56:57:4F:48:77:DE:54:84:13:C9:1D:43
Certificate issuer: /CN=cc99251a572c4046e0ad55a04e6b7b6e4664386c
Certificate serial: 668A87
Authority key identifier: CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJklGlcsQEbgrVWgTmt7bkZkOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/ZXUptOT0SXpWV09Id95UhBPJHUM.roa
Signing time: Sat 01 Jan 2022 01:59:23 +0000
ROA not before: Sat 01 Jan 2022 01:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 62.3.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6720135 (0x668a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc99251a572c4046e0ad55a04e6b7b6e4664386c
Validity
Not Before: Jan 1 01:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=657529b4e4f4497a56574f4877de548413c91d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:16:43:6e:a8:c9:da:1d:f3:37:75:00:87:
4f:00:6e:bb:5c:b9:a7:6f:17:43:51:d0:2e:6b:7c:
72:cc:51:d0:14:f3:9e:6e:d5:21:a4:b6:77:15:68:
dc:4a:70:50:a7:41:5d:f0:f1:24:1e:70:62:d1:1a:
c6:cd:dc:99:42:81:90:98:0d:2f:43:bd:9a:b1:9e:
00:cc:8a:8a:6d:cd:63:4e:46:3c:de:e7:55:5b:65:
8a:ba:c0:a4:90:09:2f:9c:6f:e6:5c:de:9a:d2:bf:
c5:d1:85:26:c0:2a:33:5c:32:98:18:d1:77:8c:cc:
43:87:06:d4:63:cb:4f:58:4f:14:ee:94:ec:a1:6c:
45:da:a9:6f:7f:20:fd:b8:f4:0b:e8:8c:d9:02:0a:
06:9e:31:58:ff:96:9a:a7:33:32:ea:a6:cf:a6:6c:
a2:a7:d3:68:5d:52:bd:ea:76:4e:ea:c0:1c:7f:2c:
50:80:d9:66:a9:e0:5c:fc:6b:e5:4b:bf:c2:d4:d6:
bb:30:d7:0e:14:da:cb:03:66:1c:47:fb:39:88:62:
ba:8f:91:3e:f3:4f:41:53:fb:d5:12:7b:7a:b4:3c:
58:c7:5e:5d:04:1e:5e:3c:dc:2f:71:c8:38:36:d3:
41:e0:67:8e:56:79:74:97:46:bd:e8:61:07:2c:ca:
36:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:75:29:B4:E4:F4:49:7A:56:57:4F:48:77:DE:54:84:13:C9:1D:43
X509v3 Authority Key Identifier:
keyid:CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJklGlcsQEbgrVWgTmt7bkZkOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/ZXUptOT0SXpWV09Id95UhBPJHUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.4.0/24
Signature Algorithm: sha256WithRSAEncryption
36:15:bb:47:ba:79:db:51:12:50:60:33:20:f4:0c:7e:68:5f:
28:8b:04:05:49:37:91:ac:6c:2a:41:83:33:19:ea:6c:34:84:
50:6b:dd:dc:55:e8:e5:d8:d0:24:d1:44:4f:31:a3:45:90:45:
47:e4:d6:96:4c:10:b4:f6:13:36:85:e8:a7:38:19:a5:b5:67:
73:7b:ef:02:2a:1f:76:6c:6c:e8:88:fe:fe:4b:0f:20:f1:27:
27:66:2a:42:42:ef:89:58:f3:fc:2c:2c:7d:8f:98:d9:0e:50:
8d:89:3a:1d:15:6b:dc:e2:f3:e4:93:28:e1:92:b4:5f:65:11:
56:13:be:1f:ec:12:65:ef:64:df:38:21:96:aa:ab:70:bc:e7:
84:da:33:2b:37:ae:e3:c9:40:53:ae:62:cd:60:81:c2:18:0f:
09:b3:43:fb:fd:fd:22:f6:f5:30:4a:84:27:e2:95:48:87:20:
c9:11:f3:2c:94:c1:f1:4f:59:07:09:12:8a:b8:fd:de:a5:3c:
b9:9f:5e:04:9c:f6:d3:a6:f9:16:23:f5:ef:b2:b3:22:6e:8b:
e1:8f:00:55:6f:a6:f9:b1:44:0b:01:fa:93:cf:63:a7:ed:e6:
57:8c:af:ca:61:9d:b5:86:60:82:09:21:1b:5c:82:1f:55:1f:
a1:95:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:22 2025 by rpki-client