Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/ojhJgTSWIBrq6v6y5C97kMcd4-g.roa
File: ojhJgTSWIBrq6v6y5C97kMcd4-g.roa (raw, json)
Hash identifier: GtJLKmhe574RJYf7ZILhLMzn8pAR6HavEB+/fbX6CRM=
Subject key identifier: A2:38:49:81:34:96:20:1A:EA:EA:FE:B2:E4:2F:7B:90:C7:1D:E3:E8
Certificate issuer: /CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Certificate serial: 01856BDC9D125C11F1B5BBAE4450CFD9A62D
Authority key identifier: DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/ojhJgTSWIBrq6v6y5C97kMcd4-g.roa
Signing time: Sun 01 Jan 2023 05:44:58 +0000
ROA not before: Sun 01 Jan 2023 05:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34558
IP address blocks: 62.173.0.0/20 maxlen: 20
62.173.16.0/21 maxlen: 21
62.173.13.0/24 maxlen: 24
62.173.24.0/21 maxlen: 21
62.173.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:9d:12:5c:11:f1:b5:bb:ae:44:50:cf:d9:a6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Validity
Not Before: Jan 1 05:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a23849813496201aeaeafeb2e42f7b90c71de3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:c4:47:c2:b9:98:be:79:5f:17:23:df:64:
e9:a2:07:fc:86:2a:a4:31:28:b5:d5:f0:49:12:52:
51:e8:0f:f7:92:fd:e5:66:16:18:9d:57:38:3b:25:
52:4a:46:aa:7e:d3:88:3f:ed:10:db:54:46:ec:6a:
b3:72:41:74:13:9d:67:64:e2:76:0f:85:f7:94:a3:
17:1a:2c:4a:93:38:04:a8:62:32:e3:0f:34:4f:8f:
6c:9b:b1:bf:4a:42:a3:05:79:e3:65:d5:32:97:f1:
a7:5a:3d:53:da:b3:c9:53:33:23:5c:8c:f5:97:2c:
fb:ec:d3:0c:f0:53:1a:38:ea:b8:fb:b2:a4:af:bd:
e0:c4:15:e1:5e:92:d9:8d:52:54:04:91:56:8a:69:
67:a5:bc:60:3d:75:06:98:87:30:49:20:d1:22:65:
e9:93:6c:f3:9e:93:88:bb:56:c0:a4:0a:eb:cc:25:
9e:6a:41:8e:88:05:ff:eb:3b:72:3c:3a:35:ee:fd:
f7:f2:c7:a5:eb:e0:c3:e4:52:df:21:4a:c8:21:ab:
0e:a3:dc:eb:76:3c:9c:05:98:d3:24:ec:54:4b:6b:
fd:8d:1d:ff:d4:32:3a:c6:b3:c6:09:b3:58:14:07:
54:22:38:88:1e:22:21:a7:63:5e:3b:16:57:ef:a4:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:49:81:34:96:20:1A:EA:EA:FE:B2:E4:2F:7B:90:C7:1D:E3:E8
X509v3 Authority Key Identifier:
keyid:DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/ojhJgTSWIBrq6v6y5C97kMcd4-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/3Jx-F3geYo726xxEvNyy4zViHS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.0.0/19
Signature Algorithm: sha256WithRSAEncryption
69:6d:77:9c:38:17:8a:45:4b:07:98:26:d1:88:ac:b1:96:eb:
b9:3f:c6:ee:d1:4e:52:12:84:a4:71:ce:41:91:a3:de:ad:47:
7e:a6:62:d1:27:76:49:1b:f7:00:d9:76:5f:67:01:a2:8c:1b:
e1:3d:43:02:d1:63:11:3a:4b:18:31:29:48:e8:5f:49:96:4f:
e1:01:5b:71:08:7c:19:43:2b:8e:b9:be:df:b2:a0:3f:c3:12:
96:13:7e:16:b2:12:5b:a8:40:b3:d9:be:cb:16:52:ad:98:f1:
48:11:0c:32:a4:98:eb:c5:bf:b2:25:e6:ba:34:ef:22:48:be:
7d:ae:43:85:3d:87:66:06:9f:f2:d4:3d:8b:fa:04:a0:e5:b1:
37:d7:95:92:13:a9:2a:4e:60:e4:a0:e0:9d:be:61:e6:9f:99:
28:e3:ba:f5:f6:69:ec:40:01:d3:8c:96:37:89:76:0e:66:a5:
93:0a:10:cb:1e:db:bb:e2:a8:3e:77:53:cc:6f:88:c6:38:36:
1e:be:a6:1e:d2:ea:f8:12:03:bf:2b:6e:2c:af:9f:ee:32:21:
40:8b:af:43:fb:5b:31:4a:f3:90:54:22:94:0c:19:7d:5c:b1:
3f:ae:f5:6d:04:bf:b9:fb:b5:c7:de:cd:e4:3d:13:d2:6d:3d:
8f:cc:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:17 2025 by rpki-client