Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/yYXSlhvoCnuyEC7oeR1CWN8xrDM.roa
File: yYXSlhvoCnuyEC7oeR1CWN8xrDM.roa (raw, json)
Hash identifier: t057crjI8Dki7LT0R9gRw1Gf1fL9/LWX2YO9UiH92lw=
Subject key identifier: C9:85:D2:96:1B:E8:0A:7B:B2:10:2E:E8:79:1D:42:58:DF:31:AC:33
Certificate issuer: /CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Certificate serial: 018CCA99B8861D5E6436A2EF624FDB46F7D9
Authority key identifier: DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/yYXSlhvoCnuyEC7oeR1CWN8xrDM.roa
Signing time: Tue 02 Jan 2024 14:35:21 +0000
ROA not before: Tue 02 Jan 2024 14:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34558
IP address blocks: 62.173.0.0/20 maxlen: 20
62.173.0.0/19 maxlen: 22
62.173.16.0/21 maxlen: 21
62.173.13.0/24 maxlen: 24
62.173.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:b8:86:1d:5e:64:36:a2:ef:62:4f:db:46:f7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Validity
Not Before: Jan 2 14:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c985d2961be80a7bb2102ee8791d4258df31ac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:a8:d6:b1:ee:85:a0:82:46:06:bd:4a:a9:
4d:ae:92:f5:6b:07:b0:03:66:65:c3:8f:15:a5:73:
05:d3:b6:3e:a6:a0:4e:d5:e2:88:fc:1d:b4:43:28:
90:d3:54:76:58:9b:c2:c9:63:69:4f:49:42:54:9a:
49:f2:9c:a4:8e:67:70:83:b1:41:53:48:6d:29:13:
f4:c6:c1:df:17:3f:e3:2b:b7:1f:40:17:cd:74:94:
64:55:ca:4f:57:22:0e:c3:df:65:e9:5d:dc:a6:97:
89:d4:4b:04:12:3f:75:96:7e:e1:18:dd:9e:12:31:
9a:5c:0e:67:25:df:90:89:5c:1f:f3:1a:52:58:09:
64:98:fd:52:3e:f4:77:31:72:46:94:f9:2c:3a:eb:
88:26:fb:4f:e1:85:7c:9a:cc:74:93:18:3c:aa:34:
e4:6b:1a:ac:33:5b:2c:9d:21:59:b7:d4:85:89:52:
52:2d:52:ec:76:8c:90:89:9a:84:d4:37:2a:50:49:
00:22:d9:13:64:04:25:40:bc:a9:6f:17:28:7a:4f:
a8:a4:31:e5:0f:b9:a5:8b:06:77:e3:83:c2:ea:84:
29:a3:3d:cb:11:b1:3f:bd:d0:60:17:e0:31:ef:10:
c4:f0:3a:d6:91:20:11:18:41:ca:82:92:e5:06:f9:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:85:D2:96:1B:E8:0A:7B:B2:10:2E:E8:79:1D:42:58:DF:31:AC:33
X509v3 Authority Key Identifier:
keyid:DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/yYXSlhvoCnuyEC7oeR1CWN8xrDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/3Jx-F3geYo726xxEvNyy4zViHS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:a4:65:e0:f9:01:66:9c:c6:bb:04:3c:b0:50:d0:82:bb:ce:
da:a6:de:95:1a:95:24:ed:32:10:34:fc:da:3d:df:37:06:84:
a4:8f:a1:86:bd:6e:64:f6:21:aa:c9:67:3f:87:27:79:cb:0e:
25:30:28:00:03:2e:aa:e1:f6:03:3d:d2:48:ae:ee:01:46:e4:
67:84:e2:80:f5:9c:5a:8c:c7:4a:bd:d6:ba:aa:25:7e:28:f0:
cc:20:a2:15:46:af:86:09:88:ba:17:5c:1d:d6:9f:4f:40:f6:
65:cb:62:e0:e4:bf:24:02:c3:af:33:d3:9c:7e:60:8f:96:f0:
d4:26:21:2d:45:bb:e2:e9:c8:3d:03:a3:68:a8:c7:33:45:e8:
19:00:7e:b7:bd:c2:6f:ca:e8:1d:05:bb:4b:73:38:03:4f:de:
7e:90:bc:c5:6d:75:d8:78:2c:19:d0:8a:18:67:8c:d8:d0:6e:
5d:54:bf:6e:4b:14:70:44:a0:0d:cc:ed:1c:b8:73:3e:7f:68:
e7:39:63:00:48:9e:ec:c1:bd:6a:1e:06:99:89:7b:9f:cc:75:
c5:18:3f:e4:11:d3:17:aa:0d:ee:aa:6b:e7:bb:4f:de:9d:c6:
e2:49:fc:b9:c0:0f:45:e0:a7:10:80:d7:d1:1b:04:3d:51:b0:
37:7d:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:40 2025 by rpki-client