Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/PVqqZS99zN9ZJ736dMhmppGwZ7k.roa
File: PVqqZS99zN9ZJ736dMhmppGwZ7k.roa (raw, json)
Hash identifier: XLNHSCl+UF5n9HOf36bCJND+uvjsJHU7XUpnIe5766M=
Subject key identifier: 3D:5A:AA:65:2F:7D:CC:DF:59:27:BD:FA:74:C8:66:A6:91:B0:67:B9
Certificate issuer: /CN=6417cae95d7114210ab2cd475328bc870427e5eb
Certificate serial: 7646F1
Authority key identifier: 64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBfK6V1xFCEKss1HUyi8hwQn5es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/PVqqZS99zN9ZJ736dMhmppGwZ7k.roa
Signing time: Sat 01 Jan 2022 02:59:28 +0000
ROA not before: Sat 01 Jan 2022 02:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 62.3.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7751409 (0x7646f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6417cae95d7114210ab2cd475328bc870427e5eb
Validity
Not Before: Jan 1 02:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d5aaa652f7dccdf5927bdfa74c866a691b067b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:4d:5d:66:63:a4:57:6e:a9:2d:e7:ac:65:
46:43:3d:9a:ad:52:26:1f:90:c7:61:c3:cc:a2:ba:
d9:3f:97:39:61:f4:19:3a:e0:1b:ef:32:64:d5:58:
ca:db:5b:fd:e1:74:44:9b:2f:97:8a:82:6a:8c:2b:
f1:0f:10:57:88:27:bb:82:16:66:40:09:e4:b9:ea:
02:07:10:ac:b1:74:65:f6:5e:ab:55:01:bd:22:94:
9b:5d:e9:3f:0a:14:bd:92:9e:49:28:76:1b:a3:c0:
a8:e2:51:54:76:b6:e4:ab:1e:f1:58:10:af:a1:db:
ac:72:b8:fe:75:f0:4b:3b:01:e0:07:51:bd:ad:cf:
20:25:d0:1d:36:8b:da:17:97:86:ca:0b:33:ab:b4:
12:a5:60:be:6e:eb:73:8f:5a:df:09:40:9a:26:c7:
4e:c8:2c:52:02:26:d8:f4:48:31:c8:91:65:2b:da:
06:f4:3e:40:85:82:34:2f:92:73:15:6e:b8:ad:81:
ce:ab:cd:77:92:6e:54:2f:54:15:86:a1:37:7f:40:
36:d3:e0:76:52:88:08:34:7e:09:6f:0e:47:00:f3:
a2:a3:a5:f7:e8:8d:04:19:39:ac:86:ce:da:f7:06:
cb:f6:50:92:bb:cb:80:df:e1:04:87:09:5e:49:77:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5A:AA:65:2F:7D:CC:DF:59:27:BD:FA:74:C8:66:A6:91:B0:67:B9
X509v3 Authority Key Identifier:
keyid:64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBfK6V1xFCEKss1HUyi8hwQn5es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/PVqqZS99zN9ZJ736dMhmppGwZ7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/ZBfK6V1xFCEKss1HUyi8hwQn5es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:0e:5b:16:86:32:1c:7d:1b:92:b7:1a:96:4c:f9:41:f5:64:
6f:5c:f5:96:8d:99:62:7e:af:df:d1:3e:96:45:e6:a5:12:d6:
c2:bb:3a:89:d1:f0:ea:26:ac:23:74:b5:a0:84:3b:70:33:d0:
6e:3e:56:61:41:eb:9e:35:e5:3a:68:7b:36:96:74:de:78:28:
14:7b:d0:1b:c7:54:99:97:a2:a6:fb:b2:c6:99:9d:25:f2:5d:
cd:1e:f3:05:52:08:76:b3:13:17:b0:9f:42:22:50:db:ef:ab:
02:b3:46:ab:f8:87:29:5c:a4:33:be:9b:85:e5:b7:2b:e0:11:
7a:1f:63:41:b3:87:64:e6:6a:16:14:88:f0:5c:c6:55:8e:8f:
60:ad:58:b4:16:65:b7:4c:d5:4e:a6:6d:cb:3e:f1:0e:30:6a:
29:c5:c8:24:58:77:b6:a1:d9:ce:8f:94:25:40:a0:dc:4a:dc:
d2:fc:0c:32:88:55:09:ab:ac:da:4b:b9:2b:43:0d:15:9e:67:
d9:b8:a0:f8:74:73:ad:d3:ff:f0:a0:1c:4c:84:bd:5a:ba:d4:
c5:1b:f6:23:38:67:26:ce:7f:c1:c8:28:3a:1e:f2:59:29:da:
a3:4f:af:7f:71:28:59:f8:a2:de:55:98:66:5a:63:e8:10:84:
cd:05:88:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:44 2025 by rpki-client