Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/lav4tTcjXywWBNEDO13LNiPc6PY.roa
File: lav4tTcjXywWBNEDO13LNiPc6PY.roa (raw, json)
Hash identifier: pBKLTbVNFPmEEocCb/b/kbNKOrv3ORsMtJ8JjBwzloQ=
Subject key identifier: 95:AB:F8:B5:37:23:5F:2C:16:04:D1:03:3B:5D:CB:36:23:DC:E8:F6
Certificate issuer: /CN=6417cae95d7114210ab2cd475328bc870427e5eb
Certificate serial: 01856F42B6AB7F01739594477F8C9125EF0B
Authority key identifier: 64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBfK6V1xFCEKss1HUyi8hwQn5es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/lav4tTcjXywWBNEDO13LNiPc6PY.roa
Signing time: Sun 01 Jan 2023 21:35:21 +0000
ROA not before: Sun 01 Jan 2023 21:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 62.3.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b6:ab:7f:01:73:95:94:47:7f:8c:91:25:ef:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6417cae95d7114210ab2cd475328bc870427e5eb
Validity
Not Before: Jan 1 21:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95abf8b537235f2c1604d1033b5dcb3623dce8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:46:98:f2:4a:4b:11:84:03:fe:5c:0d:cd:e4:
f2:22:b8:5f:f0:4a:c1:24:4d:44:d2:79:bc:15:9b:
04:d3:80:94:95:08:39:5e:f4:de:55:cd:a9:e7:cf:
d7:0d:ff:b3:4e:c8:17:cc:ec:db:8a:1c:c3:75:3e:
4e:61:78:0f:61:9a:6b:97:e3:73:f9:d5:37:2d:16:
0e:c7:f2:80:2a:fd:65:e3:71:2f:ee:92:5f:6f:c5:
12:4d:2f:14:e9:8d:ff:15:3d:cf:f3:0a:1a:9c:72:
83:6c:d0:d7:39:04:c3:25:2e:89:e5:50:bb:81:bc:
e4:5b:1f:d1:9c:a7:8a:8d:b6:13:62:82:87:d4:50:
91:d4:15:c8:e3:98:8b:02:f0:b2:11:c4:c1:5d:af:
b1:3a:e6:f3:14:7b:9e:7d:7a:0c:53:c2:80:1f:a7:
f4:ea:72:67:30:2b:50:f2:c7:a4:23:81:67:06:e7:
27:91:46:0e:23:4c:72:5c:15:12:c4:7e:37:a6:76:
8a:33:02:8f:99:a5:23:e3:c0:1a:c8:46:6b:78:4e:
a2:9f:58:b8:89:44:0f:9e:8e:91:cc:bc:ae:5a:08:
13:98:0a:a5:62:0e:1a:17:ff:3e:10:2b:45:8a:c8:
df:31:dc:07:82:09:a7:70:1e:b7:44:1f:5d:c3:5f:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AB:F8:B5:37:23:5F:2C:16:04:D1:03:3B:5D:CB:36:23:DC:E8:F6
X509v3 Authority Key Identifier:
keyid:64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBfK6V1xFCEKss1HUyi8hwQn5es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/lav4tTcjXywWBNEDO13LNiPc6PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/ZBfK6V1xFCEKss1HUyi8hwQn5es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.5.0/24
Signature Algorithm: sha256WithRSAEncryption
62:43:ac:73:9a:a1:9e:69:6f:b7:0e:69:f7:ac:03:54:0d:08:
b6:c0:69:af:ef:41:f4:f1:b4:3d:e7:27:9b:77:5c:56:bd:75:
9c:eb:b5:61:dc:9c:7f:35:2f:4c:ab:7d:25:d9:4b:4a:2f:d3:
e0:0d:63:e1:87:1b:5b:ba:f5:3b:06:34:2a:5f:32:f0:9a:7a:
5d:aa:48:43:37:36:f7:0a:09:17:f0:98:1f:18:7c:4f:a4:ce:
b7:b5:f8:c7:50:f1:b9:73:40:6c:c2:8c:13:1a:af:e6:ca:a1:
55:ae:ad:e3:c7:cc:af:be:22:92:02:2a:f5:1a:79:96:70:95:
c8:3b:3d:b2:ee:b0:ef:77:c6:ab:48:61:f0:f4:da:42:3f:c6:
0d:2f:42:d9:65:02:33:77:3f:13:9a:66:8b:e3:ed:14:1b:71:
05:0e:79:2c:9a:c6:3a:e6:1b:e8:c5:22:00:b3:e7:6b:cb:99:
3d:50:5b:a9:a8:c9:63:f0:39:56:83:9e:42:be:16:9b:e3:9c:
19:b1:86:fd:32:1d:0f:88:00:44:5c:e1:4f:fd:65:84:42:cd:
38:5a:14:15:ab:bd:e3:58:b7:f1:08:5f:71:4e:cc:aa:5e:99:
5f:2c:44:8b:41:2e:67:a3:22:c2:9f:1d:17:07:17:88:2e:d7:
f1:55:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:00 2024 by rpki-client on console-fra.rpki-client.org