Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/y9PeiP6C6c37Rsd5xZDg9f8TJ-0.roa
File: y9PeiP6C6c37Rsd5xZDg9f8TJ-0.roa (raw, json)
Hash identifier: CXS5PsY/7HfdYmizLqgF5NKpIKzMLAIo3U6wiu9Arfc=
Subject key identifier: CB:D3:DE:88:FE:82:E9:CD:FB:46:C7:79:C5:90:E0:F5:FF:13:27:ED
Certificate issuer: /CN=6417cae95d7114210ab2cd475328bc870427e5eb
Certificate serial: 010BD245
Authority key identifier: 64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBfK6V1xFCEKss1HUyi8hwQn5es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/y9PeiP6C6c37Rsd5xZDg9f8TJ-0.roa
Signing time: Mon 07 Mar 2022 17:38:47 +0000
ROA not before: Mon 07 Mar 2022 17:38:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 62.3.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17551941 (0x10bd245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6417cae95d7114210ab2cd475328bc870427e5eb
Validity
Not Before: Mar 7 17:38:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbd3de88fe82e9cdfb46c779c590e0f5ff1327ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:94:74:c8:ec:6d:16:84:bd:c3:9a:7e:87:
3f:df:d0:9d:0a:3c:d8:f8:0b:4d:9c:63:16:80:a8:
e7:5d:86:c1:03:db:25:37:d2:b1:6a:92:ad:a5:4e:
0e:32:c9:8f:16:f9:4c:b4:88:a9:a1:01:e2:af:e5:
4b:9e:12:d8:93:64:f1:a3:f7:a4:b4:88:9c:e8:a1:
06:f8:e9:01:75:51:82:de:78:48:d3:11:ac:67:67:
e4:60:d3:cb:7d:ca:11:8b:33:f4:03:cc:bf:10:f9:
ab:bc:46:85:5d:af:43:c7:e3:30:e5:23:18:45:e7:
fc:ff:a5:3e:06:71:56:84:ae:fb:23:70:d0:5f:dc:
58:fa:79:ea:7f:b5:5a:9b:63:2c:9d:a6:39:8c:70:
4e:51:ea:94:c3:a1:79:db:8a:b9:ad:ca:7e:ef:4f:
80:27:6c:cc:4d:f9:b0:83:22:c1:d4:97:1a:af:d4:
9b:55:0d:98:c5:c0:92:62:ca:51:f4:a9:e0:2d:35:
86:13:b6:54:7e:15:5c:43:7e:ee:9d:e6:06:65:0b:
9a:23:83:7f:b9:f8:2e:95:85:32:0f:bd:b2:10:8d:
2d:8a:89:89:e3:48:08:f7:ee:e7:a8:ee:0c:d3:52:
c0:98:19:31:50:bd:ad:05:ca:4a:4f:7b:80:a6:4d:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:DE:88:FE:82:E9:CD:FB:46:C7:79:C5:90:E0:F5:FF:13:27:ED
X509v3 Authority Key Identifier:
keyid:64:17:CA:E9:5D:71:14:21:0A:B2:CD:47:53:28:BC:87:04:27:E5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBfK6V1xFCEKss1HUyi8hwQn5es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/y9PeiP6C6c37Rsd5xZDg9f8TJ-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/679f68-3de2-461e-a3ef-00599f882578/1/ZBfK6V1xFCEKss1HUyi8hwQn5es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.5.0/24
Signature Algorithm: sha256WithRSAEncryption
42:24:d5:0d:f7:44:54:e4:d1:d8:cc:e8:23:25:d0:8d:b0:82:
ec:26:c7:86:74:3a:23:72:68:d8:fb:b8:1e:ba:7f:ff:2c:db:
4e:ee:9e:6d:d7:f9:72:d4:40:e1:ef:d2:88:9e:0b:74:7a:43:
0c:b5:99:6d:c2:db:62:23:8f:5b:9e:52:44:7f:d3:29:2b:8c:
d0:55:b6:65:05:cb:da:a3:c1:ce:b1:d4:a6:dd:e8:59:5b:97:
d1:28:ae:65:4e:30:02:62:cc:76:df:90:57:e3:c7:62:1e:bf:
96:d0:46:a7:d3:2e:eb:9a:0c:e9:ed:5b:85:4a:41:6d:da:39:
d3:9a:70:0e:78:43:9a:54:20:20:28:c3:e1:26:5f:05:0f:27:
ea:2d:40:48:72:0c:f2:92:c0:08:dd:2e:d7:d9:95:c9:a6:c3:
fa:da:a2:c9:55:22:84:1e:22:c4:48:69:08:16:43:dd:35:7e:
f3:1d:1e:56:b8:6d:b1:60:bf:ed:81:fe:9a:d7:0b:18:64:1e:
dd:6c:d2:55:5e:ed:91:da:84:91:1a:74:ab:d1:4a:16:97:d7:
36:99:f6:97:3c:11:43:65:ef:5e:84:08:0a:b5:dd:5d:bf:ac:
c6:93:9d:ea:19:11:89:2d:51:ce:bf:63:31:d0:1b:97:65:2d:
6e:10:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:47 2025 by rpki-client