Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6381b3-41d6-4ed8-bc50-f205e5c32e18/1/8dPI19y_WAKHmgjz7BW2U6DbeqE.roa
File: 8dPI19y_WAKHmgjz7BW2U6DbeqE.roa (raw, json)
Hash identifier: DBF045ZVHYJJo76qP7rXEjjOOPfISkH42pYaVhD4sRk=
Subject key identifier: F1:D3:C8:D7:DC:BF:58:02:87:9A:08:F3:EC:15:B6:53:A0:DB:7A:A1
Certificate issuer: /CN=81896a2fbabea8e3029a2369115430fc62ced7a8
Certificate serial: 01856D5D007EA6F55EBD8014ADA6A718686B
Authority key identifier: 81:89:6A:2F:BA:BE:A8:E3:02:9A:23:69:11:54:30:FC:62:CE:D7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYlqL7q-qOMCmiNpEVQw_GLO16g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6381b3-41d6-4ed8-bc50-f205e5c32e18/1/8dPI19y_WAKHmgjz7BW2U6DbeqE.roa
Signing time: Sun 01 Jan 2023 12:44:49 +0000
ROA not before: Sun 01 Jan 2023 12:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:00:7e:a6:f5:5e:bd:80:14:ad:a6:a7:18:68:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81896a2fbabea8e3029a2369115430fc62ced7a8
Validity
Not Before: Jan 1 12:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1d3c8d7dcbf5802879a08f3ec15b653a0db7aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:e4:b2:5a:2b:bc:01:88:5c:1e:dc:fc:fe:
8f:bb:ba:57:6b:1c:22:7f:b5:4c:70:da:4f:84:cc:
87:03:61:01:56:71:b8:20:d8:fe:00:c9:00:55:c8:
cc:d3:55:78:6f:31:03:de:ff:73:2d:e3:1d:32:b0:
7a:32:59:35:bc:07:79:27:28:e3:39:79:24:f5:1a:
69:3e:36:a6:80:b8:7d:4a:cd:bd:7e:3c:3b:21:11:
75:c5:56:de:64:4d:0e:d3:08:f6:fb:e9:88:8a:8f:
89:34:b8:d0:4e:5d:9d:ac:15:3c:56:38:bf:8c:26:
b9:61:ae:8e:d6:a9:fe:90:d4:a6:54:17:cb:0a:f5:
9d:9a:9f:df:e5:4d:55:4b:c4:7a:c3:f9:ce:d0:7f:
c4:16:18:ae:3e:0f:a2:4c:bf:a9:df:75:f4:fc:3c:
8c:a4:18:41:e4:9f:31:eb:80:2e:f5:5c:85:25:83:
9d:32:ec:ba:d6:09:f4:6a:14:d6:3c:31:21:72:46:
12:8d:23:0f:9d:d5:7a:43:25:cc:09:66:1e:f8:6d:
6d:fa:a8:a8:ac:4b:ee:f1:fe:75:e2:8c:74:45:6a:
3c:81:93:78:a0:75:2a:98:76:7a:d8:0e:cc:27:82:
48:8e:15:80:72:a4:3e:e6:1a:1a:31:e4:2d:0f:2c:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D3:C8:D7:DC:BF:58:02:87:9A:08:F3:EC:15:B6:53:A0:DB:7A:A1
X509v3 Authority Key Identifier:
keyid:81:89:6A:2F:BA:BE:A8:E3:02:9A:23:69:11:54:30:FC:62:CE:D7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYlqL7q-qOMCmiNpEVQw_GLO16g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6381b3-41d6-4ed8-bc50-f205e5c32e18/1/8dPI19y_WAKHmgjz7BW2U6DbeqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6381b3-41d6-4ed8-bc50-f205e5c32e18/1/gYlqL7q-qOMCmiNpEVQw_GLO16g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.69.0/24
Signature Algorithm: sha256WithRSAEncryption
87:da:a5:88:23:4e:17:10:0d:29:6c:8a:a1:14:69:c7:41:c0:
0e:23:b1:22:b9:6d:fb:f2:29:65:53:95:cc:d4:6b:0a:7b:59:
2d:6a:21:82:2c:8b:49:e3:9e:3f:d7:c4:2a:9a:bb:d2:81:c6:
ae:67:20:65:d9:ea:86:d9:2c:e4:2b:db:87:3f:24:92:36:f2:
18:f6:bd:b0:63:19:97:38:2b:a3:2d:a3:c5:11:13:23:2a:0e:
35:98:cd:b9:2e:56:50:89:fd:f3:9a:19:86:d8:dd:06:c7:54:
a1:be:d6:76:6c:2b:aa:e4:27:65:0d:92:90:b7:cc:ab:b4:08:
52:24:8d:0b:60:33:79:11:91:c7:42:ea:6b:19:0e:f3:3d:5b:
49:99:8b:81:4e:b9:2a:b1:0a:66:c0:b5:66:80:e6:fc:b1:44:
e4:7f:65:f7:6a:75:56:f5:b4:a2:40:a1:a3:02:88:15:dd:10:
59:1c:e0:8b:a7:39:5d:89:cf:c4:03:c7:6c:97:d0:28:25:29:
4b:8d:87:20:fb:f4:6f:c5:74:64:98:04:69:5e:86:70:fb:dd:
23:55:b8:c8:62:bb:be:fc:3d:c5:17:fb:aa:ff:3c:a4:15:a1:
0c:3f:7e:9e:94:d8:d3:e7:7a:5b:c1:10:e8:66:79:12:da:9d:
8e:fa:a2:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXQB+pvVevYAUraanGGhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODk2YTJmYmFiZWE4ZTMwMjlhMjM2OTExNTQzMGZjNjJj
ZWQ3YTgwHhcNMjMwMTAxMTI0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWQzYzhkN2RjYmY1ODAyODc5YTA4ZjNlYzE1YjY1M2EwZGI3YWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6nkslorvAGIXB7c/P6Pu7pXaxwi
f7VMcNpPhMyHA2EBVnG4INj+AMkAVcjM01V4bzED3v9zLeMdMrB6Mlk1vAd5Jyjj
OXkk9RppPjamgLh9Ss29fjw7IRF1xVbeZE0O0wj2++mIio+JNLjQTl2drBU8Vji/
jCa5Ya6O1qn+kNSmVBfLCvWdmp/f5U1VS8R6w/nO0H/EFhiuPg+iTL+p33X0/DyM
pBhB5J8x64Au9VyFJYOdMuy61gn0ahTWPDEhckYSjSMPndV6QyXMCWYe+G1t+qio
rEvu8f514ox0RWo8gZN4oHUqmHZ62A7MJ4JIjhWAcqQ+5hoaMeQtDyzdaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPHTyNfcv1gCh5oI8+wVtlOg23qhMB8GA1UdIwQY
MBaAFIGJai+6vqjjApojaRFUMPxizteoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lscUw3cS1xT01DbWlOcEVWUXdfR0xPMTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82MzgxYjMtNDFkNi00ZWQ4LWJjNTAt
ZjIwNWU1YzMyZTE4LzEvOGRQSTE5eV9XQUtIbWdqejdCVzJVNkRiZXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82MzgxYjMtNDFkNi00ZWQ4LWJjNTAtZjIwNWU1YzMyZTE4
LzEvZ1lscUw3cS1xT01DbWlOcEVWUXdfR0xPMTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRFMA0G
CSqGSIb3DQEBCwUAA4IBAQCH2qWII04XEA0pbIqhFGnHQcAOI7EiuW378illU5XM
1GsKe1ktaiGCLItJ454/18QqmrvSgcauZyBl2eqG2SzkK9uHPySSNvIY9r2wYxmX
OCujLaPFERMjKg41mM25LlZQif3zmhmG2N0Gx1ShvtZ2bCuq5CdlDZKQt8yrtAhS
JI0LYDN5EZHHQuprGQ7zPVtJmYuBTrkqsQpmwLVmgOb8sUTkf2X3anVW9bSiQKGj
AogV3RBZHOCLpzldic/EA8dsl9AoJSlLjYcg+/RvxXRkmARpXoZw+90jVbjIYru+
/D3FF/uq/zykFaEMP36elNjT53pbwRDoZnkS2p2O+qJE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:24 2024 by rpki-client on console-ams.rpki-client.org