Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/rLR3bBqFfLqXekLIgHAtbyyYU7w.roa
File: rLR3bBqFfLqXekLIgHAtbyyYU7w.roa (raw, json)
Hash identifier: m+KxeH6VT1ewxf/z4IpVITIYstWoslRzveN0A9lQHRI=
Subject key identifier: AC:B4:77:6C:1A:85:7C:BA:97:7A:42:C8:80:70:2D:6F:2C:98:53:BC
Certificate issuer: /CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
Certificate serial: 01856C25D5B8686DC95C557287277CF16493
Authority key identifier: 4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/rLR3bBqFfLqXekLIgHAtbyyYU7w.roa
Signing time: Sun 01 Jan 2023 07:04:56 +0000
ROA not before: Sun 01 Jan 2023 07:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399641
IP address blocks: 62.204.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:d5:b8:68:6d:c9:5c:55:72:87:27:7c:f1:64:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
Validity
Not Before: Jan 1 07:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acb4776c1a857cba977a42c880702d6f2c9853bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:7c:bf:8a:2d:d9:28:78:3b:5c:fa:33:dc:
4c:75:2a:15:4f:60:f1:7e:17:9c:7a:04:f6:d8:de:
83:40:12:6c:79:b0:b2:c3:c9:fa:f4:c4:81:d2:b0:
68:d5:1e:7e:e4:20:6c:f5:20:51:18:1b:f8:e1:ae:
c4:92:5a:f0:da:65:af:35:25:4b:a4:69:e2:c8:52:
b1:7e:61:ab:5b:bc:57:47:05:48:4f:b5:e7:51:6f:
1d:58:d5:45:88:e7:ad:6e:1c:e7:07:69:34:3a:e1:
c6:76:19:7e:8c:a5:35:80:38:3d:6a:b6:40:8e:24:
61:8a:4d:4d:5f:54:e9:fe:b9:79:4e:30:e0:d2:80:
4d:99:be:91:16:78:8c:32:68:cf:11:00:b6:03:e7:
35:12:8b:b2:77:1b:29:28:ce:43:37:a6:ab:1e:74:
57:7f:03:47:cd:bf:20:71:07:da:70:71:d1:c7:0a:
61:0e:22:e6:b3:81:17:b4:58:43:ce:08:55:1e:ed:
0e:39:d2:46:58:17:05:fa:0b:a3:c5:c4:b4:5b:2e:
db:4c:c2:95:72:36:28:96:41:9c:1e:8a:05:5d:3d:
af:11:15:af:60:24:36:90:12:64:25:3c:64:76:86:
c4:41:59:4b:e2:dc:57:01:bb:e4:2e:00:62:35:c3:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B4:77:6C:1A:85:7C:BA:97:7A:42:C8:80:70:2D:6F:2C:98:53:BC
X509v3 Authority Key Identifier:
keyid:4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/rLR3bBqFfLqXekLIgHAtbyyYU7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/Tpn0wuvUl5v9RhUwo44jVAv5V40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:22:d3:1b:15:14:57:2a:42:f4:5b:96:4f:2d:57:a0:95:c7:
b7:9b:1a:52:ad:4b:ee:9f:e1:e3:2e:12:f7:7f:bc:12:61:ec:
ab:bc:56:cd:39:78:01:d3:bd:a5:94:89:37:56:4e:d5:58:6d:
a1:30:0c:ff:64:0c:a4:3e:7e:2a:f5:e9:ef:69:e3:b2:c2:fa:
f0:e2:3c:44:7e:a6:a8:9e:6c:61:62:32:92:42:5b:84:11:cf:
16:71:a2:a3:83:f8:4b:c0:93:7c:3a:b8:5d:96:a3:69:09:8e:
65:ae:5d:09:5e:81:b5:5e:f8:f7:a1:b4:76:4f:cc:45:53:02:
5c:f6:71:26:b4:6f:8b:19:38:6b:dc:3d:23:25:ed:17:72:dc:
d8:0b:63:bf:ec:32:a1:56:32:d1:f3:62:d3:f6:03:bb:80:57:
f6:f2:37:1d:b0:47:e8:bc:c4:d9:bd:58:38:15:b5:f5:54:37:
9f:18:35:97:2e:79:dc:6d:ba:ce:4f:cb:60:87:f2:39:3c:46:
fc:68:3c:d2:ce:13:48:f3:55:9e:e0:92:e5:80:6e:dd:07:f5:
49:33:f7:6b:c6:40:60:72:14:14:6f:e7:7e:42:30:f8:a3:10:
2f:2c:61:f4:2d:a9:32:c6:c3:e3:6b:68:47:fa:60:2a:2a:7e:
d0:92:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 12:45:59 2023 by rpki-client on console-ams.rpki-client.org