Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/ZTs9KiNXG-0qi_3GJ2JfxSOhXEU.roa
File: ZTs9KiNXG-0qi_3GJ2JfxSOhXEU.roa (raw, json)
Hash identifier: CSH36mUnU+XcpMWQ7lqezzJRYU0rFz9RhmZVgIldkIU=
Subject key identifier: 65:3B:3D:2A:23:57:1B:ED:2A:8B:FD:C6:27:62:5F:C5:23:A1:5C:45
Certificate issuer: /CN=43931de6e91b40f4b2bb201253e57a86741105a5
Certificate serial: 01839E5533CB093EBEE22988321DB3A89132
Authority key identifier: 43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/ZTs9KiNXG-0qi_3GJ2JfxSOhXEU.roa
Signing time: Mon 03 Oct 2022 14:52:07 +0000
ROA not before: Mon 03 Oct 2022 14:52:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208888
IP address blocks: 103.23.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:55:33:cb:09:3e:be:e2:29:88:32:1d:b3:a8:91:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43931de6e91b40f4b2bb201253e57a86741105a5
Validity
Not Before: Oct 3 14:52:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=653b3d2a23571bed2a8bfdc627625fc523a15c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:ee:6c:c0:df:37:91:ca:a9:39:b8:70:e9:
2b:31:57:88:e1:7b:cd:6b:47:5e:bd:29:71:73:68:
4e:50:78:e0:cd:f9:54:42:cf:44:0f:de:47:32:df:
23:e2:91:05:5f:67:c6:da:7e:2d:1c:a8:da:ea:70:
ce:59:d4:c0:50:d7:9a:50:5a:3d:89:63:30:32:d5:
ba:1d:02:62:ad:57:d0:e3:56:13:5f:e6:85:c6:21:
52:2f:97:eb:89:62:0b:44:40:79:37:be:89:12:ea:
03:97:d0:e9:fb:14:c6:e4:82:40:47:ca:96:f9:0d:
58:a3:16:d0:82:b3:a6:d8:1d:55:41:5d:ff:24:05:
22:8d:b5:c0:03:aa:89:5f:fa:b3:0c:93:41:2c:c5:
ed:a7:11:2d:e0:87:77:ba:be:63:57:41:30:27:39:
be:31:9a:46:67:92:72:21:d6:60:43:7f:fd:2e:7e:
cb:2e:83:9d:54:22:ee:2e:65:ee:97:e4:e7:fd:4c:
bb:50:a3:91:8c:0f:d2:ed:34:9c:ee:e2:0c:5f:20:
6b:21:7b:56:a0:eb:5d:df:48:ac:98:95:a6:5f:86:
b0:2a:48:58:ca:c0:6a:93:89:38:14:5b:fc:84:a1:
57:c7:50:e3:ed:93:03:6b:63:29:c0:30:99:eb:6a:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:3D:2A:23:57:1B:ED:2A:8B:FD:C6:27:62:5F:C5:23:A1:5C:45
X509v3 Authority Key Identifier:
keyid:43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/ZTs9KiNXG-0qi_3GJ2JfxSOhXEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.62.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6c:f5:55:1d:cf:30:8e:28:12:92:f2:d0:f8:77:bb:e7:2a:
e4:b9:a0:62:32:48:8e:51:b2:58:11:c4:10:d6:45:74:51:f1:
a9:01:36:45:35:d6:4e:c0:92:f1:5d:d1:fd:73:37:c8:80:1d:
76:e2:4d:1f:bf:37:23:73:ad:0c:c7:5d:54:b6:11:2d:7e:4f:
41:bd:f4:72:f6:af:0c:2a:7c:ca:cb:61:52:2c:89:07:51:a1:
34:bd:31:a4:0b:1a:ab:5f:d8:7f:70:01:b3:b1:ec:42:a5:07:
e3:0c:4f:d7:27:bf:d3:ce:d5:e3:ab:2c:86:97:cd:74:5b:d1:
97:71:f3:3e:0a:1e:b2:1a:ef:e6:da:0c:1f:c3:de:82:e1:70:
a7:78:91:e2:bf:f5:3b:95:bf:11:ce:65:f3:40:7f:c1:16:66:
fd:8e:20:79:68:d9:5b:44:22:1e:9c:f2:90:dd:4e:ed:e3:8b:
45:cc:53:e8:82:02:e2:0d:56:ef:76:cb:f8:f8:69:ea:a2:3c:
66:4e:b9:92:60:1f:cc:ae:01:a0:6d:10:9a:5b:30:64:96:31:
da:1d:eb:09:ef:97:9a:dc:83:0d:40:11:c5:f1:c4:0b:36:96:
aa:42:69:84:b2:53:d7:2d:c5:87:7b:91:3c:ae:fe:77:7e:0f:
6e:65:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:15 2024 by rpki-client on console-fra.rpki-client.org