Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/wBxf_DK6Jdp9y6yd23EHtXiCWuI.roa
File: wBxf_DK6Jdp9y6yd23EHtXiCWuI.roa (raw, json)
Hash identifier: MsYwsmZajqqYOBzNUradVezZdFi2fuyXukuS/VG8t5A=
Subject key identifier: C0:1C:5F:FC:32:BA:25:DA:7D:CB:AC:9D:DB:71:07:B5:78:82:5A:E2
Certificate issuer: /CN=b6bb794ce87aa867c8a757342f80d0da5fe81594
Certificate serial: 018CC26D4D9B17C8AE85447B288788668DB5
Authority key identifier: B6:BB:79:4C:E8:7A:A8:67:C8:A7:57:34:2F:80:D0:DA:5F:E8:15:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/wBxf_DK6Jdp9y6yd23EHtXiCWuI.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206402
IP address blocks: 62.68.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4d:9b:17:c8:ae:85:44:7b:28:87:88:66:8d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6bb794ce87aa867c8a757342f80d0da5fe81594
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c01c5ffc32ba25da7dcbac9ddb7107b578825ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:35:2a:70:3d:2c:9c:05:7b:de:9c:be:9a:86:
4e:d3:20:aa:19:1f:d5:df:71:9c:eb:ac:ff:0a:17:
fd:4d:97:ba:3c:27:b2:0a:bc:a8:21:7a:84:ad:05:
0f:be:17:cd:02:39:a0:e1:64:bb:6c:c7:74:7e:c6:
b6:11:0a:e3:88:94:df:5a:86:3d:10:df:11:a7:4b:
83:eb:b5:44:1a:4d:5a:ba:e3:64:93:6a:93:98:55:
d5:d8:9a:dd:4b:39:23:4a:c0:ea:fd:59:2b:6d:1e:
e5:98:97:68:e4:65:6d:9b:ed:05:83:72:c6:3f:db:
79:98:f3:d9:42:9f:3f:fb:36:15:30:a0:5e:c9:39:
58:81:d9:e8:ff:f2:f0:1f:de:82:9f:9a:18:bc:49:
80:34:80:5b:b0:f8:f5:29:10:9f:fd:b2:f0:98:47:
df:bf:63:08:33:58:eb:2e:9c:3f:ea:e9:33:a2:d4:
cc:1c:59:66:79:31:bf:b2:2f:68:90:59:c8:cb:eb:
10:b1:94:c6:81:b5:5b:6a:a7:0c:b6:a0:df:b8:0f:
26:51:61:10:b8:2b:82:6b:a0:97:28:b5:cc:8a:ec:
1a:01:07:c1:e3:69:32:72:6c:84:c1:9c:7e:2d:06:
6b:91:6f:d2:65:d1:d1:81:6a:bf:cf:b0:e2:2b:e4:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:5F:FC:32:BA:25:DA:7D:CB:AC:9D:DB:71:07:B5:78:82:5A:E2
X509v3 Authority Key Identifier:
keyid:B6:BB:79:4C:E8:7A:A8:67:C8:A7:57:34:2F:80:D0:DA:5F:E8:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/wBxf_DK6Jdp9y6yd23EHtXiCWuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ff:e0:32:bf:e9:dc:1f:bd:15:a2:cb:6f:56:32:bf:19:ad:
45:42:c9:f6:17:b0:ea:09:a2:a7:9f:5e:cf:33:ab:9b:d1:21:
e3:c3:19:39:a2:da:1e:83:bf:f3:25:ae:a0:9a:7a:dd:9b:c5:
9f:99:cb:fa:bc:1a:ab:3f:c6:80:bb:db:6d:bb:71:af:05:45:
41:a5:85:8b:2f:b1:31:5d:bf:1d:4e:fb:28:fd:88:cb:e6:d5:
3c:90:61:bb:6a:8a:3e:fe:9b:5b:99:e3:97:3e:87:96:7a:b0:
95:6c:b1:e6:75:fd:36:9c:ab:33:96:8a:b4:e2:54:e5:4a:c3:
83:9f:67:2c:45:4b:5f:cd:2b:f8:c4:da:4a:c4:ea:f6:ba:8e:
bb:f1:6b:5f:97:84:90:74:15:55:a6:58:f0:e3:ac:b1:dc:cb:
f5:63:ed:d0:c5:b8:95:f3:8f:bb:c4:06:32:75:eb:c4:a6:ca:
ca:a3:bd:b2:2e:7c:a7:7b:e0:47:1f:b5:70:5c:45:e7:b9:92:
20:56:df:10:5f:d0:84:2a:dd:f1:d8:02:b2:7c:ff:9f:88:f4:
d2:10:f4:4f:51:1c:aa:a1:20:eb:ff:22:09:63:64:24:a7:0f:
13:12:79:31:08:ce:80:1b:ae:1f:fd:d8:69:e5:63:71:e9:47:
5c:e6:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:13 2024 by rpki-client on console-fra.rpki-client.org