Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/KZy8Ij9o07pF3CJEKKBNEVQ_zrQ.roa
File: KZy8Ij9o07pF3CJEKKBNEVQ_zrQ.roa (raw, json)
Hash identifier: avF2BjfZwFiZvMkfZhbNeeVf8h6sGtjVKC6t2nDixIw=
Subject key identifier: 29:9C:BC:22:3F:68:D3:BA:45:DC:22:44:28:A0:4D:11:54:3F:CE:B4
Certificate issuer: /CN=b9f59cb62a19320d82f9fc5d934ffcdc0e65e490
Certificate serial: B62F6B
Authority key identifier: B9:F5:9C:B6:2A:19:32:0D:82:F9:FC:5D:93:4F:FC:DC:0E:65:E4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufWctioZMg2C-fxdk0_83A5l5JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/KZy8Ij9o07pF3CJEKKBNEVQ_zrQ.roa
Signing time: Sat 01 Jan 2022 02:56:45 +0000
ROA not before: Sat 01 Jan 2022 02:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 62.233.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11939691 (0xb62f6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f59cb62a19320d82f9fc5d934ffcdc0e65e490
Validity
Not Before: Jan 1 02:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=299cbc223f68d3ba45dc224428a04d11543fceb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:2c:be:6f:b3:0b:46:92:a4:2b:ca:cb:c3:
73:b9:f7:b6:26:26:b4:2b:32:de:a5:c6:e2:03:8a:
1a:be:3d:96:8f:d6:34:ca:e9:40:c0:ae:6f:6e:98:
74:9d:dc:ed:bc:28:1b:1d:b0:fd:ea:1e:59:08:ec:
51:c1:4b:89:8b:c1:49:e3:61:b6:2c:a6:2e:3a:b9:
37:22:40:1e:2a:4f:b6:ec:35:99:8d:b1:04:06:33:
2c:2f:48:a7:3a:83:34:5e:56:a2:6b:30:1a:ca:8e:
76:e0:bb:e3:17:5e:6b:4f:83:88:52:dc:c9:5a:6d:
56:ec:99:81:70:58:0f:e7:01:80:23:60:6a:74:38:
f5:39:07:c5:52:e3:90:1d:4e:be:b4:3a:2f:4d:52:
2c:1f:0c:43:00:69:02:ac:12:b9:d7:b8:11:33:75:
17:70:0d:4b:a6:0f:f4:29:59:66:95:7e:ab:aa:72:
40:37:e2:85:d4:68:e5:ae:91:6e:27:e2:8a:46:af:
b3:db:03:11:23:80:c8:4a:bc:7c:f4:4e:aa:ea:76:
2a:f4:cf:ab:b4:ef:8f:5b:c3:e8:10:b5:36:53:b0:
44:74:e0:bd:db:50:b2:a2:ae:37:12:23:0f:83:c6:
ec:70:34:1f:41:a0:89:cb:54:01:92:b6:0f:48:f4:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9C:BC:22:3F:68:D3:BA:45:DC:22:44:28:A0:4D:11:54:3F:CE:B4
X509v3 Authority Key Identifier:
keyid:B9:F5:9C:B6:2A:19:32:0D:82:F9:FC:5D:93:4F:FC:DC:0E:65:E4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufWctioZMg2C-fxdk0_83A5l5JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/KZy8Ij9o07pF3CJEKKBNEVQ_zrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/ufWctioZMg2C-fxdk0_83A5l5JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.49.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5e:c4:68:70:7a:dd:36:61:0b:9a:fa:71:e3:ba:8e:70:54:
0a:b3:b6:60:be:4d:ad:68:f6:59:c6:d8:45:91:20:88:e1:49:
c1:9d:dc:c5:da:95:68:38:0e:21:fd:69:a0:fa:cb:b7:5c:30:
28:10:41:23:18:23:33:8c:1a:1d:d2:44:de:8e:87:cb:2c:55:
0f:ef:24:21:2e:51:82:28:b9:3e:19:23:45:a9:88:fa:d7:a6:
84:ae:13:96:c5:f2:0a:da:8f:be:97:3b:dc:28:a3:dd:9b:52:
ba:49:57:5a:fe:08:a3:8c:5e:e5:00:9d:c8:e9:33:15:90:0b:
38:44:c5:e5:a9:67:db:4c:5e:a6:8a:58:0c:ce:33:cc:0b:f7:
8f:40:da:67:d9:09:40:a1:fe:68:2e:79:29:78:3d:e5:0f:d8:
a1:6f:92:12:ba:0c:30:7a:e0:d0:0b:27:b2:02:84:03:4e:84:
a6:4c:d0:45:04:07:ac:d0:42:f7:8b:60:4a:6a:f0:df:73:ac:
a6:84:a6:6c:2e:a4:42:10:57:46:cc:7a:2e:70:ff:78:be:fa:
78:98:48:df:03:87:ac:7e:a7:c6:5d:fa:8d:2d:8f:60:17:02:
54:34:4c:88:40:46:f0:fe:c3:cb:3b:86:d6:a9:1c:b1:46:e0:
85:0d:96:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:12 2025 by rpki-client