Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/glAH4VVK1kxKijIwChzxWZkeysA.roa
File: glAH4VVK1kxKijIwChzxWZkeysA.roa (raw, json)
Hash identifier: Voh85b/LRu7dwqTRkBgpfLzRKQXE7os9WX3tPP8Pu0c=
Subject key identifier: 82:50:07:E1:55:4A:D6:4C:4A:8A:32:30:0A:1C:F1:59:99:1E:CA:C0
Certificate issuer: /CN=b9f59cb62a19320d82f9fc5d934ffcdc0e65e490
Certificate serial: 0185728358C5FCE1CE0D6680DC84BC0BBAC4
Authority key identifier: B9:F5:9C:B6:2A:19:32:0D:82:F9:FC:5D:93:4F:FC:DC:0E:65:E4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufWctioZMg2C-fxdk0_83A5l5JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/glAH4VVK1kxKijIwChzxWZkeysA.roa
Signing time: Mon 02 Jan 2023 12:44:48 +0000
ROA not before: Mon 02 Jan 2023 12:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 62.233.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:58:c5:fc:e1:ce:0d:66:80:dc:84:bc:0b:ba:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f59cb62a19320d82f9fc5d934ffcdc0e65e490
Validity
Not Before: Jan 2 12:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=825007e1554ad64c4a8a32300a1cf159991ecac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:3c:a9:ac:20:d5:7d:99:24:ca:a9:ae:1e:
97:5d:ff:25:6c:43:3b:ef:92:5d:e8:13:fd:70:69:
8c:04:c3:ea:0f:b4:80:e1:82:80:67:66:82:50:be:
95:d3:a4:fb:db:03:8d:b2:12:8c:3e:3e:76:fb:23:
3f:25:f4:0d:9b:94:fd:93:4b:6b:e1:69:98:b4:69:
1d:0c:bc:9e:c2:ce:fc:88:39:53:ea:0a:6d:97:48:
20:a3:8c:c1:8e:89:c1:ea:f2:a7:cb:f7:fd:cd:b2:
45:fa:2d:a3:f9:ff:11:2e:fb:45:f2:14:20:a6:eb:
b8:4f:e3:78:f0:9f:3a:7f:66:b3:b0:a7:8d:6d:c0:
cf:60:7d:35:53:ee:f1:6e:13:01:14:41:1e:8d:e0:
cb:b8:ce:27:3d:ea:7c:b1:37:11:ef:dc:5b:96:03:
7c:17:82:49:b1:23:4e:70:4f:49:0a:0f:8a:83:3d:
66:e5:4a:a3:04:d4:8c:9c:02:a5:c1:42:c1:73:f6:
51:7b:f1:ec:d2:c6:a4:28:31:f6:6d:7a:65:71:f9:
7d:6e:a1:1e:4c:de:23:97:21:a4:9e:fd:f9:d0:c0:
3d:ca:1c:d5:9d:d2:94:7e:90:72:1b:25:31:de:17:
5b:46:76:87:7d:8c:1e:bf:9f:28:f9:34:a7:d4:e8:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:07:E1:55:4A:D6:4C:4A:8A:32:30:0A:1C:F1:59:99:1E:CA:C0
X509v3 Authority Key Identifier:
keyid:B9:F5:9C:B6:2A:19:32:0D:82:F9:FC:5D:93:4F:FC:DC:0E:65:E4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufWctioZMg2C-fxdk0_83A5l5JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/glAH4VVK1kxKijIwChzxWZkeysA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/ufWctioZMg2C-fxdk0_83A5l5JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5b:53:c1:5e:28:1b:74:42:f6:50:b7:35:ae:41:eb:76:98:
b5:52:3a:5e:81:80:34:bf:b0:37:48:6b:11:6b:a0:3f:d2:fe:
b5:e4:9f:52:bb:8a:f4:28:7c:24:24:98:f9:f2:21:95:5f:b6:
3f:58:52:e4:79:bd:5e:f8:dc:8d:7e:ae:68:0a:40:f4:87:ab:
ae:f3:b8:1d:12:3d:f1:3b:1d:31:32:45:42:c9:75:25:6a:15:
79:7a:bb:09:68:a1:c4:5d:b8:ee:db:0f:23:62:ab:06:ef:87:
d9:cc:5d:84:06:3b:ce:97:58:54:ae:4d:a4:3d:b3:71:20:14:
a7:a0:66:35:17:47:27:08:04:03:74:62:95:d4:ad:89:6e:ea:
06:21:f5:b9:bd:21:27:56:de:92:41:5d:3e:e5:9c:63:a2:84:
35:cc:2b:5b:ca:10:95:fe:85:8f:86:c3:eb:8d:c7:fa:14:d7:
cd:c5:27:fb:d9:87:1d:f5:d0:94:02:90:e0:17:95:cf:62:a4:
0c:18:04:c7:25:d0:8d:57:41:7d:68:c2:bd:63:6f:10:aa:1a:
be:a8:ad:8b:38:40:77:81:e3:5b:89:2e:ea:7e:2d:dd:98:ec:
c8:32:f7:97:bd:84:5c:ca:75:0e:46:64:35:70:82:cc:21:97:
20:0a:b8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:38 2024 by rpki-client on console-fra.rpki-client.org