Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/7luNwzH-ttzRm2K2pb1Atyuqqsc.roa
File: 7luNwzH-ttzRm2K2pb1Atyuqqsc.roa (raw, json)
Hash identifier: UANmcf39xhL8MGb2XqhVmFa12aj18pIoOyrmVXSuMv4=
Subject key identifier: EE:5B:8D:C3:31:FE:B6:DC:D1:9B:62:B6:A5:BD:40:B7:2B:AA:AA:C7
Certificate issuer: /CN=c7feaeab4d5c1c02291ddfbe8812a61426454fea
Certificate serial: 018570F0B180FAC45BFCCF254B1B517B6D9D
Authority key identifier: C7:FE:AE:AB:4D:5C:1C:02:29:1D:DF:BE:88:12:A6:14:26:45:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_6uq01cHAIpHd--iBKmFCZFT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/7luNwzH-ttzRm2K2pb1Atyuqqsc.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57866
IP address blocks: 62.3.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b1:80:fa:c4:5b:fc:cf:25:4b:1b:51:7b:6d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7feaeab4d5c1c02291ddfbe8812a61426454fea
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee5b8dc331feb6dcd19b62b6a5bd40b72baaaac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:1a:3b:d2:07:d1:8f:e6:b6:dc:1a:79:0a:
6d:8b:6b:4e:c9:f2:6d:46:f9:f4:be:b9:5d:8e:f0:
72:b0:38:5d:96:99:de:cd:48:b6:58:62:79:9d:05:
40:5f:1c:fa:4f:0b:07:44:a9:e8:5e:c3:6f:c1:9b:
9a:7d:55:59:6a:86:17:5f:39:27:c4:d6:a1:67:78:
49:2e:15:cd:37:7b:2e:78:05:03:b8:87:31:90:ad:
54:0c:90:78:88:3f:29:17:10:dc:fd:4e:b1:9f:34:
c5:08:8e:12:6f:15:59:c4:cd:01:e3:7f:13:f5:51:
73:24:24:cf:f5:47:60:31:9d:86:e3:de:7f:53:fb:
ec:9e:dd:8b:d1:13:d2:81:59:d4:03:71:ef:97:c2:
1f:7e:49:03:07:1f:b4:06:02:39:3f:ee:4e:2f:8f:
1d:96:e8:d0:c6:82:cb:bc:fc:72:e0:ba:16:26:7c:
97:bb:17:89:6c:0f:ce:a6:5b:31:c3:b6:2d:e5:69:
46:14:b6:4d:28:fb:55:20:bb:84:aa:52:b3:e0:62:
44:2d:e3:cb:9a:4b:57:77:b2:d8:7a:c3:5e:2a:aa:
19:27:b1:09:8f:d3:12:bf:c2:2c:c2:bf:d2:b6:61:
6a:d8:1d:e5:e9:3c:a9:44:58:ab:e4:16:4f:05:99:
3c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5B:8D:C3:31:FE:B6:DC:D1:9B:62:B6:A5:BD:40:B7:2B:AA:AA:C7
X509v3 Authority Key Identifier:
keyid:C7:FE:AE:AB:4D:5C:1C:02:29:1D:DF:BE:88:12:A6:14:26:45:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_6uq01cHAIpHd--iBKmFCZFT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/7luNwzH-ttzRm2K2pb1Atyuqqsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/x_6uq01cHAIpHd--iBKmFCZFT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.37.0/24
Signature Algorithm: sha256WithRSAEncryption
02:59:b6:0f:e6:b1:d9:8e:f1:ee:5d:ea:90:47:fa:de:51:b9:
dc:d7:43:2a:df:4f:09:1d:aa:db:a2:28:bd:4e:97:54:df:5a:
b6:5b:57:f8:0a:53:c3:bf:37:6b:4d:3a:cc:83:81:4f:71:f1:
56:59:fe:c3:1a:82:2e:63:6b:41:00:f0:4c:4a:21:58:bf:b4:
28:8e:92:ca:b8:84:5a:a5:b1:4a:f1:df:ec:77:a7:8b:76:54:
96:3d:ca:95:08:66:06:aa:6d:6b:51:cc:cd:ba:8c:48:6c:20:
7e:23:25:d9:80:22:12:d8:c3:fd:ee:9e:af:15:da:fe:c1:cd:
8a:44:d6:b7:54:8e:06:b0:ec:5e:6f:49:6d:86:99:ea:a5:c2:
d7:7c:04:0e:44:b8:b9:ba:27:bb:c3:85:7a:c0:5c:ad:1f:14:
84:79:3e:e4:4f:94:79:11:c3:95:72:c2:03:f3:05:88:1f:9a:
f8:dd:7e:f8:c6:87:db:06:05:65:b0:28:ba:91:59:c8:fa:19:
58:30:2d:fc:c0:c5:fd:8c:ae:2e:c4:19:9f:08:80:60:2c:d2:
ed:71:37:b0:e6:f2:bb:cd:42:74:c4:f0:8e:d9:08:d5:2c:a0:
19:ad:0c:f3:4f:5a:60:c3:b6:45:6a:3d:29:a9:96:b7:3e:aa:
8e:35:57:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:04 2024 by rpki-client on console-ams.rpki-client.org