Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/faad5a-66cc-4ded-94c3-b2236b61b95a/1/Ld_J-ZnluNBkE_7AuYuGiW-nw4k.roa
File: Ld_J-ZnluNBkE_7AuYuGiW-nw4k.roa (raw, json)
Hash identifier: /1ysh9VscvdEhkha9xc6nZi8dbJ+Dn3JJJRapK8ahDc=
Subject key identifier: 2D:DF:C9:F9:99:E5:B8:D0:64:13:FE:C0:B9:8B:86:89:6F:A7:C3:89
Certificate issuer: /CN=7ae285caaceb60ad952fcd745b014dae33056847
Certificate serial: 01856CF84A1A933289A8E7863FA81F95F3BD
Authority key identifier: 7A:E2:85:CA:AC:EB:60:AD:95:2F:CD:74:5B:01:4D:AE:33:05:68:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/euKFyqzrYK2VL810WwFNrjMFaEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/faad5a-66cc-4ded-94c3-b2236b61b95a/1/Ld_J-ZnluNBkE_7AuYuGiW-nw4k.roa
Signing time: Sun 01 Jan 2023 10:54:49 +0000
ROA not before: Sun 01 Jan 2023 10:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 62.204.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:4a:1a:93:32:89:a8:e7:86:3f:a8:1f:95:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ae285caaceb60ad952fcd745b014dae33056847
Validity
Not Before: Jan 1 10:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ddfc9f999e5b8d06413fec0b98b86896fa7c389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:62:b3:a4:ab:2e:0a:bb:79:7c:ca:5a:bb:
71:e4:de:1a:ce:81:1f:3a:36:80:8d:15:43:30:aa:
94:63:1c:b9:92:e2:d1:54:34:02:22:2c:c3:8b:03:
0b:11:d5:af:3e:7c:2c:94:6d:6f:93:f5:4f:91:0d:
57:d3:7e:81:d8:dd:a9:f5:0f:06:6d:2e:04:a1:01:
84:a6:e4:b8:5d:f7:33:90:4c:57:20:61:84:73:28:
95:b6:af:2e:d4:aa:cc:6d:1d:d4:00:99:a7:57:e7:
42:a8:dd:a5:c7:50:15:16:3f:22:32:8e:6b:b9:02:
ec:fb:89:e7:82:b2:0a:51:88:fc:d4:9f:66:4a:9f:
04:d9:72:09:d0:7a:a6:93:eb:81:3c:94:dc:55:13:
9b:9c:d6:47:01:78:af:1f:9d:42:ce:31:91:bb:c9:
fe:59:c2:e6:99:a8:42:da:a4:72:0a:a4:1b:be:ae:
7f:58:b5:94:89:c5:1a:c6:4e:9b:f8:93:82:32:ab:
99:17:d9:65:33:ac:c8:71:1e:53:ec:cd:a6:89:46:
bc:d2:ba:c6:29:e5:a8:02:df:33:6a:b2:94:cf:35:
ab:56:91:d4:47:4f:ca:2f:f1:f9:f5:23:53:2f:8c:
08:fa:42:4e:9d:05:20:86:19:69:e8:d3:0d:cf:5e:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:C9:F9:99:E5:B8:D0:64:13:FE:C0:B9:8B:86:89:6F:A7:C3:89
X509v3 Authority Key Identifier:
keyid:7A:E2:85:CA:AC:EB:60:AD:95:2F:CD:74:5B:01:4D:AE:33:05:68:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euKFyqzrYK2VL810WwFNrjMFaEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/faad5a-66cc-4ded-94c3-b2236b61b95a/1/Ld_J-ZnluNBkE_7AuYuGiW-nw4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/faad5a-66cc-4ded-94c3-b2236b61b95a/1/euKFyqzrYK2VL810WwFNrjMFaEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:7d:97:fa:d1:a1:52:23:6a:e2:c6:36:e6:b7:2f:0f:d2:e2:
66:b5:95:e5:12:b4:2f:25:7c:8c:a4:bb:c8:a9:8a:40:ae:1a:
cc:af:33:cc:53:7b:4e:ab:1a:ed:49:db:a4:d7:89:84:16:1f:
dd:62:63:b0:cb:67:c8:bf:25:ab:ab:5e:da:d1:8a:03:2f:e3:
07:4e:94:74:42:e2:6d:70:4b:ef:18:bd:15:3b:0f:0f:9b:e1:
ff:93:a5:27:3e:1d:a0:67:6b:19:f2:21:d0:27:45:66:5b:95:
3f:f3:dc:fe:cc:8b:53:bf:31:a1:9e:16:c0:4e:c7:db:f3:5b:
c5:84:fb:b5:c3:7a:ed:93:aa:dd:17:ba:d6:b4:d0:96:80:0a:
a1:de:63:f7:5c:35:06:39:6e:68:5f:8a:98:d6:63:06:a8:09:
e5:8f:44:29:2b:4e:a4:dd:f5:af:b3:80:6c:2c:fe:3b:e4:c6:
5d:f4:fe:32:0c:fe:2b:7a:a1:7a:fe:0d:8b:0a:7f:6f:a1:0d:
a5:07:54:ab:91:ee:db:aa:29:88:2e:94:cf:ea:16:c9:1f:53:
ef:44:77:54:97:8f:85:f1:c0:11:b2:2a:a0:90:b7:f7:a5:d2:
5e:ce:41:7e:34:dd:4c:b8:d9:39:1d:64:74:04:4c:85:c9:88:
f0:1e:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:32 2024 by rpki-client on console-ams.rpki-client.org