Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/1n2CZHyVP_JbFEHmuSpYhs9bVik.roa
File: 1n2CZHyVP_JbFEHmuSpYhs9bVik.roa (raw, json)
Hash identifier: 531JJCbqECVpQXG73nR+2IUj/ec6ZRHLsRZkrNNE9AY=
Subject key identifier: D6:7D:82:64:7C:95:3F:F2:5B:14:41:E6:B9:2A:58:86:CF:5B:56:29
Certificate issuer: /CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Certificate serial: 018412C0BDC5A26EBC20A6D92B17225297DB
Authority key identifier: 35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/1n2CZHyVP_JbFEHmuSpYhs9bVik.roa
Signing time: Wed 26 Oct 2022 05:25:32 +0000
ROA not before: Wed 26 Oct 2022 05:25:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16276
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:12:c0:bd:c5:a2:6e:bc:20:a6:d9:2b:17:22:52:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Validity
Not Before: Oct 26 05:25:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d67d82647c953ff25b1441e6b92a5886cf5b5629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:64:53:3e:a6:11:55:d4:c7:0b:2f:71:db:
b9:60:36:67:d6:95:92:e3:2e:1d:fb:cb:4e:c0:5a:
2d:a5:38:df:d9:19:14:97:0c:31:bf:99:1a:43:e4:
2c:e3:a9:b1:65:d8:ff:e1:97:44:ee:c2:5e:4b:e5:
0f:e5:35:ff:da:61:59:92:fc:d9:4b:9b:59:c0:cb:
3b:19:bd:09:0c:5f:8c:01:84:2b:fc:bd:ae:4a:3b:
48:f8:a3:84:c8:66:bc:98:83:c1:3e:0e:29:a9:f8:
fd:fc:73:47:c7:09:2a:40:65:d7:f0:af:34:8d:1f:
b9:75:78:46:e7:d3:f4:61:89:76:57:b9:aa:ba:0d:
c5:76:ad:73:cb:a6:de:0f:2d:ba:5f:02:1c:ed:1d:
69:38:5d:a4:b7:dd:e6:26:a7:c2:36:64:62:ee:5d:
38:e6:b2:93:84:54:3d:8f:21:66:02:64:e5:f2:01:
3e:19:f6:48:07:f6:3d:4a:4e:8c:f9:36:8b:78:1b:
46:0c:66:eb:89:d0:ae:89:77:16:85:de:fc:31:64:
bc:91:df:82:93:b6:b6:5e:62:6a:0d:ec:e6:7f:71:
aa:fc:c2:11:b7:6f:a2:d7:b7:9f:bd:7d:f0:00:10:
72:7e:45:10:2c:89:95:4d:e4:bc:59:d6:0c:b9:38:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:82:64:7C:95:3F:F2:5B:14:41:E6:B9:2A:58:86:CF:5B:56:29
X509v3 Authority Key Identifier:
keyid:35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/1n2CZHyVP_JbFEHmuSpYhs9bVik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e2:18:35:5d:dc:92:3f:15:15:c3:06:14:9b:4e:73:48:62:
77:a8:e6:0c:02:5d:6e:f1:d0:4e:3e:73:3c:e8:ab:63:3b:24:
d9:0c:40:39:f9:58:16:74:f9:eb:10:bf:a6:1d:16:98:21:63:
c4:47:65:cc:82:f6:26:3c:82:9b:ed:ac:33:b5:e8:60:78:17:
a3:ea:79:b0:dc:fb:a0:da:7d:ec:3f:1d:5c:60:56:91:e4:20:
1c:dc:bb:83:c4:0d:39:a1:50:98:ed:fe:9b:03:cd:12:a3:11:
2f:b0:9d:1c:27:bd:83:2a:81:a1:8f:d1:6e:3a:34:10:66:3e:
9a:aa:be:b5:09:f7:f9:32:24:c9:ef:83:94:f7:70:b2:47:be:
91:95:9c:12:97:8c:82:57:49:16:74:25:9a:c9:59:00:15:8b:
d5:47:71:86:cb:f4:d6:7f:aa:46:d3:ba:92:9e:a7:e1:19:8a:
66:aa:e8:58:94:16:58:95:37:fb:62:ed:3a:04:49:60:a8:6b:
da:ab:8c:4f:f6:68:12:aa:69:fa:a1:ea:d4:f2:4f:16:5f:d7:
a0:1e:8c:ea:87:9c:06:c5:41:ae:1d:57:4d:20:74:79:86:b2:
19:07:27:7c:7c:a4:38:b4:bf:68:51:8a:29:34:13:96:76:c2:
23:af:0d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org