Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/Clej1wwuKPEScp32xJjJY_wt_G8.roa
File: Clej1wwuKPEScp32xJjJY_wt_G8.roa (raw, json)
Hash identifier: M+nHNj3cIX/KRr5981l6xZhMe7DXwZ58QlN3SaPcEZU=
Subject key identifier: 0A:57:A3:D7:0C:2E:28:F1:12:72:9D:F6:C4:98:C9:63:FC:2D:FC:6F
Certificate issuer: /CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Certificate serial: 018401ED7B7B5D73A92C04D11AA49F7F11FE
Authority key identifier: 35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/Clej1wwuKPEScp32xJjJY_wt_G8.roa
Signing time: Sat 22 Oct 2022 23:00:51 +0000
ROA not before: Sat 22 Oct 2022 23:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:ed:7b:7b:5d:73:a9:2c:04:d1:1a:a4:9f:7f:11:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Validity
Not Before: Oct 22 23:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a57a3d70c2e28f112729df6c498c963fc2dfc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:b2:d9:c4:12:31:1e:25:86:c1:e6:7c:cf:
7f:fb:ba:df:d5:31:02:3c:2b:82:35:e7:8d:90:c3:
81:ae:3b:ca:c5:2d:4f:7e:dc:08:19:f2:96:10:28:
4c:9b:94:5e:bc:70:03:28:c1:98:18:f6:6f:25:98:
8a:b7:58:3b:54:8d:e9:d8:27:de:c3:e8:a0:a4:28:
f1:2b:bb:d7:d7:82:8b:ab:09:d8:b4:a2:9d:f7:27:
2d:0e:51:24:39:34:a0:c2:44:a1:6c:a9:af:b7:8c:
9e:98:56:0d:80:f7:e1:8a:94:13:01:47:c3:e2:13:
42:a8:13:af:43:56:49:b2:7e:6d:86:ef:ba:d0:50:
7f:e0:1c:37:3c:c4:3b:30:30:cc:bc:e4:e5:c3:5c:
f0:87:69:d1:02:17:39:e3:df:f5:33:bc:e0:ad:10:
c3:f2:2a:42:c8:c1:59:b4:7f:0e:8d:53:c8:b0:48:
af:06:e0:f5:e8:27:92:a0:9b:a6:d2:43:9f:e6:42:
d8:b5:23:ed:11:4b:c3:de:dd:97:fc:27:3a:66:ae:
4a:9d:a9:3e:c7:be:82:d3:b8:4a:45:49:96:29:b8:
72:02:c3:60:11:e4:f9:1d:25:85:7d:e3:35:fc:e8:
89:56:54:ca:a2:a2:e1:26:81:09:37:6f:85:ae:a7:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:A3:D7:0C:2E:28:F1:12:72:9D:F6:C4:98:C9:63:FC:2D:FC:6F
X509v3 Authority Key Identifier:
keyid:35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/Clej1wwuKPEScp32xJjJY_wt_G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:82:c3:39:2c:de:d1:56:0b:41:e9:8f:04:aa:df:07:9e:f3:
fa:e9:1c:c2:7f:d5:6e:c8:60:54:f8:86:c0:41:b6:4e:7d:1b:
14:1c:48:f2:bd:fe:e2:99:36:3a:bf:21:4d:c5:ff:f3:31:bf:
da:5e:06:e8:fd:5d:d8:b7:46:28:13:81:05:9f:11:3b:f8:c8:
57:1f:a1:90:20:84:84:20:fe:f9:4f:1e:6b:14:a6:37:d7:96:
eb:b2:a5:59:1d:9f:c1:04:b1:6f:38:b0:05:af:15:a7:88:45:
e0:35:db:61:36:6f:da:2a:b2:c3:7b:60:e2:a6:49:09:fe:a1:
9a:d1:e0:24:89:b0:ed:01:0f:09:d4:dc:6f:49:01:a4:ab:68:
e0:75:1f:fa:a2:dd:71:43:33:93:6f:54:08:03:d8:20:b4:cc:
23:85:0a:e8:e3:39:81:62:b9:f4:19:47:bf:72:95:b9:27:6f:
a3:f9:ee:64:55:43:94:b1:da:49:da:80:13:04:34:e6:ae:db:
93:e0:c8:cc:24:60:cb:f0:16:6b:0a:2f:39:86:e4:9d:ff:4a:
35:cc:29:e0:8f:2e:c8:c8:df:15:8a:97:3e:58:62:92:e0:c8:
bb:18:56:9a:ed:3c:83:f9:49:53:2a:12:ff:b0:b8:b1:8d:e8:
08:bf:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org