Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/WRzeq1h0xvZtrLbwlPBsZ45OlEI.roa
File: WRzeq1h0xvZtrLbwlPBsZ45OlEI.roa (raw, json)
Hash identifier: amRe7uoK1lzVr4n0Gv4XFNHEhgy6c7A6VYuYssuyqmk=
Subject key identifier: 59:1C:DE:AB:58:74:C6:F6:6D:AC:B6:F0:94:F0:6C:67:8E:4E:94:42
Certificate issuer: /CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Certificate serial: 019BEA00
Authority key identifier: 35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/WRzeq1h0xvZtrLbwlPBsZ45OlEI.roa
Signing time: Mon 09 May 2022 23:57:31 +0000
ROA not before: Mon 09 May 2022 23:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26995200 (0x19bea00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Validity
Not Before: May 9 23:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=591cdeab5874c6f66dacb6f094f06c678e4e9442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:ac:15:82:15:3b:33:c8:36:59:af:20:8b:
b8:3c:1f:d6:b2:e5:80:4c:2b:5b:ad:1e:25:1e:f8:
8a:33:a1:d9:da:47:25:39:55:fe:13:12:aa:2e:a6:
21:1c:5d:ee:f4:76:5a:d7:62:4c:7e:c7:be:07:94:
6e:c0:d3:83:91:fc:3c:3e:eb:51:54:e2:15:72:85:
7e:69:18:48:ab:95:03:f4:19:2b:d3:7b:d7:3a:23:
6c:fc:c3:a7:0d:dd:49:49:40:aa:f5:dc:f5:aa:c1:
75:22:99:a1:5d:b8:b1:bc:07:78:93:86:9f:c3:2d:
be:48:7a:0d:52:2a:c0:5a:e8:bf:31:c3:77:6c:d8:
06:72:1d:8f:88:3f:c8:6c:be:87:62:c2:9b:f1:51:
e0:11:7e:eb:8c:d8:a9:c5:ca:7a:1c:54:d1:c9:69:
04:0a:a4:20:5f:68:59:b4:73:5e:e8:ff:24:a1:d8:
0c:5b:5c:c7:f3:15:2c:e6:58:5a:b4:45:f9:5b:42:
af:9c:9b:db:05:64:ac:08:cd:20:dc:c2:39:47:2a:
32:9d:8a:54:5a:6b:0c:bc:3d:30:5f:2d:98:e8:29:
c3:02:8b:ea:7b:d9:e9:a5:21:e2:93:27:4d:6f:f7:
77:91:e8:3f:55:5b:ea:40:7c:e6:7e:4a:8b:69:31:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:DE:AB:58:74:C6:F6:6D:AC:B6:F0:94:F0:6C:67:8E:4E:94:42
X509v3 Authority Key Identifier:
keyid:35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/WRzeq1h0xvZtrLbwlPBsZ45OlEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bf:10:65:8e:f1:46:a2:e0:79:e7:15:1e:b6:54:20:15:ce:
6a:57:f7:ac:bc:9a:ec:4a:45:39:ee:6b:55:8a:7c:12:94:af:
c3:ab:b9:c4:80:04:fd:a3:62:98:df:9c:12:7b:53:6a:58:94:
3d:8e:8b:a8:08:44:f0:f9:97:0c:cd:18:e9:19:e8:7f:32:0d:
ba:4e:76:79:44:2d:c6:7f:35:d1:34:bb:9b:6f:49:70:37:3d:
70:f2:db:b1:47:8b:59:18:70:c1:b7:90:2d:d4:c3:aa:2d:62:
c0:35:e3:dc:b0:a4:c0:00:cc:80:26:bd:2c:29:e6:4c:72:aa:
a4:2f:c9:91:31:a4:d0:fc:ef:be:bd:81:bb:f3:15:31:cf:fd:
64:07:cb:63:fe:da:c0:a5:ae:fd:f3:00:5a:d5:3d:ff:c6:1d:
03:3f:f7:90:50:18:90:cd:02:f9:26:28:6f:da:be:a4:36:89:
d1:67:ef:5c:66:c3:54:0f:cc:49:4f:77:ef:a7:d9:f9:c2:61:
76:67:b2:0b:e0:21:69:58:df:fd:95:4b:b5:b1:dd:e5:01:a4:
24:20:68:f2:c7:23:46:c0:c4:97:c6:e0:7b:e0:db:33:08:29:
9b:8a:45:4e:35:a3:eb:98:e0:55:eb:8a:0b:0a:47:2d:79:d5:
76:f9:a7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org