Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/gKIzcl2LK4EnMYOUK45hhYVel2Y.roa
File: gKIzcl2LK4EnMYOUK45hhYVel2Y.roa (raw, json)
Hash identifier: oA8UgmkScglCMthfxU7DgLPY85LPagzF90v8nGMqXtU=
Subject key identifier: 80:A2:33:72:5D:8B:2B:81:27:31:83:94:2B:8E:61:85:85:5E:97:66
Certificate issuer: /CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Certificate serial: 018211EE0E996FA92F2F741A0CED25359C9F
Authority key identifier: 35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/gKIzcl2LK4EnMYOUK45hhYVel2Y.roa
Signing time: Mon 18 Jul 2022 15:29:50 +0000
ROA not before: Mon 18 Jul 2022 15:29:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:ee:0e:99:6f:a9:2f:2f:74:1a:0c:ed:25:35:9c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Validity
Not Before: Jul 18 15:29:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80a233725d8b2b81273183942b8e6185855e9766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:96:0e:68:3a:69:65:4a:b5:80:e5:67:e3:
29:a6:a0:2e:f8:32:a9:46:52:29:d0:04:40:43:6b:
17:30:28:2b:7c:28:6d:20:e2:07:34:81:30:c8:96:
69:4a:2c:5e:18:16:5d:17:4e:e3:ab:99:ab:c1:10:
7b:ce:cf:53:be:f6:3b:83:d4:7a:ab:92:19:8b:79:
63:89:e8:49:3b:00:d8:1a:63:0f:1c:61:25:b9:0b:
20:b9:c3:e3:5e:a6:06:5c:b3:bc:62:a7:88:46:03:
05:2e:68:32:54:1c:fc:bb:16:1e:f2:32:d6:ba:0b:
e4:53:31:38:4b:dd:b9:11:89:4d:81:72:f2:24:48:
1e:3b:d4:88:ea:32:8b:5e:42:e2:eb:34:e4:0d:da:
07:91:9c:1a:49:3b:25:5b:9e:3c:39:c9:9b:19:1a:
64:b1:1f:c1:ab:6a:04:5b:64:16:99:56:71:95:48:
8d:09:72:54:48:23:b8:6b:64:ad:2c:cc:5f:dd:b6:
c8:72:b7:bb:e9:e8:db:ed:8a:32:f2:d6:4f:9e:e0:
c7:73:58:53:d1:ae:92:8e:3b:cb:01:08:90:09:31:
b4:47:28:1b:65:0b:6d:da:1c:11:7a:82:81:cb:5e:
0c:4f:f9:97:e5:48:9d:23:44:52:4d:53:53:7c:e9:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A2:33:72:5D:8B:2B:81:27:31:83:94:2B:8E:61:85:85:5E:97:66
X509v3 Authority Key Identifier:
keyid:35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/gKIzcl2LK4EnMYOUK45hhYVel2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b7:71:d9:7b:cf:7a:47:19:6a:60:e3:9a:56:b9:01:ad:62:
e9:a3:93:02:99:d9:03:bc:c7:8c:cd:b9:63:80:46:3b:79:58:
ac:51:83:80:27:10:7b:7e:09:37:82:09:ea:43:87:2b:8d:dd:
0d:8a:63:ff:e8:bf:7b:8a:a0:11:53:c6:28:3b:8d:be:0b:c6:
61:9d:5b:56:26:ee:7f:19:02:0e:dc:8e:7c:67:29:8a:6b:f8:
6a:da:26:9e:a7:86:36:b8:f2:a2:ea:f5:da:ea:a3:3c:c9:27:
01:3d:b8:3d:1b:cb:11:f7:99:b7:35:ba:af:44:12:32:99:e9:
3a:02:18:95:0f:70:65:19:43:1b:1f:ed:50:21:e2:89:d9:04:
c7:15:f8:7b:df:a7:36:4e:06:e2:25:b9:ad:95:87:a6:3b:d3:
c2:71:95:5d:57:50:87:5c:38:3d:b5:ad:90:2b:55:6d:5e:73:
56:14:c0:8b:17:56:9e:bb:74:75:36:fa:69:f7:22:53:8a:9c:
94:4b:2f:16:e6:cc:6c:1d:19:41:ae:d4:7a:3b:c2:4f:5c:79:
e1:09:20:8d:03:17:e5:62:12:48:e2:69:8b:ed:a0:f1:5b:b6:
de:96:f4:76:9a:43:54:78:41:92:c7:1a:58:38:5a:b5:31:88:
7f:c5:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org