Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9fa580-cfd9-442b-943f-d843ee551eb2/1/zYfEVr2XncF77yTpEsTK-M5P4uM.roa
File: zYfEVr2XncF77yTpEsTK-M5P4uM.roa (raw, json)
Hash identifier: 1ECcXRvp6Xu6EuzBsZM2caAKI61X7d9/L3qEFh1wVu0=
Subject key identifier: CD:87:C4:56:BD:97:9D:C1:7B:EF:24:E9:12:C4:CA:F8:CE:4F:E2:E3
Certificate issuer: /CN=4366c43872731a268bf5c963ddf661774ef9cae1
Certificate serial: 01857115108B38A4E196AB975A31D45617F3
Authority key identifier: 43:66:C4:38:72:73:1A:26:8B:F5:C9:63:DD:F6:61:77:4E:F9:CA:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2bEOHJzGiaL9clj3fZhd075yuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9fa580-cfd9-442b-943f-d843ee551eb2/1/zYfEVr2XncF77yTpEsTK-M5P4uM.roa
Signing time: Mon 02 Jan 2023 06:04:43 +0000
ROA not before: Mon 02 Jan 2023 06:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:10:8b:38:a4:e1:96:ab:97:5a:31:d4:56:17:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4366c43872731a268bf5c963ddf661774ef9cae1
Validity
Not Before: Jan 2 06:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd87c456bd979dc17bef24e912c4caf8ce4fe2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:f3:a9:96:38:69:a6:13:d7:f1:bc:56:df:
42:06:b2:5c:2a:62:8f:97:7a:7b:9d:9f:b1:21:2d:
c6:ca:3c:17:d3:75:2d:40:0f:98:ff:d1:79:c1:0a:
bb:cd:41:40:19:90:c3:35:1d:00:5a:a6:ac:de:93:
38:f4:82:bc:42:fd:ca:53:b2:79:04:37:ec:b9:95:
d9:21:4f:d4:68:23:32:2f:d8:50:12:0a:72:b5:e3:
87:0c:bb:41:da:fa:ea:ce:68:3b:5d:a5:54:80:1c:
6f:9c:d5:3b:4b:10:e4:9f:c1:bc:1f:af:d6:36:67:
4b:57:97:10:a9:bc:43:5c:88:bf:c5:b7:25:a4:be:
80:ce:ad:ce:d0:a4:5d:de:98:ff:87:ff:b1:c5:9c:
be:0e:11:1c:3d:83:bf:00:fa:16:c5:72:20:19:17:
bb:76:39:91:3e:6d:f2:98:a3:1d:a0:7b:e2:bb:6f:
45:71:9e:fb:eb:ed:5a:6a:29:6e:71:78:f5:a5:d7:
eb:5e:a2:ab:29:55:6d:b5:4b:d0:44:a5:a3:ea:d1:
d4:cf:db:10:42:88:ec:5f:65:4d:b8:76:a4:fe:a4:
90:76:c0:9b:62:d9:90:e2:7a:a1:2a:99:ff:0f:0e:
e5:b8:7b:4d:ac:89:ff:62:97:a8:7d:27:3d:c2:59:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:C4:56:BD:97:9D:C1:7B:EF:24:E9:12:C4:CA:F8:CE:4F:E2:E3
X509v3 Authority Key Identifier:
keyid:43:66:C4:38:72:73:1A:26:8B:F5:C9:63:DD:F6:61:77:4E:F9:CA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2bEOHJzGiaL9clj3fZhd075yuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9fa580-cfd9-442b-943f-d843ee551eb2/1/zYfEVr2XncF77yTpEsTK-M5P4uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9fa580-cfd9-442b-943f-d843ee551eb2/1/Q2bEOHJzGiaL9clj3fZhd075yuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.76.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7a:de:52:68:b9:6b:bb:69:f9:0f:bf:8f:5e:a2:b5:f5:7c:
2b:48:80:d7:0a:0b:23:d8:a3:a3:05:2c:6c:dc:c7:e0:fe:3b:
8c:bc:57:37:55:b4:99:26:24:2b:5c:54:d0:3f:96:e5:b0:db:
04:1a:5f:f5:11:f7:d5:5f:aa:d5:50:db:48:13:1d:c5:bd:6f:
4f:c9:9e:7a:c2:2b:c9:ee:22:04:5f:d5:28:73:2c:35:06:47:
e9:bc:ae:f4:e5:03:84:92:df:7d:b0:56:5e:d4:82:e0:d3:15:
d9:72:19:70:24:ca:ec:18:8c:2c:30:a9:5f:0e:05:e1:c6:a5:
31:a7:02:4c:fe:31:9f:9a:6c:bf:90:ee:7a:6d:75:e5:b1:a6:
a3:09:d4:9d:af:8b:a0:c1:20:40:93:b6:9e:1d:d5:3b:e4:39:
7a:d8:ba:27:2f:dd:22:ac:83:97:4c:54:93:a9:61:2d:63:eb:
bb:61:f4:50:e3:c0:37:7b:72:14:27:93:5f:1a:17:8f:7a:63:
a1:0a:a3:8f:67:2e:0b:93:27:36:61:de:20:06:fb:69:19:91:
21:f0:c7:62:74:01:13:78:10:14:4f:43:28:26:84:59:30:55:
7c:41:cf:ca:f2:6e:28:9e:d1:c5:64:9d:7d:72:0b:b9:0c:52:
ef:93:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:53 2025 by rpki-client