Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/j20XxkYR7i-OmvI4ypus7UhfLHc.roa
File: j20XxkYR7i-OmvI4ypus7UhfLHc.roa (raw, json)
Hash identifier: z1MurYa771va1gI16NKKUAk8ExDmF5N4dAM3hlN/3s8=
Subject key identifier: 8F:6D:17:C6:46:11:EE:2F:8E:9A:F2:38:CA:9B:AC:ED:48:5F:2C:77
Certificate issuer: /CN=cdbadc4938878971f916dc26093e5b17199e81df
Certificate serial: 018AFAA7D5FE092A1D764D365EC5203E08BC
Authority key identifier: CD:BA:DC:49:38:87:89:71:F9:16:DC:26:09:3E:5B:17:19:9E:81:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbrcSTiHiXH5FtwmCT5bFxmegd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/j20XxkYR7i-OmvI4ypus7UhfLHc.roa
Signing time: Wed 04 Oct 2023 12:26:57 +0000
ROA not before: Wed 04 Oct 2023 12:26:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 62.204.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:a7:d5:fe:09:2a:1d:76:4d:36:5e:c5:20:3e:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbadc4938878971f916dc26093e5b17199e81df
Validity
Not Before: Oct 4 12:26:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f6d17c64611ee2f8e9af238ca9baced485f2c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:7d:97:b3:97:a8:4d:f0:c6:29:6a:75:74:
1a:86:55:ae:4a:c8:ce:05:1f:43:2d:99:e8:d3:97:
5a:f2:7e:3d:ee:02:04:bf:ba:3f:35:7d:1c:e8:9a:
8a:85:86:81:d9:58:a7:a8:0f:c2:2d:03:1f:2f:3b:
60:20:75:d6:75:83:c6:01:1b:a5:c9:aa:c7:0e:8b:
91:5b:ce:05:36:e8:1d:d4:31:a0:e9:a9:d8:99:4b:
36:95:11:b8:e6:96:72:6b:28:93:80:77:65:63:db:
a9:83:13:b7:78:2a:4d:10:17:78:ab:a2:83:59:33:
7d:e0:02:67:75:30:98:34:fd:8a:a3:93:ce:c9:78:
f2:6b:28:8f:57:30:ac:7a:29:1d:da:f3:f5:b0:ce:
2c:2e:d9:cf:6c:1a:44:0e:74:db:e2:16:aa:8e:5a:
dd:d8:81:03:55:d2:f0:a4:8b:79:ee:82:a2:23:ca:
ad:b4:b2:2c:e1:68:63:c6:59:1d:63:44:cc:c2:9d:
b5:fc:41:fc:c6:b0:07:3d:cc:6c:e0:5c:db:25:d3:
d7:fd:9e:c7:85:6f:a9:da:7c:cc:da:3b:51:26:93:
4d:31:9e:95:34:b3:83:d4:ac:e9:7b:7e:d4:7a:9d:
9b:19:38:05:cc:31:05:f9:95:7c:e1:95:ea:73:c2:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:17:C6:46:11:EE:2F:8E:9A:F2:38:CA:9B:AC:ED:48:5F:2C:77
X509v3 Authority Key Identifier:
keyid:CD:BA:DC:49:38:87:89:71:F9:16:DC:26:09:3E:5B:17:19:9E:81:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbrcSTiHiXH5FtwmCT5bFxmegd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/j20XxkYR7i-OmvI4ypus7UhfLHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a64edb-4ff0-4d5c-b153-75752a205a0f/1/zbrcSTiHiXH5FtwmCT5bFxmegd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.55.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1a:fd:06:55:f1:09:3a:bd:9b:1f:17:f0:7f:24:f8:c7:ad:
d3:f4:af:8f:ab:0d:87:49:78:9f:31:ec:e7:d1:65:6d:04:d5:
d3:f3:1d:ad:3b:07:a2:4e:a0:fa:f2:17:b5:ca:23:d2:a2:09:
d5:3a:c5:57:7a:84:62:23:c0:e6:a7:5a:a5:0b:42:4b:eb:7c:
8a:9a:47:20:51:82:74:31:13:58:b3:e8:ac:a6:37:ee:85:b9:
8a:35:bc:3c:d3:ae:fb:1e:7e:a7:2e:ad:d7:85:9b:b1:d6:03:
1a:3b:a2:a6:16:db:60:ca:63:5c:ac:07:c0:72:45:a5:d5:10:
be:a7:84:13:e0:63:41:cc:ab:23:8a:ab:4e:65:b9:c4:4f:6f:
df:4d:9d:b3:42:6c:ab:bf:74:e9:21:61:86:b6:cc:20:e7:09:
9b:5f:55:5f:07:f0:b5:33:16:df:f4:e5:3d:b6:e2:96:ed:37:
49:02:f4:b2:a6:48:c3:8b:f7:e5:6d:ae:58:c2:8f:9a:9d:22:
d1:77:87:fd:aa:80:44:a4:5e:a4:0e:13:b4:0b:fd:ca:6a:71:
49:d4:95:ed:a8:1e:0c:a5:68:5f:e5:47:62:03:f9:03:a1:8d:
aa:0d:8e:cf:70:4a:9f:68:33:71:1c:e9:36:b5:30:18:0b:c2:
05:e6:cd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:39 2024 by rpki-client on console-fra.rpki-client.org