Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/CViOE1pLKIPMSC4LUp96zcYJR4o.roa
File: CViOE1pLKIPMSC4LUp96zcYJR4o.roa (raw, json)
Hash identifier: xtstgW6/lMt+xfuLUBZxLOsXmlr7wKCCh73iQnVdYKM=
Subject key identifier: 09:58:8E:13:5A:4B:28:83:CC:48:2E:0B:52:9F:7A:CD:C6:09:47:8A
Certificate issuer: /CN=4ab6868a6207b34768c3b439ccbc8edd47b68665
Certificate serial: 01856B9C504B76CA1BBE840D1E090CF09A7F
Authority key identifier: 4A:B6:86:8A:62:07:B3:47:68:C3:B4:39:CC:BC:8E:DD:47:B6:86:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SraGimIHs0dow7Q5zLyO3Ue2hmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/CViOE1pLKIPMSC4LUp96zcYJR4o.roa
Signing time: Sun 01 Jan 2023 04:34:44 +0000
ROA not before: Sun 01 Jan 2023 04:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212913
IP address blocks: 62.3.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:50:4b:76:ca:1b:be:84:0d:1e:09:0c:f0:9a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab6868a6207b34768c3b439ccbc8edd47b68665
Validity
Not Before: Jan 1 04:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09588e135a4b2883cc482e0b529f7acdc609478a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:5a:60:e8:eb:47:3f:bd:89:8f:9e:3b:9a:
7f:2e:da:98:b8:9d:12:90:22:0e:44:20:74:74:91:
37:cc:47:3c:7f:ab:21:c5:0d:58:18:9d:cd:d2:2c:
3e:86:89:1b:a2:e5:53:30:3e:a4:93:be:b7:32:e1:
e4:9d:00:21:27:d1:46:a0:e2:31:0f:90:f1:ad:17:
b1:b8:70:13:26:00:a4:b2:dc:82:10:a4:29:0b:1a:
7e:b7:8d:c8:2b:7d:94:6d:6c:fa:fc:9a:03:0c:53:
76:77:82:1a:ba:b0:22:1e:73:9f:8e:8f:34:ba:ec:
6e:82:2d:a3:00:cf:73:b9:83:b0:19:9a:b3:a8:60:
c3:55:10:ba:30:3f:49:08:8c:ab:61:b6:ec:df:39:
67:c4:0c:b1:9e:3e:0f:49:37:e3:31:79:02:ac:a7:
15:6d:62:b5:de:f9:38:66:05:ef:ad:e7:f1:e8:45:
a7:c5:68:08:68:bf:5b:79:2d:c1:aa:eb:3b:74:a9:
ba:10:ff:52:0e:da:bf:43:d4:2e:c4:83:af:9f:d8:
23:7d:f7:26:de:5a:05:f4:39:63:fd:30:c0:99:e5:
5c:39:3d:92:ef:ac:bb:58:51:9a:11:90:60:f4:76:
43:3e:d4:5f:bf:75:e9:73:44:9e:46:4c:48:4f:8d:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:8E:13:5A:4B:28:83:CC:48:2E:0B:52:9F:7A:CD:C6:09:47:8A
X509v3 Authority Key Identifier:
keyid:4A:B6:86:8A:62:07:B3:47:68:C3:B4:39:CC:BC:8E:DD:47:B6:86:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SraGimIHs0dow7Q5zLyO3Ue2hmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/CViOE1pLKIPMSC4LUp96zcYJR4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/SraGimIHs0dow7Q5zLyO3Ue2hmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3f:fd:68:da:1a:b4:55:bf:0c:ac:88:8c:d2:36:f0:fe:fc:
09:cc:f4:f5:c8:31:e6:f0:88:04:89:29:6a:be:35:e8:88:4b:
70:6d:66:dd:72:2c:06:84:45:a7:20:49:60:73:d7:1a:51:7d:
48:8f:84:4c:07:b6:34:b2:2d:84:c7:c9:b0:c2:e0:66:a3:91:
ce:91:4d:e5:9a:94:49:c7:d8:db:c2:45:d5:0f:03:b7:a9:54:
08:d0:a0:17:76:b1:d7:4e:73:41:87:80:ee:a4:58:71:a5:4f:
c6:fe:3b:13:43:a5:7c:43:2c:90:c7:8c:90:79:93:9a:b4:5b:
f9:3d:6d:4b:63:c5:12:06:94:33:85:dc:dc:ac:3e:a8:ce:2b:
91:90:b2:56:82:3e:18:9f:c1:9a:2c:d7:a1:8a:7d:b2:66:38:
ae:54:a6:b8:fc:7d:80:6c:4e:7e:8c:2a:53:a7:bb:ba:75:6b:
77:e1:6f:74:dc:5d:c0:9d:a0:bf:3d:36:20:50:be:6f:4c:70:
4f:4c:f3:0a:4a:bd:29:8b:13:ae:48:5c:3b:02:de:3e:54:3b:
22:21:6f:5e:87:69:7e:88:63:d4:de:49:87:2c:b9:e1:8c:1a:
0e:cd:89:d2:f8:37:fd:51:a8:f9:1b:46:7e:a1:3f:c8:73:f9:
ae:fb:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:06 2024 by rpki-client on console-ams.rpki-client.org