Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/p6kfvkS6LwxlcvaPFhJM5V_B8xM.roa
File: p6kfvkS6LwxlcvaPFhJM5V_B8xM.roa (raw, json)
Hash identifier: v/vnORl4EBTYLuEwhjWax99rS5bEFAf70df/AGEk40U=
Subject key identifier: A7:A9:1F:BE:44:BA:2F:0C:65:72:F6:8F:16:12:4C:E5:5F:C1:F3:13
Certificate issuer: /CN=4ab6868a6207b34768c3b439ccbc8edd47b68665
Certificate serial: 72D313
Authority key identifier: 4A:B6:86:8A:62:07:B3:47:68:C3:B4:39:CC:BC:8E:DD:47:B6:86:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SraGimIHs0dow7Q5zLyO3Ue2hmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/p6kfvkS6LwxlcvaPFhJM5V_B8xM.roa
Signing time: Sat 01 Jan 2022 01:51:17 +0000
ROA not before: Sat 01 Jan 2022 01:51:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212913
IP address blocks: 62.3.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7525139 (0x72d313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab6868a6207b34768c3b439ccbc8edd47b68665
Validity
Not Before: Jan 1 01:51:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7a91fbe44ba2f0c6572f68f16124ce55fc1f313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:ab:98:0e:3b:17:ad:54:d1:fd:91:aa:dc:
fe:2a:b8:d0:87:a3:7b:e7:6a:3d:d2:f0:c9:7a:c9:
90:e8:1d:88:81:f5:98:55:b3:6a:ed:38:95:54:8f:
25:f3:64:89:c6:85:c1:ce:6f:56:a4:f1:37:39:02:
2a:88:95:b1:ff:b2:3b:ad:25:44:08:e6:b6:2a:23:
31:1c:e9:1b:2b:72:6b:6d:56:12:ff:da:68:d1:07:
63:3d:b2:32:db:c3:c3:b8:a1:f0:0d:5e:58:64:b9:
46:aa:f0:0e:71:4b:cd:ef:ce:c3:e2:21:d5:b6:cf:
b8:3d:c3:1e:4f:aa:91:47:27:2d:02:4f:b5:1f:79:
dd:89:c3:55:35:19:52:20:dd:4b:5a:ab:16:e3:a9:
21:5a:5e:dd:02:f5:4b:41:b2:c1:49:e2:a6:65:0b:
4f:29:b6:1c:7a:d5:ac:ff:89:d7:f7:76:77:71:a8:
c6:38:65:0c:10:e6:ee:7d:c9:ac:b8:b8:79:de:1e:
f1:66:28:c6:27:a2:91:22:44:ba:85:51:ef:46:e7:
cc:66:a2:87:3a:28:e0:05:83:bb:74:16:43:96:c9:
c6:70:83:7b:8c:86:d9:72:37:ea:16:92:b2:0d:ba:
18:d0:2b:63:f2:b5:b4:6e:e9:ff:74:ca:ef:03:7a:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A9:1F:BE:44:BA:2F:0C:65:72:F6:8F:16:12:4C:E5:5F:C1:F3:13
X509v3 Authority Key Identifier:
keyid:4A:B6:86:8A:62:07:B3:47:68:C3:B4:39:CC:BC:8E:DD:47:B6:86:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SraGimIHs0dow7Q5zLyO3Ue2hmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/p6kfvkS6LwxlcvaPFhJM5V_B8xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/SraGimIHs0dow7Q5zLyO3Ue2hmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:55:02:05:08:2b:17:c5:9d:a8:e7:fe:21:08:c0:67:ef:59:
25:b7:0d:da:b8:16:b5:a9:fb:0d:35:29:27:2e:e4:49:41:8a:
09:77:37:e8:94:0a:5a:95:68:dc:af:24:ad:07:ee:5a:4d:c0:
5a:78:75:9f:79:b7:0e:27:82:6e:0e:10:1f:43:20:ed:f4:ac:
ef:a6:bc:48:05:59:f8:a4:5d:96:0a:84:62:e6:b0:b6:18:53:
63:46:db:9a:00:c3:43:7a:98:75:bc:1a:8e:b6:26:92:e4:e3:
88:3f:2e:0a:47:c4:84:ab:71:a1:b2:0b:50:87:03:da:65:3e:
43:23:69:39:d8:93:b7:34:f9:cf:67:67:0a:3f:a7:84:3d:75:
7d:13:6a:8d:0d:4b:01:59:1c:97:da:56:c0:40:e4:03:d5:44:
5c:45:7f:8d:4b:75:ad:eb:7b:15:db:79:f1:b0:b8:d2:0d:75:
2f:03:28:f1:a9:26:76:aa:6b:84:28:9e:e6:c3:a3:20:6c:ae:
d7:98:30:29:eb:53:c1:ed:9f:0e:14:2a:63:86:24:30:76:06:
75:f5:9d:85:08:dc:5e:9b:ae:71:5a:c7:dd:c0:35:77:d9:0d:
0d:2c:e7:16:c7:43:54:f1:36:3a:e5:ba:04:f8:1d:08:13:da:
55:31:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:06 2024 by rpki-client on console-ams.rpki-client.org