Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f4c1fe-fd43-4281-a03a-b10e68987d9f/1/PrmDwBO6oR1BgSf7OULHm1bJxxA.roa
File: PrmDwBO6oR1BgSf7OULHm1bJxxA.roa (raw, json)
Hash identifier: o2K9niyfjj4U0E8LJ2KdaN4Pc71FxV+wYjNB4MjAQJ8=
Subject key identifier: 3E:B9:83:C0:13:BA:A1:1D:41:81:27:FB:39:42:C7:9B:56:C9:C7:10
Certificate issuer: /CN=8a41f37b3468815eeea2dde7a83a8ba4fcba3826
Certificate serial: 165734D2
Authority key identifier: 8A:41:F3:7B:34:68:81:5E:EE:A2:DD:E7:A8:3A:8B:A4:FC:BA:38:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikHzezRogV7uot3nqDqLpPy6OCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f4c1fe-fd43-4281-a03a-b10e68987d9f/1/PrmDwBO6oR1BgSf7OULHm1bJxxA.roa
Signing time: Sat 01 Jan 2022 00:53:50 +0000
ROA not before: Sat 01 Jan 2022 00:53:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21125
IP address blocks: 62.12.32.0/20 maxlen: 20
62.12.48.0/21 maxlen: 21
80.88.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374813906 (0x165734d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a41f37b3468815eeea2dde7a83a8ba4fcba3826
Validity
Not Before: Jan 1 00:53:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eb983c013baa11d418127fb3942c79b56c9c710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:64:d9:a2:d2:79:04:42:36:c7:2d:3a:73:
97:03:c4:34:0a:9f:42:b0:6f:63:df:f1:f7:b0:9c:
12:f9:6e:60:5b:3e:a7:ce:6f:9c:82:a4:fc:bd:66:
a4:c2:11:88:9c:79:51:9e:b5:f9:4b:91:6e:2d:a2:
6b:c9:6d:6f:b8:00:ea:c7:76:23:26:96:71:05:cc:
3e:4e:a0:07:d3:1c:d3:84:fa:c0:95:23:0c:4e:a6:
15:c3:64:3c:7e:88:64:a5:76:9f:c1:a1:e1:29:70:
e5:ec:ba:10:ca:ce:53:b1:4d:66:88:36:c4:58:1c:
94:55:63:18:a4:c6:ad:33:2e:f7:19:46:d7:b1:0f:
1a:4b:3d:1d:bf:2e:ea:3f:59:da:a5:ec:19:90:87:
30:9d:aa:63:16:f3:b4:96:4d:08:40:12:be:bc:ba:
5f:c1:25:03:a4:76:51:4a:56:73:48:c9:35:e1:08:
91:c4:30:95:b3:b6:aa:4d:6f:cb:b4:21:1f:ab:09:
d0:a1:fe:b5:b0:b1:35:2a:1c:40:23:cc:2e:5a:fc:
f3:1d:1e:7d:83:7c:ca:99:c0:a2:93:f8:ab:49:62:
c2:ba:ff:87:a8:f4:2f:8e:7f:11:5d:5c:3f:f8:5d:
00:11:a9:68:75:52:83:97:df:47:f6:3b:5a:fd:9d:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B9:83:C0:13:BA:A1:1D:41:81:27:FB:39:42:C7:9B:56:C9:C7:10
X509v3 Authority Key Identifier:
keyid:8A:41:F3:7B:34:68:81:5E:EE:A2:DD:E7:A8:3A:8B:A4:FC:BA:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikHzezRogV7uot3nqDqLpPy6OCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f4c1fe-fd43-4281-a03a-b10e68987d9f/1/PrmDwBO6oR1BgSf7OULHm1bJxxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f4c1fe-fd43-4281-a03a-b10e68987d9f/1/ikHzezRogV7uot3nqDqLpPy6OCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.12.32.0-62.12.55.255
80.88.128.0/20
Signature Algorithm: sha256WithRSAEncryption
18:6f:37:aa:62:22:9d:74:99:35:7e:25:8d:02:45:3b:80:1b:
e2:59:40:49:15:c2:3c:e4:34:3a:88:0d:4f:f6:75:fa:e9:4f:
85:0e:f6:4c:5e:98:14:fa:05:9f:ce:95:b5:3b:ea:79:07:ad:
78:71:b7:23:9c:12:ec:68:2b:ef:a4:f0:01:4d:89:d3:06:3a:
64:ca:68:1d:2b:13:61:b1:0e:99:bf:b3:45:5a:71:df:88:16:
37:5f:b8:47:b5:49:72:c3:6f:38:18:3d:87:0b:9a:d4:29:88:
8d:08:ab:0d:d2:19:85:b1:66:bd:e1:cb:dc:5f:3a:98:f4:05:
79:02:8b:14:a9:ea:d8:b1:7a:e1:2b:88:c7:4f:e4:c1:d2:f9:
0e:b1:2c:3e:12:b1:92:da:97:6a:0f:df:1c:88:c5:d0:f5:72:
24:5f:a8:2b:59:8e:e3:88:7b:d5:87:2f:23:08:50:9f:ba:06:
bd:3f:5f:cf:56:0c:1b:f7:ad:5e:bc:d4:0d:e5:d1:c2:4e:ec:
0b:5d:60:e0:8b:d2:05:b2:65:9d:cd:26:e9:97:d0:db:fe:cb:
eb:82:33:97:10:2d:52:4d:b1:0b:91:d2:73:35:06:95:32:a8:
02:55:18:8c:a0:35:dc:7b:64:0e:d0:10:44:63:f8:cf:14:8d:
15:af:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:19 2024 by rpki-client on console-fra.rpki-client.org