Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/zLa76ypp2PGxAJ-t-U5uRy0zsgQ.roa
File: zLa76ypp2PGxAJ-t-U5uRy0zsgQ.roa (raw, json)
Hash identifier: MRVR9B3nOJ+XzpNkFZdjb3XUBZrtz9lrhtANBBFiYdk=
Subject key identifier: CC:B6:BB:EB:2A:69:D8:F1:B1:00:9F:AD:F9:4E:6E:47:2D:33:B2:04
Certificate issuer: /CN=56b001a946e67129d794235b515b20d9ea908a87
Certificate serial: B89C88
Authority key identifier: 56:B0:01:A9:46:E6:71:29:D7:94:23:5B:51:5B:20:D9:EA:90:8A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrABqUbmcSnXlCNbUVsg2eqQioc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/zLa76ypp2PGxAJ-t-U5uRy0zsgQ.roa
Signing time: Sat 01 Jan 2022 06:57:30 +0000
ROA not before: Sat 01 Jan 2022 06:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 62.233.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12098696 (0xb89c88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b001a946e67129d794235b515b20d9ea908a87
Validity
Not Before: Jan 1 06:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccb6bbeb2a69d8f1b1009fadf94e6e472d33b204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:55:f4:bb:c5:63:bd:20:da:de:90:04:92:
86:2a:ac:b1:ac:41:0e:63:06:ad:43:09:75:fa:81:
10:8c:1f:a7:3c:3a:3e:0b:cb:5d:0d:1a:cf:c4:72:
3c:26:34:d5:97:59:ab:40:c2:e2:6c:2a:85:e2:1e:
ce:94:5d:0f:65:bb:4c:dd:d2:64:f3:2a:7d:4a:8a:
db:72:5d:88:76:0e:b9:b2:97:92:fd:fc:a3:81:fa:
8f:c1:8c:b0:87:df:22:f1:a2:27:f1:f4:bf:75:33:
9c:00:cf:76:b6:1b:a0:02:5e:60:cf:d4:4c:e5:71:
d6:f7:30:b7:40:09:f5:c4:ea:2c:19:31:2a:a5:ff:
e0:bd:22:ad:39:22:87:d7:8f:d9:09:6d:0c:8d:47:
75:db:7a:da:c8:75:dd:11:0f:d0:9a:ae:58:3d:0a:
31:64:47:20:3b:d0:68:76:f4:f9:94:6f:87:d3:f7:
d8:35:0a:37:3f:f0:32:7d:4b:e6:23:4e:97:72:29:
e4:f5:bd:73:41:bf:f0:02:79:80:10:3a:0c:80:ee:
a7:4a:2f:e4:41:4b:7a:60:c6:96:cb:a4:d9:68:cd:
66:98:cf:58:c6:f2:ab:9c:be:8c:7a:e4:26:66:f5:
01:cb:74:c5:25:e2:16:46:f3:b0:6c:77:b2:21:b9:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:BB:EB:2A:69:D8:F1:B1:00:9F:AD:F9:4E:6E:47:2D:33:B2:04
X509v3 Authority Key Identifier:
keyid:56:B0:01:A9:46:E6:71:29:D7:94:23:5B:51:5B:20:D9:EA:90:8A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrABqUbmcSnXlCNbUVsg2eqQioc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/zLa76ypp2PGxAJ-t-U5uRy0zsgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/VrABqUbmcSnXlCNbUVsg2eqQioc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.35.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a4:7a:85:a8:44:d8:6d:04:02:ca:37:9a:fb:25:bb:6a:41:
ea:df:7f:3d:75:3d:32:a4:34:a3:3a:7f:26:27:f6:79:89:21:
bf:2f:7e:fc:dd:b1:e6:c2:ce:d3:1c:32:d5:61:fb:f7:cf:7f:
3f:94:9b:01:68:9e:a5:5a:22:ce:36:df:ae:d7:1f:3d:00:ad:
83:17:31:91:67:1a:2e:9a:11:91:17:0d:3d:de:d0:ff:84:38:
90:9e:f2:88:3c:db:38:91:97:09:78:75:2e:5a:18:e1:53:2e:
8b:2e:f9:8b:86:c7:fe:c9:ca:f2:3d:22:5a:83:e1:f3:31:f1:
2b:ac:37:bd:a4:0c:ec:dd:74:19:f1:25:59:15:17:89:76:78:
e2:7b:74:bb:d5:f4:b2:33:e5:2d:a0:81:87:a7:10:aa:66:79:
d0:62:be:d5:0b:32:80:74:e7:07:c6:fe:62:95:fc:4c:7c:55:
f2:e0:b5:1b:e1:8e:39:b4:51:e6:81:22:bb:f7:42:67:18:2a:
bb:8e:78:25:40:34:05:4b:0b:bc:27:de:77:71:12:39:28:bb:
13:52:b8:34:70:35:df:c4:7b:88:aa:56:e2:6a:7f:c3:86:60:
f1:f7:fc:d9:01:7a:1f:16:a3:34:55:e9:81:89:42:03:1b:bb:
0d:71:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:14 2024 by rpki-client on console-ams.rpki-client.org