Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/WiehEgXVlCvcpaEbhEMRM0VElv4.roa
File: WiehEgXVlCvcpaEbhEMRM0VElv4.roa (raw, json)
Hash identifier: GXkcRM86Sip/AzW6LVcbOIPwxUHcz46LC/fO+lNyb8w=
Subject key identifier: 5A:27:A1:12:05:D5:94:2B:DC:A5:A1:1B:84:43:11:33:45:44:96:FE
Certificate issuer: /CN=b17d969208e19f2fcb9d0ce0be8f72995081d6b7
Certificate serial: E9209E
Authority key identifier: B1:7D:96:92:08:E1:9F:2F:CB:9D:0C:E0:BE:8F:72:99:50:81:D6:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX2Wkgjhny_LnQzgvo9ymVCB1rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/WiehEgXVlCvcpaEbhEMRM0VElv4.roa
Signing time: Mon 24 Jan 2022 15:38:22 +0000
ROA not before: Mon 24 Jan 2022 15:38:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50041
IP address blocks: 62.204.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15278238 (0xe9209e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17d969208e19f2fcb9d0ce0be8f72995081d6b7
Validity
Not Before: Jan 24 15:38:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a27a11205d5942bdca5a11b84431133454496fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:80:61:d1:76:8a:88:72:75:70:b9:d0:40:
c4:69:97:98:41:c4:33:a0:50:90:8e:5e:2d:42:72:
fa:f8:df:3e:5a:42:9d:2b:0b:bc:2a:90:a9:82:3c:
f1:bc:65:76:c6:8a:1c:2d:fd:25:04:b4:bc:d2:f3:
df:97:88:43:04:c4:f5:33:bc:2c:25:b8:3a:48:87:
4b:8e:4b:1f:ef:10:3f:5b:8d:7d:26:3b:fb:dd:78:
8e:a0:15:44:ce:0f:89:f9:26:09:1a:eb:56:6a:8e:
56:ac:73:23:9d:c5:ce:7e:a9:8e:25:89:1c:8d:5f:
ef:82:fd:ed:9a:7c:d2:0e:f9:0c:72:37:dc:76:b7:
1b:91:89:e9:c5:57:0d:2c:9d:5e:b5:38:88:f6:ab:
29:0d:cb:79:43:41:c5:92:e8:7d:fb:1f:df:4d:8b:
d2:57:39:79:8b:8c:6a:ff:69:02:c3:96:fc:1b:2b:
28:e7:25:d7:08:4d:69:12:40:fc:82:41:a9:08:5d:
e3:da:b0:47:48:3c:bf:cf:c9:83:c6:69:27:a2:77:
fa:b0:1f:d0:1a:f1:0f:4e:32:10:d0:6b:fd:28:7e:
fa:85:ef:a2:cb:e5:46:25:01:90:96:2c:62:7c:9b:
21:c0:6e:72:02:cf:2b:11:ea:35:35:ce:8e:26:b4:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:27:A1:12:05:D5:94:2B:DC:A5:A1:1B:84:43:11:33:45:44:96:FE
X509v3 Authority Key Identifier:
keyid:B1:7D:96:92:08:E1:9F:2F:CB:9D:0C:E0:BE:8F:72:99:50:81:D6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX2Wkgjhny_LnQzgvo9ymVCB1rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/WiehEgXVlCvcpaEbhEMRM0VElv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/sX2Wkgjhny_LnQzgvo9ymVCB1rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.61.0/24
Signature Algorithm: sha256WithRSAEncryption
26:56:19:1f:c2:1c:36:e9:df:68:24:62:45:3c:5d:62:5b:76:
84:bb:a4:ca:e3:60:71:fc:73:3a:ca:54:55:3b:78:f9:11:66:
7c:38:c6:12:9f:ac:d0:53:a5:91:91:d2:a6:19:24:9a:31:57:
6f:67:b4:87:78:0f:77:c6:e2:2f:f2:65:8c:75:4a:54:08:06:
9e:4c:fa:26:67:dd:5a:15:f3:63:94:ce:42:29:06:87:a7:d4:
ec:0a:49:4f:a5:99:93:5e:d2:f1:0d:4f:65:9d:9e:f1:81:c5:
39:38:5c:69:c5:77:ab:e6:2e:dd:8d:96:07:d5:21:61:30:47:
4e:ed:1b:87:7d:c6:af:40:b5:70:4c:e9:4e:3b:8b:e1:f7:11:
8c:f7:92:1c:8f:49:87:b6:9f:f0:0b:b5:2f:fc:f9:c1:d9:61:
32:58:e6:a9:a4:61:68:13:73:0a:9c:e8:a3:cb:74:80:96:ce:
e7:38:90:d8:34:41:a9:46:16:08:1f:6c:f2:ca:12:63:1c:d1:
d8:d1:8b:5e:5f:35:e1:a8:fd:d2:47:11:14:57:24:32:36:3e:
85:4b:cf:28:1a:ec:fc:58:7a:fd:18:2d:1f:47:2f:bd:a3:66:
af:14:36:ad:1a:3f:14:a5:62:fb:76:43:7a:22:fb:ff:d0:9e:
55:61:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:36 2025 by rpki-client