Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/4pk6WnyGZF0wRW91JMWYKXhil40.roa
File: 4pk6WnyGZF0wRW91JMWYKXhil40.roa (raw, json)
Hash identifier: RrCHA6B1WS41qc6i9dGeRaT1I0czcn/GxCOrCR27vwM=
Subject key identifier: E2:99:3A:5A:7C:86:64:5D:30:45:6F:75:24:C5:98:29:78:62:97:8D
Certificate issuer: /CN=baecf4d5ed68aa6926357e49747ec70141131b1a
Certificate serial: 01857315F90FB7CAAB130979DBDE3BFC08E4
Authority key identifier: BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuz01e1oqmkmNX5JdH7HAUETGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/4pk6WnyGZF0wRW91JMWYKXhil40.roa
Signing time: Mon 02 Jan 2023 15:24:57 +0000
ROA not before: Mon 02 Jan 2023 15:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f9:0f:b7:ca:ab:13:09:79:db:de:3b:fc:08:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baecf4d5ed68aa6926357e49747ec70141131b1a
Validity
Not Before: Jan 2 15:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2993a5a7c86645d30456f7524c598297862978d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:c3:9c:3b:65:61:1c:6b:d3:e3:6b:3a:b4:
e8:3f:8c:9d:32:c4:6d:26:d4:a5:cb:c6:96:7e:2a:
9a:a9:98:52:bf:32:fa:e3:d9:49:e8:c6:29:0d:c6:
c6:97:41:8d:22:96:d9:cb:f6:41:b6:0a:ec:e9:ec:
bd:22:3e:c2:9f:37:66:d9:ed:fd:e1:f7:02:fb:5b:
48:56:52:27:b8:7a:3b:5b:2d:ba:92:5f:52:60:4f:
c6:57:e0:d3:cd:c6:1d:cb:1f:19:03:57:dc:2f:e2:
d8:bd:29:eb:3c:d6:80:f7:9f:be:a2:d5:54:0b:e2:
5a:96:ea:8e:63:36:ed:91:72:59:33:a2:74:95:f7:
32:dc:ae:db:a3:f2:b7:2a:7c:b6:e0:33:4f:22:3f:
75:f2:b5:e2:a2:43:37:c3:29:68:d9:a6:a9:c6:d7:
c6:a7:99:d2:1d:77:14:79:28:b3:ee:7d:92:3f:c9:
a9:31:f3:4a:c3:61:50:37:63:fb:ac:7b:fe:5d:43:
d2:48:7e:da:76:0b:0d:3f:e5:f6:90:c2:92:0b:8f:
76:71:1c:f3:75:ea:44:d7:54:9b:20:0b:cd:cd:b4:
63:21:d9:9f:38:40:4a:ae:ce:84:32:0e:0e:79:12:
59:4c:66:ac:25:99:b1:0d:8b:de:84:1b:c3:92:ad:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:3A:5A:7C:86:64:5D:30:45:6F:75:24:C5:98:29:78:62:97:8D
X509v3 Authority Key Identifier:
keyid:BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuz01e1oqmkmNX5JdH7HAUETGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/4pk6WnyGZF0wRW91JMWYKXhil40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/uuz01e1oqmkmNX5JdH7HAUETGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:c4:70:76:c3:e1:07:a8:80:d6:39:14:64:3a:f1:fe:2a:3b:
e3:68:c0:ff:16:c7:5f:7f:df:07:69:73:b4:81:42:40:ad:d8:
0c:12:f3:fe:75:4f:40:dc:f2:e8:99:7f:21:a1:c0:fc:a4:59:
e3:44:79:cb:53:fd:94:04:d7:d9:5d:37:e0:e9:47:3e:bb:ff:
bc:cc:93:12:0a:eb:c9:ed:e3:72:a7:ab:13:03:1a:57:ff:a5:
3f:c8:74:65:fa:fa:a9:f0:aa:0a:d1:7b:f5:e2:3c:c3:96:20:
9e:e6:e0:60:c4:ff:50:b4:b3:14:79:5d:eb:d4:26:9b:25:3d:
c4:bf:2b:ec:7d:f2:35:48:b0:f5:dc:cb:9d:65:94:30:06:19:
f9:34:82:5b:32:4d:61:7c:b1:66:d6:43:f6:f2:05:0b:5c:9d:
d1:1a:f4:49:98:b0:69:f2:5c:18:bd:b9:d0:f0:b6:f9:43:03:
92:5a:6f:45:27:86:bd:eb:19:03:fd:9d:11:e9:5a:6e:a6:32:
a6:60:d0:76:91:d2:49:e2:a1:f4:9a:a9:eb:d4:fb:7c:4b:5b:
18:00:1f:b6:23:50:e5:ef:b3:3f:a1:3e:4e:79:02:ea:d8:5c:
9f:eb:f5:4e:0f:ca:ac:42:ab:c4:7e:7b:37:18:ee:8b:1e:94:
ef:30:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-fra.rpki-client.org