Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/DknSneIY0jLgJxbPih08NbEUpz0.roa
File: DknSneIY0jLgJxbPih08NbEUpz0.roa (raw, json)
Hash identifier: UTk/mA6A/Y9eBC8Z9VV2tP5pAlknxE+t8ZPcGd0pMW4=
Subject key identifier: 0E:49:D2:9D:E2:18:D2:32:E0:27:16:CF:8A:1D:3C:35:B1:14:A7:3D
Certificate issuer: /CN=baecf4d5ed68aa6926357e49747ec70141131b1a
Certificate serial: 01857315F8977FC0FA3EEC491880358AB92A
Authority key identifier: BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuz01e1oqmkmNX5JdH7HAUETGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/DknSneIY0jLgJxbPih08NbEUpz0.roa
Signing time: Mon 02 Jan 2023 15:24:57 +0000
ROA not before: Mon 02 Jan 2023 15:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f8:97:7f:c0:fa:3e:ec:49:18:80:35:8a:b9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baecf4d5ed68aa6926357e49747ec70141131b1a
Validity
Not Before: Jan 2 15:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e49d29de218d232e02716cf8a1d3c35b114a73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:f8:7c:b6:8a:23:36:bc:7b:4d:be:ab:a0:
fa:58:de:c7:4d:4e:09:c6:b4:c0:0f:00:6f:c8:71:
8c:60:0e:dc:60:f5:cc:5d:db:1d:8d:d8:9a:a0:21:
98:65:42:18:4e:97:6d:f6:8e:2c:43:69:56:c0:1f:
39:b4:04:7f:6c:2a:80:4d:c5:9a:a9:d8:a6:1d:4f:
aa:92:77:04:9c:12:cb:53:ca:91:55:93:92:e2:76:
d4:2f:3d:a7:7a:a9:47:e2:7b:6f:f0:11:ac:d1:54:
97:a3:ad:3a:12:2b:21:be:b7:8c:ca:eb:43:65:fe:
d4:ce:3d:54:e2:31:6a:92:73:bd:36:b9:c8:66:90:
05:24:bd:c3:6d:e4:f6:17:76:8d:83:a9:d9:b7:6d:
26:91:b2:6a:a1:7b:b0:b8:c4:13:6c:ba:7e:bf:c6:
78:07:a3:1f:1f:79:e7:25:bf:c6:60:f3:1d:be:9f:
ed:a4:e3:77:ff:73:50:f0:fa:9f:07:03:c0:f1:71:
82:3a:31:90:2b:96:68:c4:45:b3:92:58:76:56:53:
c8:9f:f0:2d:a4:8f:4a:46:4f:36:15:4a:c0:e9:1d:
5d:d8:3b:4b:34:b6:fa:46:34:3f:a6:04:1d:3a:82:
3a:f6:02:b8:61:d6:c5:f4:dc:16:29:d9:20:70:ba:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:49:D2:9D:E2:18:D2:32:E0:27:16:CF:8A:1D:3C:35:B1:14:A7:3D
X509v3 Authority Key Identifier:
keyid:BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuz01e1oqmkmNX5JdH7HAUETGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/DknSneIY0jLgJxbPih08NbEUpz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/uuz01e1oqmkmNX5JdH7HAUETGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
81:40:ce:b9:aa:5e:7d:f8:4c:0b:90:38:60:f3:e2:3b:46:f5:
e4:0c:d3:eb:66:ff:d6:d5:74:cc:e8:c3:fe:6f:c3:a3:94:87:
84:79:6a:96:c8:42:27:bb:c2:09:0a:e0:a9:59:94:12:0c:b3:
2a:d5:30:76:6a:1b:0d:1a:0b:14:1d:c3:22:78:4c:c4:a4:99:
cd:32:7b:00:70:43:ef:52:f5:f5:07:c1:b8:c5:0a:3c:4f:1e:
41:18:04:82:a9:b8:43:70:d0:7e:4d:66:1f:13:29:57:d4:91:
a4:9f:b3:41:fc:35:63:74:c8:87:7e:d9:ac:9a:f1:6e:a0:20:
d1:1e:b7:cc:4d:4f:84:21:51:04:37:5a:9b:09:1b:68:23:4b:
e1:c6:7b:bb:d9:59:79:e9:f1:f5:ee:fb:25:1c:4e:ed:fb:17:
98:e8:ee:77:58:0a:e6:e9:d6:f8:1c:1f:d5:fe:f0:c9:dc:77:
91:e0:38:ca:62:32:c1:55:81:40:29:8b:f4:e5:6b:52:3c:2c:
c6:21:88:86:ca:c2:59:a2:37:3a:9a:8d:f4:ae:80:c9:25:30:
2a:98:ec:0f:ee:a9:01:01:8d:85:56:ed:8a:45:91:77:51:eb:
08:2c:af:68:af:6c:40:45:c7:09:bf:b3:6a:ae:ce:02:05:51:
a1:b7:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-fra.rpki-client.org