Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/ukVqYJ-srDRAgo9XYFQTFf6wRaw.roa
File: ukVqYJ-srDRAgo9XYFQTFf6wRaw.roa (raw, json)
Hash identifier: rx4PbyF+gxsnmee3DnqAf4ul0QrLcUXJO4dKQyN/StI=
Subject key identifier: BA:45:6A:60:9F:AC:AC:34:40:82:8F:57:60:54:13:15:FE:B0:45:AC
Certificate issuer: /CN=baecf4d5ed68aa6926357e49747ec70141131b1a
Certificate serial: 01889F53D723B9E23AE520EEB9B19CCD7B6D
Authority key identifier: BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuz01e1oqmkmNX5JdH7HAUETGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/ukVqYJ-srDRAgo9XYFQTFf6wRaw.roa
Signing time: Fri 09 Jun 2023 08:44:11 +0000
ROA not before: Fri 09 Jun 2023 08:44:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50167
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:53:d7:23:b9:e2:3a:e5:20:ee:b9:b1:9c:cd:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baecf4d5ed68aa6926357e49747ec70141131b1a
Validity
Not Before: Jun 9 08:44:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba456a609facac3440828f5760541315feb045ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:b6:43:02:6f:49:12:49:90:28:cd:31:18:
5a:6c:57:8b:ba:47:5b:1a:b3:6f:9f:c3:47:ed:cd:
3f:2d:00:2b:1c:1a:33:de:af:11:77:e7:ad:75:3e:
16:10:4c:0d:f8:9c:bd:ff:b5:df:d9:18:4b:af:9a:
59:58:8a:4c:a1:bb:fe:5b:01:87:61:7c:b8:b0:1e:
ec:03:4d:e4:e8:28:9f:c1:a0:a3:31:95:e4:8c:16:
52:f5:f4:1c:64:08:57:b0:1b:10:82:1a:25:2f:83:
8a:78:57:a1:80:94:8a:18:a6:e5:80:b8:50:e3:28:
25:ec:97:7d:a1:dd:32:1a:24:67:2f:24:e2:a0:d4:
5e:75:01:42:64:64:a3:a8:6e:e3:2d:f4:15:d0:4d:
61:73:ea:1a:94:fa:43:07:ca:b1:12:7b:fc:05:b7:
7f:5b:f0:65:e8:d5:fe:c4:48:39:4c:bc:57:2c:a8:
b3:6e:b0:7f:96:53:c5:f1:41:b8:02:be:28:e1:a7:
fc:b9:24:0d:e9:e0:2b:e8:b5:dd:87:f9:da:15:4c:
dd:c2:a6:f8:d1:68:ab:a4:a6:44:f1:c7:7b:50:f0:
7a:ee:46:5d:86:90:de:4e:2a:04:d6:b1:76:1a:10:
b2:73:e0:fe:dd:fc:b2:71:7b:20:21:89:b0:7f:b5:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:45:6A:60:9F:AC:AC:34:40:82:8F:57:60:54:13:15:FE:B0:45:AC
X509v3 Authority Key Identifier:
keyid:BA:EC:F4:D5:ED:68:AA:69:26:35:7E:49:74:7E:C7:01:41:13:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuz01e1oqmkmNX5JdH7HAUETGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/ukVqYJ-srDRAgo9XYFQTFf6wRaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/38198a-bdd8-496e-b802-296b6175849c/1/uuz01e1oqmkmNX5JdH7HAUETGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b5:9a:06:1c:a5:fd:f1:55:2c:92:45:47:2d:b0:3e:42:bd:
b5:93:1d:56:4e:42:0a:24:40:61:f2:b5:d1:39:04:0d:fa:90:
83:38:68:c8:f8:eb:43:bb:9d:98:b0:82:95:8a:60:4d:c4:cc:
33:eb:32:49:3b:02:46:43:67:a2:05:a9:d5:f4:39:65:75:7d:
72:ad:71:54:63:c7:71:3e:42:c6:6b:99:9b:3d:4b:c6:0a:47:
10:7e:22:05:75:ea:52:86:07:90:d7:79:b3:5c:48:ff:fa:65:
b4:20:51:23:0f:57:ae:eb:bd:7b:e5:95:87:eb:b8:68:71:42:
99:a1:79:7e:be:5d:f5:37:f9:2e:f7:c0:ff:4b:ed:a9:74:dd:
62:17:39:e7:7f:c1:8a:95:f8:d3:7d:31:10:c0:bf:af:f7:4e:
4e:29:9b:7f:35:73:c2:02:01:be:f7:aa:d8:dc:db:d8:05:61:
a1:4b:8e:28:ed:0b:7f:b3:fc:f3:57:89:23:6a:2a:91:f9:d2:
53:ea:d7:7e:94:2d:9e:06:6c:46:b0:c2:e3:9c:e2:6f:8c:31:
ea:7e:b3:14:97:6c:bd:1b:31:ea:a8:e9:b8:35:47:4b:28:b4:
f3:1f:ab:27:ce:9b:71:f4:71:1a:de:91:e2:2f:ce:bb:6f:fc:
75:04:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-fra.rpki-client.org