Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/LXYrkCe_2WeEzV478z7-bzTmIRg.roa
File: LXYrkCe_2WeEzV478z7-bzTmIRg.roa (raw, json)
Hash identifier: 8LXIdkAFIcozDnCsB2wAji6kBvVSN5aeNDVOAOOaOsc=
Subject key identifier: 2D:76:2B:90:27:BF:D9:67:84:CD:5E:3B:F3:3E:FE:6F:34:E6:21:18
Certificate issuer: /CN=06bc095afce29f22e597a04a6789b7bc6e48d233
Certificate serial: 04489519
Authority key identifier: 06:BC:09:5A:FC:E2:9F:22:E5:97:A0:4A:67:89:B7:BC:6E:48:D2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrwJWvzinyLll6BKZ4m3vG5I0jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/LXYrkCe_2WeEzV478z7-bzTmIRg.roa
Signing time: Sat 01 Jan 2022 07:01:38 +0000
ROA not before: Sat 01 Jan 2022 07:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60548
IP address blocks: 62.192.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71865625 (0x4489519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06bc095afce29f22e597a04a6789b7bc6e48d233
Validity
Not Before: Jan 1 07:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d762b9027bfd96784cd5e3bf33efe6f34e62118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:22:16:61:a2:6e:ed:ce:d1:70:7c:a9:44:
92:25:66:ff:46:54:4c:f2:14:2a:3d:a9:62:3e:55:
de:0e:32:ba:7c:27:75:f8:a2:3d:e0:98:0f:49:df:
af:ad:ed:69:7e:a0:92:4a:f9:22:14:7a:91:db:fa:
b3:b8:b2:6c:ae:2b:1a:af:a6:82:e3:b7:96:81:5b:
31:61:24:d1:b3:99:3a:cc:03:d8:da:90:cb:c3:8f:
10:16:34:d1:e1:ce:c0:db:e4:04:3c:6a:ba:98:7b:
2b:36:70:37:ab:fa:3d:16:2f:c3:8e:39:ac:d4:a7:
ca:6a:d3:23:45:23:a1:c4:09:fe:03:32:3a:c9:66:
77:75:41:ee:2b:9a:73:79:ba:84:60:16:59:fc:5a:
fa:a4:00:74:a6:d5:62:bd:a0:d9:58:c8:51:4f:c5:
7e:e3:dc:3d:8c:ce:ef:36:81:04:f3:ad:3d:b2:42:
65:f1:af:4e:89:fb:9f:ef:2b:59:a7:ec:54:00:90:
90:bf:be:36:a5:28:9f:e6:d7:91:88:9f:a3:c9:07:
58:b2:e8:39:fc:f2:dc:f0:0b:35:77:ab:c0:33:44:
ab:9f:37:b4:79:7f:b0:fd:fb:63:90:3e:14:8f:9d:
3e:5b:d9:e1:46:51:35:1d:c6:6f:ea:fe:2d:5e:d0:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:2B:90:27:BF:D9:67:84:CD:5E:3B:F3:3E:FE:6F:34:E6:21:18
X509v3 Authority Key Identifier:
keyid:06:BC:09:5A:FC:E2:9F:22:E5:97:A0:4A:67:89:B7:BC:6E:48:D2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrwJWvzinyLll6BKZ4m3vG5I0jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/LXYrkCe_2WeEzV478z7-bzTmIRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/BrwJWvzinyLll6BKZ4m3vG5I0jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:84:81:bb:7b:a4:12:b2:bf:38:d6:49:bc:d7:19:7d:5b:df:
94:c8:8d:e9:b7:3a:d7:63:c1:a7:98:1b:89:0c:46:ef:a4:a8:
52:d8:fe:dd:25:20:7c:35:30:d5:b1:94:17:dd:91:9f:bb:85:
b8:be:a3:0d:65:ea:ce:8c:11:69:1e:ab:e3:ed:81:36:e7:f1:
a7:37:c2:21:dd:bd:63:95:cd:c8:9c:51:c0:39:f0:d6:22:05:
fa:c2:5e:33:b6:88:5b:c6:30:da:fe:8c:42:fb:53:9a:bd:29:
b6:6c:4b:11:79:8c:ae:7d:d5:06:7c:0f:86:a8:21:83:00:e3:
a9:6e:ed:79:95:1b:6b:3e:43:6a:c3:c7:57:f9:af:8d:46:65:
e5:80:f4:f5:a0:ff:8d:13:0c:7e:69:88:11:6b:48:c6:5b:84:
5c:d5:8a:e8:f4:94:35:84:44:0d:c0:78:b6:f9:d2:f0:68:2f:
9b:33:55:bd:11:66:9d:77:e7:52:02:bc:46:74:55:58:11:58:
5a:0e:2c:be:ce:9f:8b:45:9b:71:ed:5c:4e:06:ef:64:e1:1f:
c5:9c:29:22:00:c0:5a:bd:83:f6:7b:8c:c6:30:77:2d:de:5f:
87:7f:6e:4b:c3:0a:99:0f:e0:9a:64:a8:53:95:e7:bd:d3:c5:
3a:c6:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org