Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/YgdKTEfCKurlMFjEyZrMpeIMlgc.roa
File: YgdKTEfCKurlMFjEyZrMpeIMlgc.roa (raw, json)
Hash identifier: 8YUSJ6ziW0SWGS1P8bWdHtLPJI5VMjKDD7S11h8QJ4w=
Subject key identifier: 62:07:4A:4C:47:C2:2A:EA:E5:30:58:C4:C9:9A:CC:A5:E2:0C:96:07
Certificate issuer: /CN=06bc095afce29f22e597a04a6789b7bc6e48d233
Certificate serial: 01856E2FA65A5EE6DEECD5B747736D00E5C9
Authority key identifier: 06:BC:09:5A:FC:E2:9F:22:E5:97:A0:4A:67:89:B7:BC:6E:48:D2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrwJWvzinyLll6BKZ4m3vG5I0jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/YgdKTEfCKurlMFjEyZrMpeIMlgc.roa
Signing time: Sun 01 Jan 2023 16:34:54 +0000
ROA not before: Sun 01 Jan 2023 16:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 62.192.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:a6:5a:5e:e6:de:ec:d5:b7:47:73:6d:00:e5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06bc095afce29f22e597a04a6789b7bc6e48d233
Validity
Not Before: Jan 1 16:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62074a4c47c22aeae53058c4c99acca5e20c9607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:a4:48:3d:a3:a7:6c:94:87:68:86:0b:b2:
dd:ce:ac:70:35:79:bc:7c:2b:30:c5:1e:c2:78:d5:
59:be:3e:ad:05:23:70:94:80:35:33:8e:d1:88:19:
63:ab:5e:ab:72:3b:8e:e0:84:fe:fb:55:3f:95:2a:
20:b7:63:f7:ca:ac:6b:22:b4:2a:29:a3:c7:dc:93:
4e:7c:ea:ee:d0:8d:04:cf:68:f6:9b:65:21:5f:5b:
19:f4:43:ea:bc:5f:1e:b4:97:75:d9:30:95:c2:84:
76:77:e8:e9:27:a2:58:43:5e:00:2b:ba:fd:d2:51:
63:bb:02:97:d6:10:02:10:82:0b:2a:77:9a:9a:14:
a4:07:ae:b1:81:4e:6e:98:37:3d:c1:b9:44:4b:b6:
2c:26:ab:1d:cb:3e:e7:52:4f:25:65:aa:e4:b0:5b:
cb:27:fb:27:05:73:1c:6e:74:d8:c6:bd:5c:95:53:
6c:6d:bf:60:95:c3:a1:af:1b:f0:ba:9c:ce:b4:f3:
af:44:46:d5:4b:d7:50:37:34:96:fe:65:47:27:b7:
0e:4b:f3:64:16:5a:be:3e:a6:71:a2:37:0e:09:9f:
f5:29:a3:0f:e9:d4:56:02:0b:bc:d9:87:c1:e3:09:
86:d6:f6:a1:b5:8b:85:a2:e2:c7:5a:9c:b4:8f:4e:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:07:4A:4C:47:C2:2A:EA:E5:30:58:C4:C9:9A:CC:A5:E2:0C:96:07
X509v3 Authority Key Identifier:
keyid:06:BC:09:5A:FC:E2:9F:22:E5:97:A0:4A:67:89:B7:BC:6E:48:D2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrwJWvzinyLll6BKZ4m3vG5I0jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/YgdKTEfCKurlMFjEyZrMpeIMlgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8acf10-eea1-4949-954e-6fb6ca00e7db/1/BrwJWvzinyLll6BKZ4m3vG5I0jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.153.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ff:c1:d6:a7:20:93:de:75:e8:10:82:25:29:40:f9:c3:6c:
3a:eb:d6:38:d1:58:45:86:8d:65:ac:eb:c7:a2:39:68:99:60:
5d:47:42:21:cf:2a:4a:b2:f5:b7:77:0f:18:09:71:4b:ff:f0:
87:45:80:fc:81:48:7e:77:91:d0:8d:9f:fd:32:88:90:40:29:
0a:e4:68:30:58:c5:3a:8b:a7:9b:ae:d7:2e:7f:d8:71:f3:b5:
c4:95:a1:39:ac:5b:81:ec:f3:2a:0d:fc:fd:e4:5c:b7:ab:35:
7f:5e:47:20:f6:bc:8e:6c:0f:d5:47:20:1a:a7:c8:a1:b5:63:
4c:e1:bc:4a:12:ee:a4:47:64:05:1f:c5:1c:9f:0c:bd:7f:20:
ba:d7:94:20:86:2d:c3:2d:27:f1:0c:09:04:d9:b5:3c:d7:ce:
5f:a2:5f:6c:a4:0d:24:a3:78:39:98:d2:fb:a6:c5:71:e1:57:
db:07:ba:fa:d6:d4:ef:8b:83:d1:d4:ba:58:69:7b:c7:6c:ef:
9e:7e:11:cd:ba:99:7c:e1:ee:dc:7b:06:a5:51:6c:f5:72:ca:
bd:2b:f1:54:58:f9:41:a3:14:81:f6:d5:4a:24:d9:6a:b1:c9:
5a:a0:95:10:b1:7f:f8:86:11:f8:9f:e9:89:41:44:2a:48:dd:
46:01:5a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org