Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/FGURDpJiSrx6dHiIUJpn5HcOv3Q.roa
File: FGURDpJiSrx6dHiIUJpn5HcOv3Q.roa (raw, json)
Hash identifier: xIqBw1oPRgbo3o2WF6VEMjQnGkMl1INtbfSVWtSbhqc=
Subject key identifier: 14:65:11:0E:92:62:4A:BC:7A:74:78:88:50:9A:67:E4:77:0E:BF:74
Certificate issuer: /CN=abc85b9a18400b845152ae2fbd28e859863e2f7e
Certificate serial: 018572D5C83A7327F154AA631402869353B5
Authority key identifier: AB:C8:5B:9A:18:40:0B:84:51:52:AE:2F:BD:28:E8:59:86:3E:2F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8hbmhhAC4RRUq4vvSjoWYY-L34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/FGURDpJiSrx6dHiIUJpn5HcOv3Q.roa
Signing time: Mon 02 Jan 2023 14:14:51 +0000
ROA not before: Mon 02 Jan 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:c8:3a:73:27:f1:54:aa:63:14:02:86:93:53:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc85b9a18400b845152ae2fbd28e859863e2f7e
Validity
Not Before: Jan 2 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1465110e92624abc7a747888509a67e4770ebf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:5b:f2:82:5c:21:16:44:cb:fd:a8:42:e9:
2a:47:27:5b:ed:55:29:16:86:0f:e4:3d:8a:b5:0b:
9e:98:d6:f2:e0:a3:f6:6f:a8:16:c2:4b:a8:a7:9b:
11:fd:04:af:3d:25:97:a2:dc:de:30:78:d6:b8:53:
0c:a2:bd:9e:5d:1a:64:9b:c3:f1:2e:e8:b8:2d:bd:
63:bc:b4:63:e9:75:88:8c:68:2b:eb:a8:66:0e:78:
4d:22:75:83:ce:16:91:60:ee:11:be:63:ac:62:5d:
b9:ed:4a:89:27:27:7a:48:6a:d4:ee:a9:e0:06:8e:
36:54:6e:d4:40:95:fe:48:2a:00:c2:d6:30:a4:6e:
52:ac:26:4c:46:b9:72:8e:04:15:e4:f3:6e:ba:f7:
d3:c8:8b:ee:08:d9:73:16:b0:a4:98:dd:ec:27:36:
35:c5:c8:38:c7:af:7b:69:ab:17:78:5f:f5:ba:a1:
4a:a5:fa:95:26:7f:17:3b:ed:5a:a6:79:ac:bf:f9:
25:f8:84:5e:a6:04:b1:03:4d:4d:a0:80:85:11:11:
fe:b9:81:36:f1:18:4c:0b:9c:2f:9d:02:1a:e9:40:
d6:87:70:fc:55:6e:18:1a:47:19:21:34:1d:93:81:
b9:18:9b:ce:8b:fe:c8:08:39:94:0d:20:d4:e8:4e:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:65:11:0E:92:62:4A:BC:7A:74:78:88:50:9A:67:E4:77:0E:BF:74
X509v3 Authority Key Identifier:
keyid:AB:C8:5B:9A:18:40:0B:84:51:52:AE:2F:BD:28:E8:59:86:3E:2F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8hbmhhAC4RRUq4vvSjoWYY-L34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/FGURDpJiSrx6dHiIUJpn5HcOv3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/q8hbmhhAC4RRUq4vvSjoWYY-L34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.89.0/24
Signature Algorithm: sha256WithRSAEncryption
69:62:0c:4e:05:c4:a1:b7:77:a1:50:11:de:f9:9b:d1:6c:45:
9d:cf:6e:bc:b4:21:4c:55:13:ce:70:b7:c4:d9:67:a9:c1:d5:
1c:69:d2:6f:a3:46:a2:43:b3:b1:63:9b:a1:3f:c0:54:29:62:
e3:82:ee:be:e3:03:21:d4:0f:96:aa:2e:8f:aa:f7:38:c1:fa:
d5:7c:f3:93:40:39:4f:55:db:74:df:a2:7a:95:ec:00:cc:fa:
c9:19:18:c1:32:3b:c3:aa:be:73:17:d8:f8:92:8d:60:0d:a1:
49:65:e7:9d:78:a9:b8:81:e9:f8:ba:eb:d6:ba:44:20:b7:08:
d1:0f:bf:75:5f:d3:25:bf:1c:66:c0:46:f7:ce:70:57:1a:db:
85:7e:35:9d:44:e7:81:e8:07:6d:6a:72:73:17:fa:4b:c5:1c:
ff:9f:4a:fc:78:bf:8c:f6:dc:e3:7b:42:96:bd:91:8c:61:d3:
62:cf:26:4d:28:69:8e:17:53:5d:17:85:a6:d7:26:16:d9:09:
4d:6c:56:5d:eb:1f:65:6f:21:d5:16:38:6b:37:b6:cc:44:f6:
d3:b2:ef:3f:ab:4f:19:a5:24:c3:ae:e3:4b:05:03:13:a6:df:
5d:2e:5b:07:98:a7:b2:93:4e:b5:25:44:72:64:5e:dc:a7:75:
8f:6a:db:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-fra.rpki-client.org