Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/HA8-OMQBNAvSBdDLBiM0p55iRuQ.roa
File: HA8-OMQBNAvSBdDLBiM0p55iRuQ.roa (raw, json)
Hash identifier: SJePhl3rSLqI/oTbFEGkzqBXoKRCxR5skyQ7WzY5Euk=
Subject key identifier: 1C:0F:3E:38:C4:01:34:0B:D2:05:D0:CB:06:23:34:A7:9E:62:46:E4
Certificate issuer: /CN=59a377bc67718312649ee75715a865f603fc69c3
Certificate serial: 01885D6BC8A098DE700DC187C725982EE743
Authority key identifier: 59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WaN3vGdxgxJknudXFahl9gP8acM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/HA8-OMQBNAvSBdDLBiM0p55iRuQ.roa
Signing time: Sat 27 May 2023 13:35:24 +0000
ROA not before: Sat 27 May 2023 13:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.68.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:6b:c8:a0:98:de:70:0d:c1:87:c7:25:98:2e:e7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a377bc67718312649ee75715a865f603fc69c3
Validity
Not Before: May 27 13:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c0f3e38c401340bd205d0cb062334a79e6246e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:4c:8f:69:53:9d:4b:9e:03:71:e2:28:d2:
0e:a9:2d:31:00:0f:a8:4b:f5:7f:ad:80:59:c8:54:
a4:48:dd:bf:25:45:bd:63:ef:d2:c8:49:f4:d3:1e:
25:f0:f7:36:76:9f:29:37:27:fd:cc:22:64:9a:e2:
e2:f8:a7:cd:b5:96:64:e1:0b:a9:e4:41:40:50:1e:
3d:d3:5c:c2:63:b4:a0:cf:06:5e:5b:19:06:4a:ad:
c9:96:21:83:a2:44:e5:df:1c:19:f6:10:f9:1c:20:
b5:9e:3d:4a:18:f3:cb:60:8b:65:b8:33:b3:ed:26:
ec:1a:4d:67:6e:0a:75:83:1f:59:7c:f0:5a:95:8c:
01:cc:65:0b:39:f7:80:26:91:27:4d:2b:8e:59:4a:
6f:28:e1:f6:1d:72:8c:de:ca:ca:2e:30:5e:32:8b:
77:40:2e:d2:f0:79:b0:75:1f:10:a5:57:e9:92:6d:
71:1a:48:d6:dd:23:bd:ec:19:6a:17:7d:ee:73:f3:
c4:18:15:58:c0:d2:33:fe:58:94:c6:6c:24:98:41:
9f:e9:c4:00:14:31:81:bc:6f:6e:11:63:37:de:a5:
b9:8a:79:00:e9:10:26:8c:0a:03:da:ea:d5:00:b0:
d2:78:f8:3b:8b:0c:f1:76:37:4f:77:f2:05:df:c0:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:3E:38:C4:01:34:0B:D2:05:D0:CB:06:23:34:A7:9E:62:46:E4
X509v3 Authority Key Identifier:
keyid:59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaN3vGdxgxJknudXFahl9gP8acM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/HA8-OMQBNAvSBdDLBiM0p55iRuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/WaN3vGdxgxJknudXFahl9gP8acM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.93.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7d:b8:b9:18:f6:6d:b9:6d:08:d4:05:d5:94:59:d5:12:17:
99:c2:22:dd:c9:45:f3:77:a1:0b:45:89:a1:f8:87:92:50:90:
b5:e9:03:4d:10:a7:09:7c:0c:65:ad:68:d3:a2:21:00:43:00:
6f:fa:a0:97:fc:31:89:be:c2:ea:d8:57:8e:90:a1:75:da:fb:
72:d1:4d:6f:9a:5c:ba:4d:bf:db:40:bf:b8:2c:6c:83:75:e9:
d6:51:b0:7b:63:a4:69:c5:79:b6:53:fb:d6:d5:0b:21:55:54:
2c:19:de:bf:28:46:34:20:f6:f7:d4:06:12:6f:fc:3a:87:5d:
f3:41:ca:ab:a7:95:99:93:c9:fa:c5:85:3c:87:4a:b9:2d:8b:
ba:4f:37:d0:5a:a4:99:7d:35:54:db:1c:1a:22:23:b8:25:e3:
9b:47:52:95:b5:eb:99:1d:9f:f2:d1:bd:04:e1:5b:c7:52:57:
2f:75:ea:7f:78:d4:e7:8a:42:c0:aa:be:e0:4e:ac:44:43:ae:
fa:a5:3f:d8:72:8c:97:7d:4d:49:b1:45:c5:26:54:fd:79:84:
14:6a:b5:20:df:12:97:a2:df:a4:e7:b1:6a:bb:d1:e9:e3:13:
77:69:11:b2:c9:ef:39:28:49:1d:9b:5d:72:25:ee:57:03:91:
4e:59:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:35 2024 by rpki-client on console-fra.rpki-client.org