Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/YKHUUeV2grNh7yFwzksrfixF6TU.roa
File: YKHUUeV2grNh7yFwzksrfixF6TU.roa (raw, json)
Hash identifier: gujnCP8MEt3hdw1QENJOl0im5sOrdtxem5m6IrxbVwo=
Subject key identifier: 60:A1:D4:51:E5:76:82:B3:61:EF:21:70:CE:4B:2B:7E:2C:45:E9:35
Certificate issuer: /CN=59a377bc67718312649ee75715a865f603fc69c3
Certificate serial: 01856E38D7849D6A66017BBA4C6B951C292B
Authority key identifier: 59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WaN3vGdxgxJknudXFahl9gP8acM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/YKHUUeV2grNh7yFwzksrfixF6TU.roa
Signing time: Sun 01 Jan 2023 16:44:56 +0000
ROA not before: Sun 01 Jan 2023 16:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42423
IP address blocks: 62.68.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d7:84:9d:6a:66:01:7b:ba:4c:6b:95:1c:29:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a377bc67718312649ee75715a865f603fc69c3
Validity
Not Before: Jan 1 16:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60a1d451e57682b361ef2170ce4b2b7e2c45e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:7c:ab:d4:33:6b:b6:6e:c3:33:30:4a:4a:
37:7b:25:8f:5f:c7:ad:28:31:47:b2:30:95:49:da:
e5:c9:49:20:8b:47:a1:e8:74:a5:bd:29:37:b3:fd:
e3:b9:aa:f6:ae:fb:05:9f:d8:ad:58:42:8a:b8:26:
23:1b:10:36:4b:2d:75:2a:b9:df:74:94:ad:8f:39:
68:a8:d9:95:f6:8c:f8:d0:fa:c0:83:dc:75:0f:af:
4a:02:71:b4:50:43:5c:0c:bf:22:0f:42:ed:07:eb:
27:47:73:e6:08:77:be:0e:9f:a2:95:c6:33:90:ae:
4a:ea:40:fc:d4:86:b3:03:86:f5:90:02:14:ca:03:
f3:95:fd:d2:e7:16:31:81:2e:c9:97:05:80:88:b2:
04:19:57:d1:06:e4:77:3a:72:a9:af:2d:d9:b1:bb:
5d:d4:d2:26:a0:64:74:f1:3d:e8:09:59:94:5f:5a:
9a:7c:a0:0a:bb:ae:8f:8b:f4:85:73:0c:89:33:d0:
b9:f7:0b:77:2e:ea:df:b7:08:f1:4a:10:7a:55:e7:
b4:a6:08:26:e1:3d:da:e8:ec:49:43:3d:01:b8:af:
a9:2b:89:82:ca:e7:e8:50:ff:75:b1:9d:cd:ad:86:
a2:ba:25:04:1b:39:00:2c:e0:41:f0:22:b8:54:d4:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A1:D4:51:E5:76:82:B3:61:EF:21:70:CE:4B:2B:7E:2C:45:E9:35
X509v3 Authority Key Identifier:
keyid:59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaN3vGdxgxJknudXFahl9gP8acM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/YKHUUeV2grNh7yFwzksrfixF6TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/WaN3vGdxgxJknudXFahl9gP8acM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.93.0/24
Signature Algorithm: sha256WithRSAEncryption
99:76:60:6e:78:33:43:4c:94:3b:0b:6a:12:56:a0:0c:7e:76:
52:11:e4:ba:02:ba:ae:2a:d5:05:79:80:56:89:13:31:49:4c:
49:d7:14:64:cd:4d:fe:7c:91:bd:67:88:50:85:93:ae:95:04:
f5:f1:ac:59:23:eb:17:34:7e:aa:62:2b:8c:ab:c1:d4:d4:33:
71:6c:1c:7a:21:04:f1:ed:ca:52:c3:b2:5a:c7:ed:7b:e0:19:
6d:38:ef:e6:60:b6:0e:14:7a:1e:b2:46:a7:22:18:1d:af:e0:
8f:b5:b2:76:64:28:1a:bd:c4:58:a5:0a:f1:12:05:48:da:21:
4d:87:00:60:0c:c9:c9:cf:3e:62:50:88:31:75:eb:fc:bc:9b:
d3:a0:7f:33:68:7e:ff:49:84:74:e9:f3:4b:d2:93:7a:d4:10:
d3:d5:64:22:29:3c:b0:d8:7e:f2:95:df:be:be:4f:5f:f3:9e:
8e:80:b0:fe:0a:5a:8e:6b:be:54:8a:85:c2:f7:d3:c2:b2:4d:
16:6a:94:b7:43:5b:0a:2d:39:0b:54:6b:06:e2:9d:1c:0a:b2:
6f:ae:75:09:0b:13:e5:f2:97:c4:b9:d1:0e:9a:b0:c4:b2:a3:
93:1f:78:05:f2:1f:21:de:45:76:c7:75:69:e4:f4:8b:a1:d4:
dd:4e:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:08 2025 by rpki-client