Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/s0FlVk9lEe-SZManXsXljddXlXg.roa
File: s0FlVk9lEe-SZManXsXljddXlXg.roa (raw, json)
Hash identifier: 0gfuNmKAooZH8EMJkH0rGZ/NjxbYaUY0XFSt9a1xVT0=
Subject key identifier: B3:41:65:56:4F:65:11:EF:92:64:C6:A7:5E:C5:E5:8D:D7:57:95:78
Certificate issuer: /CN=59a377bc67718312649ee75715a865f603fc69c3
Certificate serial: 01887B893E1166CB34ADA72407857563EA43
Authority key identifier: 59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WaN3vGdxgxJknudXFahl9gP8acM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/s0FlVk9lEe-SZManXsXljddXlXg.roa
Signing time: Fri 02 Jun 2023 09:56:11 +0000
ROA not before: Fri 02 Jun 2023 09:56:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 62.68.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:89:3e:11:66:cb:34:ad:a7:24:07:85:75:63:ea:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a377bc67718312649ee75715a865f603fc69c3
Validity
Not Before: Jun 2 09:56:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b34165564f6511ef9264c6a75ec5e58dd7579578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:b2:09:6a:f2:32:cc:6e:38:df:8b:23:ae:
77:d8:94:a5:5a:c9:67:b8:76:38:62:3e:4e:fe:c2:
78:45:f6:d5:f6:13:39:f0:bc:38:23:d1:37:e0:94:
8f:14:59:bc:26:8f:0e:41:5e:51:6f:27:6b:7d:5b:
a3:2d:ce:8f:99:4d:21:ff:de:18:27:58:c5:cc:33:
69:4a:5e:c1:65:fb:7f:a2:8e:64:a1:0e:f9:e2:f7:
ce:5b:2a:36:b3:e9:06:bf:32:13:8e:d9:b9:16:34:
98:f8:74:62:36:ec:c1:8c:39:25:19:66:06:97:66:
ed:0f:fd:fa:9b:e0:37:2e:dd:b1:23:5d:8c:ec:d9:
da:13:78:fa:91:60:cd:3a:1d:12:46:71:97:66:6a:
03:fa:9b:52:0a:b4:1c:de:a1:d0:dc:3a:3c:ac:df:
f9:f9:b9:eb:25:e0:7b:ee:36:72:80:fb:34:1e:cf:
eb:0a:5b:ce:09:59:12:37:cb:3d:87:2e:ed:8d:4e:
34:7e:0d:24:02:73:51:ec:33:fe:be:e7:47:b5:6c:
1d:8e:da:26:9b:e9:07:ea:f4:31:07:57:a4:69:f7:
99:f6:5a:70:d4:d4:62:6c:ee:0b:8c:43:b1:dd:6d:
cf:d6:e1:c1:d9:ff:3a:ef:96:9d:c7:1b:d4:79:6d:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:65:56:4F:65:11:EF:92:64:C6:A7:5E:C5:E5:8D:D7:57:95:78
X509v3 Authority Key Identifier:
keyid:59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaN3vGdxgxJknudXFahl9gP8acM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/s0FlVk9lEe-SZManXsXljddXlXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/WaN3vGdxgxJknudXFahl9gP8acM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.93.0/24
Signature Algorithm: sha256WithRSAEncryption
46:91:2a:37:80:e1:ed:6c:0d:ad:07:d4:4d:3f:a0:33:7b:e8:
7e:14:b9:23:ad:26:8e:c6:99:76:6a:c8:8b:ee:f9:cb:71:30:
4b:01:c4:f0:21:a0:1e:ba:a7:c6:ec:67:8b:a7:c3:55:88:d0:
f0:6e:fc:9a:fe:e3:9d:f1:14:0a:6d:90:e1:ef:d9:94:89:56:
bd:33:7a:71:4f:e8:75:b2:39:1a:f4:e9:ce:e6:3a:c2:6a:bd:
03:2b:8e:cc:e9:9d:db:1b:b8:f9:ae:b8:b9:22:3d:04:49:da:
f3:b2:75:42:a5:34:9a:0a:6b:e6:95:75:42:02:41:7b:ba:9b:
84:b6:aa:b9:dd:70:2e:a1:dd:da:ae:cb:4f:2d:f0:50:f4:74:
47:75:c9:d0:d4:19:a9:fb:ea:3c:d4:84:2c:ae:81:d4:00:52:
4e:82:99:19:c7:c2:f4:47:51:92:3e:dc:ca:5c:b0:b2:c1:cf:
7e:75:1b:01:60:c3:ac:a6:56:ed:08:3a:9e:76:26:ac:b3:dc:
6b:eb:0a:c4:df:96:20:7f:0a:21:96:6f:63:ff:50:f4:a4:fc:
ed:c8:2a:4d:e4:c1:15:ae:0b:2d:8e:47:31:5c:d0:8c:b2:71:
77:48:65:75:d8:00:98:4a:bd:82:b2:dc:49:42:e6:31:68:a5:
4e:53:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:36 2024 by rpki-client on console-fra.rpki-client.org