Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/XGwwGGoGFCU2wXMjam1_OuB0SBM.roa
File: XGwwGGoGFCU2wXMjam1_OuB0SBM.roa (raw, json)
Hash identifier: qEpB/GXw3D0ok7lAkYiy3s7YgkzKhhOaFXAgECADCto=
Subject key identifier: 5C:6C:30:18:6A:06:14:25:36:C1:73:23:6A:6D:7F:3A:E0:74:48:13
Certificate issuer: /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial: 0188BD5F0EABA570C8CAB1CD61472A7231A8
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/XGwwGGoGFCU2wXMjam1_OuB0SBM.roa
Signing time: Thu 15 Jun 2023 04:45:03 +0000
ROA not before: Thu 15 Jun 2023 04:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:5f:0e:ab:a5:70:c8:ca:b1:cd:61:47:2a:72:31:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Validity
Not Before: Jun 15 04:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c6c30186a06142536c173236a6d7f3ae0744813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1b:56:15:e2:84:f5:ad:4f:37:c4:07:8e:bf:
56:a4:1a:6e:d1:25:aa:49:b7:8e:35:80:4e:35:e4:
93:af:22:88:7b:7f:fc:94:e5:2e:0d:eb:95:3a:d5:
d9:d7:bc:27:da:a9:e1:72:e8:4e:5b:49:0c:8c:19:
74:72:67:d6:66:af:67:d3:0f:ff:f9:a8:9a:9f:54:
ed:bc:84:20:7d:ac:59:cb:c5:89:04:ee:b7:c5:55:
a0:6a:a3:be:7c:0e:dd:c9:0e:95:6b:82:3a:b7:5c:
74:81:91:42:88:34:9c:0e:a6:f9:a3:89:fe:c4:74:
43:ec:e7:09:99:d4:08:74:63:d3:fe:5e:63:e2:2b:
16:7a:e7:08:1e:ce:de:e7:d1:be:33:ef:95:41:e8:
15:ba:eb:25:08:2e:ec:5b:cf:ba:4c:1a:c8:4e:b5:
a3:f5:b5:18:d4:7f:6f:dc:a5:a6:1a:97:c1:2f:36:
e6:a3:16:d3:c2:f7:bb:85:20:83:18:ab:7e:8d:e3:
7f:a6:bf:71:f5:15:ea:a0:dc:3e:5d:e8:75:b4:3c:
b1:5c:58:3d:bf:a0:87:96:0b:87:01:f4:a5:56:5d:
3f:2f:fd:da:65:ad:c8:ed:5c:2b:80:67:6a:85:1c:
ca:31:62:3f:47:89:4b:b8:da:69:bd:00:0f:e8:6f:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:30:18:6A:06:14:25:36:C1:73:23:6A:6D:7F:3A:E0:74:48:13
X509v3 Authority Key Identifier:
keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/XGwwGGoGFCU2wXMjam1_OuB0SBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:de:6e:89:ac:8f:8b:3a:02:8f:9d:90:8b:66:e2:12:c7:d7:
7f:78:22:43:13:76:19:d5:f6:71:14:fe:b7:ca:7d:26:66:e3:
f0:bf:da:1b:55:86:fe:1c:62:23:8b:75:06:91:00:65:aa:ac:
16:7c:8b:65:19:9f:bf:1b:28:9d:12:c6:a4:9b:24:f9:64:1e:
32:7f:4f:71:46:f0:4e:c3:5b:75:a2:95:38:6e:38:81:aa:66:
5f:0d:3e:21:3b:1b:d0:09:c4:d9:4e:fd:90:57:a7:c1:4f:a9:
58:97:de:d5:1c:ce:42:cd:03:d2:87:a8:72:01:9a:44:0e:9f:
d6:b2:c5:05:1f:d4:68:12:1d:de:98:a5:13:08:c4:2f:00:d4:
c0:85:3f:b0:00:a6:d0:e3:47:93:ad:85:bb:49:40:61:b0:95:
18:f7:07:3d:f4:47:cb:9d:40:15:d7:95:f4:dc:70:cc:06:a6:
41:7c:4a:7c:96:4a:a8:b1:f5:71:9a:5f:46:4d:ce:60:06:96:
09:fc:56:2a:b0:43:22:aa:44:61:0d:cf:aa:78:a9:04:38:52:
2f:a7:b3:c6:7e:b3:f8:52:c8:0f:7d:33:7f:8f:96:c4:71:87:
df:01:fd:d3:0b:5d:70:e4:d9:e3:28:af:09:e2:fc:a6:94:a2:
97:6b:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 06:03:09 2023 by rpki-client on console-fra.rpki-client.org