Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uzx-abojSAlOZqUhKm3zsOg7CJY.roa
File: uzx-abojSAlOZqUhKm3zsOg7CJY.roa (raw, json)
Hash identifier: S5RDYTLITFKk5wvbt/EvDn8rRu1J5xC07t0B5MZXz9k=
Subject key identifier: BB:3C:7E:69:BA:23:48:09:4E:66:A5:21:2A:6D:F3:B0:E8:3B:08:96
Certificate issuer: /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial: 0188B80BD646AC782E0F2989F3A3DFC7EB6B
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uzx-abojSAlOZqUhKm3zsOg7CJY.roa
Signing time: Wed 14 Jun 2023 03:56:03 +0000
ROA not before: Wed 14 Jun 2023 03:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:0b:d6:46:ac:78:2e:0f:29:89:f3:a3:df:c7:eb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Validity
Not Before: Jun 14 03:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb3c7e69ba2348094e66a5212a6df3b0e83b0896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:be:ba:10:f6:5e:43:6c:ca:b5:7e:cc:88:
db:25:c4:ea:d8:cb:46:0a:52:74:9b:6b:98:01:2f:
e1:cf:c3:96:00:3e:5e:b0:8e:e7:b7:26:b7:b1:3d:
6b:60:67:76:be:e4:17:c6:d2:d3:1e:11:df:8f:bd:
d7:f0:7e:65:ca:8b:58:68:64:c6:27:d3:e7:53:94:
5d:0b:fe:11:0d:fc:25:5a:fe:16:dd:94:3c:f7:7c:
52:a1:6f:40:a5:16:ff:92:06:9e:0d:b4:b4:52:4e:
1b:75:ba:01:09:3b:9b:01:dd:60:40:0c:66:64:e3:
a2:66:df:a5:4d:7a:dd:f3:92:af:28:29:63:21:c5:
60:c2:3f:5c:7e:af:80:a1:7b:cd:47:56:7e:d0:28:
60:36:62:10:ff:e5:af:e7:3f:23:0d:90:40:1c:62:
7f:72:3b:9d:51:e3:c7:75:db:fc:28:5c:7b:00:47:
b9:71:40:e7:02:80:09:7a:00:50:5a:6d:f4:49:86:
a9:59:e5:2b:38:b9:2a:28:4d:eb:63:6d:94:30:63:
86:9f:08:7d:8f:33:bd:d3:30:9c:46:02:9d:5b:f9:
93:29:40:2d:6f:93:25:96:84:f2:0b:b2:e4:49:84:
d9:6c:4d:c4:54:45:7a:81:b2:9f:5f:4a:b1:cc:d1:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3C:7E:69:BA:23:48:09:4E:66:A5:21:2A:6D:F3:B0:E8:3B:08:96
X509v3 Authority Key Identifier:
keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uzx-abojSAlOZqUhKm3zsOg7CJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
60:09:4d:1f:34:0f:19:54:6c:de:28:b2:02:67:1d:4e:4c:e5:
6d:13:3e:b1:6c:15:6a:f7:0d:e2:ca:ab:19:80:f6:fd:99:c7:
2c:b1:9a:c0:a8:80:3f:6b:90:68:95:a0:90:1c:c8:50:0a:f3:
c2:b2:11:53:0b:c6:8d:87:bb:24:f4:e0:90:1c:59:9f:9c:3a:
6b:88:77:2d:59:93:41:b8:2b:91:79:cd:ca:f3:81:81:85:ae:
7f:9d:09:2a:87:e7:78:ec:93:6e:af:9f:74:3c:37:54:54:65:
87:0d:7f:ea:f7:d9:91:1d:34:67:e4:02:fb:49:fe:72:75:aa:
e9:a1:48:a9:f3:c2:3d:dd:e7:a7:a8:26:6c:4b:4d:2d:8e:7f:
a4:e5:a4:f9:c2:84:1c:d9:0e:d9:33:60:06:4e:13:c3:bb:78:
2c:27:f5:c1:d0:52:b8:70:8c:af:36:c7:71:29:3f:31:bf:2b:
76:ba:c9:bc:d7:e7:f6:1b:27:0e:5a:9e:fd:d3:0c:78:a0:12:
b9:97:0f:94:6b:fb:48:1d:19:59:a2:ec:06:40:93:73:5f:8e:
8b:cb:02:94:85:fc:9a:29:8e:c5:92:b7:c6:0a:1a:65:cc:d7:
e4:d5:94:28:ab:c4:42:c1:f3:b2:07:b1:50:c5:d9:34:17:9c:
41:5e:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:06 2024 by rpki-client on console-ams.rpki-client.org