Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/CXCNE353xkmOHPkKscu2-Z-8yss.roa
File: CXCNE353xkmOHPkKscu2-Z-8yss.roa (raw, json)
Hash identifier: 9Pxk05MIZfMrBHB4yT9GHMNA2sTvo64i6TjjgiCJLBE=
Subject key identifier: 09:70:8D:13:7E:77:C6:49:8E:1C:F9:0A:B1:CB:B6:F9:9F:BC:CA:CB
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018BF1D137CFAE6651D3BCF4C68C99C4941C
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/CXCNE353xkmOHPkKscu2-Z-8yss.roa
Signing time: Tue 21 Nov 2023 12:18:22 +0000
ROA not before: Tue 21 Nov 2023 12:18:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 62.233.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:d1:37:cf:ae:66:51:d3:bc:f4:c6:8c:99:c4:94:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Nov 21 12:18:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09708d137e77c6498e1cf90ab1cbb6f99fbccacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:61:b0:d9:8a:b9:9c:64:8b:94:58:b3:3e:
dc:d3:ae:f9:d1:21:2e:12:9a:94:7a:40:0b:9e:02:
9c:02:a0:06:1b:05:53:78:04:6b:49:73:92:2b:8e:
95:09:01:0d:2b:f5:d9:32:d5:75:58:99:97:71:99:
e1:26:82:f6:4e:d1:40:c4:ab:d2:fb:f4:6b:9c:a4:
6d:63:58:ad:e6:65:aa:a1:ec:f5:4b:c6:f5:1e:2d:
d9:c4:54:05:c9:99:9f:97:55:8b:b5:73:c9:fa:e7:
72:3b:44:2f:b0:f9:5c:59:61:25:a0:d1:a0:fd:58:
c0:73:39:8c:2e:ed:d7:b9:19:c2:bd:7a:bc:06:dd:
e6:33:e6:45:c1:74:c2:32:2d:df:66:82:54:a9:40:
26:4b:0e:72:9f:ab:f9:b9:cd:98:4a:6c:da:2e:a2:
12:ba:fb:18:0a:be:5d:b9:ec:fc:a7:e4:4e:5d:e3:
9d:c2:84:ce:09:12:5c:20:88:2f:93:54:e6:74:83:
98:85:77:a8:fe:13:8e:de:39:08:93:34:54:a8:99:
ba:0a:fb:d4:fd:27:be:9e:2d:e9:75:e7:85:93:fb:
7a:29:48:2c:92:56:cc:5f:6f:36:53:db:1d:16:16:
23:b9:c7:2e:7d:9e:5e:92:5a:01:d3:56:be:eb:03:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:8D:13:7E:77:C6:49:8E:1C:F9:0A:B1:CB:B6:F9:9F:BC:CA:CB
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/CXCNE353xkmOHPkKscu2-Z-8yss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.36.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b7:89:56:9f:13:9f:99:07:54:a3:58:74:d4:93:6f:4a:9a:
ef:c3:80:9a:10:6f:f2:1b:59:e1:2d:38:fd:d3:0a:51:ca:bd:
cf:6a:98:c4:8f:d7:d9:65:f2:34:ee:37:00:45:60:38:47:00:
6d:c5:8c:ee:41:af:2e:03:72:c2:20:4c:b3:09:cc:c3:d7:ea:
7c:7d:e2:1d:66:25:20:13:7b:15:06:80:7a:2d:f5:db:a2:dc:
65:09:57:e3:7d:cb:e1:68:a7:dd:23:13:d5:00:a2:d0:32:33:
a6:21:da:d9:b6:c6:0b:fe:78:3c:0f:a9:89:ec:67:52:b2:e1:
c5:a2:f2:55:a3:49:10:67:b7:80:df:1c:41:25:32:37:4e:16:
df:67:35:c5:2a:db:10:d1:48:e8:36:e2:9d:0a:ff:d6:0c:8d:
81:e3:03:64:ca:bc:46:75:09:31:00:26:d3:14:dc:20:28:ad:
68:f9:4f:65:3b:e5:36:2a:4e:7f:9f:7d:8f:06:c1:4a:e5:cc:
8c:b1:6d:66:53:d7:a1:3a:a4:a6:75:d0:25:ce:f4:22:d7:46:
9b:ed:38:3b:7e:d5:c4:5b:4b:67:c4:91:da:33:89:77:9c:b6:
d4:22:e5:dc:2c:06:b5:ed:7d:65:ac:b8:79:55:b2:d3:f1:51:
b0:0a:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:40 2025 by rpki-client