Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/de3fc4-e00f-4a3a-8966-7bb1e31d088f/1/x1wthHG4DG6Gh12JfavmU68T0UE.roa
File: x1wthHG4DG6Gh12JfavmU68T0UE.roa (raw, json)
Hash identifier: txtKlk2Ohit7z2aUMmU9mN5NbpwLOCMENMpr4MivJI8=
Subject key identifier: C7:5C:2D:84:71:B8:0C:6E:86:87:5D:89:7D:AB:E6:53:AF:13:D1:41
Certificate issuer: /CN=cd61790219ebfd8f21fe51284464320cd609f9ef
Certificate serial: 01856F700A43CFAC885CFB245FD2A8F87FC4
Authority key identifier: CD:61:79:02:19:EB:FD:8F:21:FE:51:28:44:64:32:0C:D6:09:F9:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/de3fc4-e00f-4a3a-8966-7bb1e31d088f/1/x1wthHG4DG6Gh12JfavmU68T0UE.roa
Signing time: Sun 01 Jan 2023 22:24:51 +0000
ROA not before: Sun 01 Jan 2023 22:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 62.3.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:0a:43:cf:ac:88:5c:fb:24:5f:d2:a8:f8:7f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd61790219ebfd8f21fe51284464320cd609f9ef
Validity
Not Before: Jan 1 22:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c75c2d8471b80c6e86875d897dabe653af13d141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:e2:80:1b:48:c2:e8:9d:d5:56:d9:44:d2:
26:96:c4:75:24:45:0d:a1:74:37:1f:6c:7e:39:8e:
bd:80:be:be:57:ef:ed:66:70:b8:01:31:38:28:fc:
9f:29:da:54:c3:80:a4:73:30:81:43:4d:5b:a0:78:
c1:19:40:3c:3b:4b:cd:92:0b:a6:56:6d:5c:bc:7e:
69:1a:a4:ac:69:23:68:41:c5:94:b6:39:36:e9:17:
09:16:03:b4:44:43:4c:2f:69:4e:af:df:2a:5d:a6:
8f:33:d7:15:d6:28:54:be:0c:4e:8a:0d:be:24:28:
7b:ba:50:4f:08:17:18:ae:bd:03:a5:6e:60:1c:58:
cf:c8:43:cd:2a:79:bc:de:2e:4d:1c:36:b5:14:54:
62:43:5d:6b:0c:e6:75:9e:23:63:1f:e8:ca:a5:4e:
54:66:da:a1:43:81:aa:ac:74:d4:0e:fa:5a:f4:aa:
48:af:00:8c:e3:51:0c:2e:c9:19:c4:36:69:18:ab:
6d:bb:ae:f6:66:50:be:b8:23:cc:81:cd:51:3d:f2:
82:f3:3d:ae:3f:f7:87:6c:ae:1e:e4:bd:3d:22:b1:
34:fa:03:4b:3e:92:1e:16:28:b1:12:f4:18:c4:bc:
d2:20:70:33:b5:67:98:b3:c6:92:a6:92:46:de:cc:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5C:2D:84:71:B8:0C:6E:86:87:5D:89:7D:AB:E6:53:AF:13:D1:41
X509v3 Authority Key Identifier:
keyid:CD:61:79:02:19:EB:FD:8F:21:FE:51:28:44:64:32:0C:D6:09:F9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/de3fc4-e00f-4a3a-8966-7bb1e31d088f/1/x1wthHG4DG6Gh12JfavmU68T0UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/de3fc4-e00f-4a3a-8966-7bb1e31d088f/1/zWF5Ahnr_Y8h_lEoRGQyDNYJ-e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.22.0/24
Signature Algorithm: sha256WithRSAEncryption
70:51:2b:4a:52:79:5f:be:31:50:46:76:2a:15:14:3d:c8:14:
50:45:86:ea:56:1e:fc:d5:38:1a:4d:c5:c6:00:e0:27:18:60:
1d:d5:f6:48:40:58:c5:48:9e:aa:59:91:38:1d:70:47:cf:77:
a4:21:a8:64:25:5a:c0:eb:4d:ed:bc:f9:59:f0:60:c7:08:88:
ae:58:f3:ca:c8:bd:a5:fc:9e:80:f9:43:49:4b:3a:a7:54:85:
7a:91:e3:18:39:5d:f8:42:ee:f1:52:a6:1c:f0:64:d4:6c:a2:
f8:a7:70:50:94:2c:f7:1f:b0:c1:10:6f:49:1b:e7:b7:0b:f5:
6a:18:15:b4:55:70:7f:53:ed:12:9c:a9:b4:5a:07:c6:74:21:
48:19:09:dc:d0:44:ab:b1:0f:06:59:5b:a3:d6:4e:19:48:d9:
36:af:4d:0a:f6:11:b2:cd:ef:69:d0:62:3a:7c:e9:28:0d:f9:
4c:61:43:1e:ea:91:4f:1c:2d:19:30:6d:4b:30:c3:8a:f9:8c:
77:7a:92:eb:80:ce:64:6a:d5:10:d8:77:25:99:4e:9d:57:cb:
6e:3d:85:61:ce:4a:c5:69:02:d3:30:b7:1b:f0:66:03:22:ae:
fc:60:1d:a7:29:89:e0:b7:7d:7c:85:d8:6d:dd:0d:81:89:cf:
29:a3:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:59 2024 by rpki-client on console-fra.rpki-client.org