Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/3My4ahAZC59g0mvZg91CdMj2fp4.roa
File: 3My4ahAZC59g0mvZg91CdMj2fp4.roa (raw, json)
Hash identifier: Ne50Lv+k1fqSWlkXaU5Ca6j2MeodYl483W4dHqEkaZ4=
Subject key identifier: DC:CC:B8:6A:10:19:0B:9F:60:D2:6B:D9:83:DD:42:74:C8:F6:7E:9E
Certificate issuer: /CN=308e4f050668d45e3918384500b175a87680199c
Certificate serial: 0186F5736A22894D5089EFB741EA3A934489
Authority key identifier: 30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/3My4ahAZC59g0mvZg91CdMj2fp4.roa
Signing time: Sat 18 Mar 2023 16:00:27 +0000
ROA not before: Sat 18 Mar 2023 16:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398395
IP address blocks: 62.204.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f5:73:6a:22:89:4d:50:89:ef:b7:41:ea:3a:93:44:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308e4f050668d45e3918384500b175a87680199c
Validity
Not Before: Mar 18 16:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcccb86a10190b9f60d26bd983dd4274c8f67e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:da:41:0f:3e:58:34:90:26:68:41:89:a1:
82:49:8f:18:c8:1f:06:c9:36:b4:c8:58:f0:b8:f3:
3b:d9:13:b8:b8:72:42:16:48:6d:e0:69:80:c2:24:
37:2e:55:3a:99:15:48:72:c8:0d:09:e0:48:0b:87:
dc:9a:db:eb:65:f3:3f:16:09:3c:f9:08:45:22:51:
7d:e0:98:e7:18:3f:ff:3d:a7:1c:9d:1a:fd:66:4a:
7f:01:47:1e:ff:40:e4:9a:25:85:fc:45:dd:c1:37:
8e:e1:e1:a4:62:5a:2a:0d:f4:9c:49:18:8a:18:4e:
4d:7d:30:2f:64:08:32:27:26:c6:d5:d5:fc:3a:5c:
21:94:f4:a9:3c:8c:82:21:b2:87:10:8a:1f:2c:95:
07:66:ee:61:d6:99:50:fd:06:e7:8e:63:83:ec:71:
ec:9f:ef:50:30:2f:9a:41:42:b4:6c:3e:dc:b3:c9:
9e:d1:9c:b9:ef:44:09:24:07:50:f6:02:6c:06:ea:
06:c0:7a:e2:cf:0b:46:3d:42:54:37:12:eb:54:83:
dc:a0:2f:06:1d:a4:53:03:81:e8:7a:5b:a8:44:51:
2f:44:99:2f:e7:9f:06:cf:9b:e1:b9:40:d1:6c:c0:
11:94:ec:83:92:34:5b:f2:a4:4e:9a:a9:34:2a:76:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CC:B8:6A:10:19:0B:9F:60:D2:6B:D9:83:DD:42:74:C8:F6:7E:9E
X509v3 Authority Key Identifier:
keyid:30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/3My4ahAZC59g0mvZg91CdMj2fp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/MI5PBQZo1F45GDhFALF1qHaAGZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
33:68:e2:d9:41:82:fe:c2:7f:7a:e7:ec:8f:a7:21:d7:f1:ca:
c4:79:23:1c:f5:0c:2d:53:b4:80:af:82:15:93:4c:e2:a7:36:
3e:25:16:5a:25:b7:6c:07:45:a6:98:73:0b:85:be:41:f1:cc:
cd:29:47:c1:11:7c:f2:58:1c:fa:b9:50:2e:72:35:4e:ee:ed:
d0:b0:4f:20:56:29:a4:9d:bc:8b:e8:f3:40:a3:10:8e:d2:6b:
3c:a2:29:97:8a:96:e1:7e:a5:ea:80:e7:39:a5:9d:d2:de:c7:
0a:81:4a:eb:73:b1:0c:b2:40:75:3a:52:1e:fe:b8:6a:71:bc:
f7:37:fa:04:80:3e:65:4b:dd:13:37:6f:f1:5b:68:93:44:7a:
b2:1a:2f:30:23:ce:fd:f9:db:29:f0:aa:3c:30:46:7e:6f:c3:
b5:06:7a:28:d2:6c:26:b3:05:93:35:28:49:f4:71:c4:a1:6e:
9e:6b:f3:8e:9f:43:13:b4:08:a6:b7:ff:eb:50:07:db:60:c7:
99:21:d7:f3:8c:12:81:01:fa:d2:24:fa:92:98:61:24:4b:f5:
b6:b4:0d:e5:ff:c7:de:89:d3:6a:63:c8:a0:5c:e7:72:f2:a9:
45:1b:a6:e4:e0:2d:f1:0c:e8:7a:e8:fa:73:4b:07:61:a7:6a:
f8:df:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 09:15:43 2023 by rpki-client on console-ams.rpki-client.org