Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/K8jhFa-UcTWhzhI2qWdUsKLgg34.roa
File: K8jhFa-UcTWhzhI2qWdUsKLgg34.roa (raw, json)
Hash identifier: zJcUnbaxYNiDtb9AcTlZ3gDIDLcNrqTvQgR80pGNcwU=
Subject key identifier: 2B:C8:E1:15:AF:94:71:35:A1:CE:12:36:A9:67:54:B0:A2:E0:83:7E
Certificate issuer: /CN=308e4f050668d45e3918384500b175a87680199c
Certificate serial: FA81B2
Authority key identifier: 30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/K8jhFa-UcTWhzhI2qWdUsKLgg34.roa
Signing time: Sun 20 Feb 2022 18:20:13 +0000
ROA not before: Sun 20 Feb 2022 18:20:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 62.204.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16417202 (0xfa81b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308e4f050668d45e3918384500b175a87680199c
Validity
Not Before: Feb 20 18:20:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bc8e115af947135a1ce1236a96754b0a2e0837e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:0a:a8:9c:8c:64:18:00:50:51:a9:97:db:
54:7a:9a:91:6e:33:42:73:ee:7a:6f:18:95:be:98:
30:4a:8d:58:46:d6:d8:ed:63:2b:47:39:fc:44:1c:
7d:63:cc:54:1b:9b:89:1c:73:8b:14:b9:c0:0e:b8:
51:a8:c8:76:b2:ec:9a:e5:4b:a3:2d:7e:3c:6c:bd:
e2:20:d7:be:1f:d8:60:f7:9d:3f:46:b3:40:e9:02:
68:ac:5b:df:7f:bd:b1:b3:ab:6b:9b:7e:c9:64:15:
0d:dc:7e:15:f2:15:46:05:c4:49:3a:3f:d9:36:09:
fe:e8:70:33:39:78:3b:7a:2c:65:6c:14:eb:31:ef:
6f:f4:5a:09:b0:de:6d:c3:38:9f:4d:a0:45:26:3c:
e2:84:4f:cc:80:6b:0f:90:a3:32:13:44:3e:08:c5:
a9:2e:5a:77:e0:fa:eb:62:7f:c9:42:85:bc:9f:1c:
01:2a:a7:38:f6:c2:f7:ec:b1:75:4f:72:82:24:ff:
3f:46:b0:d7:53:e3:16:cc:78:df:1b:c0:f5:37:f2:
6c:df:79:f1:71:85:c8:9d:7a:d2:ff:7d:34:76:55:
c7:73:dd:c5:13:15:ab:2e:06:bb:77:39:77:e0:49:
65:81:ab:b1:25:2d:4f:b1:c7:35:37:d1:a2:f3:4b:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:E1:15:AF:94:71:35:A1:CE:12:36:A9:67:54:B0:A2:E0:83:7E
X509v3 Authority Key Identifier:
keyid:30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/K8jhFa-UcTWhzhI2qWdUsKLgg34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/MI5PBQZo1F45GDhFALF1qHaAGZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c1:78:56:f7:d0:36:7f:7a:4d:f2:b0:0e:66:20:68:ec:30:
0b:74:ca:00:ea:6a:8c:71:61:f0:21:f1:67:3a:e9:74:38:59:
44:e1:ce:3f:cb:93:97:35:e5:57:de:f1:c8:3d:bb:b1:b0:4d:
b7:45:a8:79:d0:5a:11:6a:7c:13:d4:6f:6d:53:3c:b1:a6:c3:
52:bf:44:c0:1d:ab:46:e1:2e:5f:ea:38:b0:e3:fc:36:14:a7:
16:c7:81:13:57:80:1b:65:9e:19:ab:1f:a8:1e:20:0d:97:64:
b9:59:c7:45:c4:cf:8b:84:12:ad:d2:2b:b3:33:66:a7:1d:b4:
c2:7e:b2:3e:68:0d:51:b8:06:20:8e:b0:90:d2:e1:96:ba:49:
4c:a5:cb:30:f6:ca:99:29:c1:09:f2:8f:df:30:73:d1:31:d5:
60:9f:5c:45:98:ba:4b:73:51:23:3a:ab:6b:b2:5a:b8:2d:23:
e7:eb:15:65:b8:6c:44:1e:c6:2a:ac:80:c2:a6:5f:79:68:8c:
41:0c:a7:98:9f:b1:be:6c:0c:05:8e:6a:da:f9:61:14:d8:fa:
08:c8:c1:56:1a:dc:61:a5:1e:a6:41:6a:92:d8:1d:1c:da:f2:
3a:d9:ef:3f:f2:e5:e4:f3:51:6c:d5:dd:57:24:cf:be:2c:68:
51:0e:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:27 2024 by rpki-client on console-ams.rpki-client.org