Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/gcCPZLHL0FzGVjJUSxEsH7vcXTU.roa
File: gcCPZLHL0FzGVjJUSxEsH7vcXTU.roa (raw, json)
Hash identifier: L1SW0WovgD+nbalEyvPxeHr/wcgcVSpe4hHBMm4BK/Q=
Subject key identifier: 81:C0:8F:64:B1:CB:D0:5C:C6:56:32:54:4B:11:2C:1F:BB:DC:5D:35
Certificate issuer: /CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
Certificate serial: 018CC8DEAD7837919FA2D2408EC52ED4FCFE
Authority key identifier: 1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/gcCPZLHL0FzGVjJUSxEsH7vcXTU.roa
Signing time: Tue 02 Jan 2024 06:31:25 +0000
ROA not before: Tue 02 Jan 2024 06:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ad:78:37:91:9f:a2:d2:40:8e:c5:2e:d4:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
Validity
Not Before: Jan 2 06:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81c08f64b1cbd05cc65632544b112c1fbbdc5d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:61:87:76:9a:45:df:1e:de:de:09:ff:ca:
33:1c:2f:8e:30:3e:d1:08:6b:a0:d5:65:fa:4a:10:
77:f1:be:f4:ea:41:ee:13:7c:e2:40:6f:b9:15:46:
bc:d2:7e:b5:1e:45:28:ae:ac:0e:06:d6:50:92:ef:
bf:fb:d8:a0:b7:0e:ac:02:77:a6:07:62:87:34:f8:
bb:bc:b2:1a:a8:8d:b7:e0:1e:6a:15:8b:e3:a5:bb:
df:83:b7:80:22:9d:50:09:2f:f3:1e:d2:7a:6a:f8:
45:5f:ed:4a:fb:ba:05:af:97:b3:ed:6c:f3:a8:ef:
7e:67:da:8c:02:a7:02:38:d6:d2:6d:f3:7f:01:20:
0e:be:79:7f:2f:38:0e:22:b3:4b:14:ee:4e:de:2b:
c2:5c:3c:2b:4a:83:06:0c:05:7b:a8:1a:d4:4a:10:
a6:53:84:50:96:67:c6:19:57:90:cb:8e:33:d6:49:
6c:35:15:b6:15:31:e9:69:25:82:63:7e:2c:0d:02:
ea:57:36:ea:ca:59:00:04:bd:e6:31:91:87:a5:8b:
e6:33:04:00:2d:1f:e4:e2:4f:fd:45:1a:a2:26:7e:
1c:89:c4:be:6d:07:a1:2f:e8:d5:d9:58:08:73:b4:
16:b7:f1:54:84:10:c2:98:42:27:12:d4:23:fe:d6:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C0:8F:64:B1:CB:D0:5C:C6:56:32:54:4B:11:2C:1F:BB:DC:5D:35
X509v3 Authority Key Identifier:
keyid:1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/gcCPZLHL0FzGVjJUSxEsH7vcXTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f3:b3:22:91:05:66:33:18:ce:44:f7:da:a1:b4:54:67:4e:
0b:83:28:dd:6f:ac:c2:bc:fe:cb:60:53:26:30:f2:99:df:a1:
8f:20:df:3a:02:cb:d4:33:ba:61:c4:20:d8:48:6e:2f:28:4b:
c2:68:6f:46:60:ae:81:f1:d6:27:df:41:b8:b3:10:7f:67:68:
aa:ae:a1:36:71:23:43:49:50:31:9a:0b:3a:08:82:d7:1e:9e:
99:74:3c:9b:0c:a3:fd:76:e0:6d:81:b8:83:1e:7f:de:0f:65:
90:31:b9:8c:90:43:ff:46:f8:f7:15:df:1b:2f:9a:5e:83:ca:
d0:06:f5:fb:0a:25:12:90:db:dd:fb:47:9e:12:8d:21:d7:3f:
35:10:e5:6e:e0:64:b4:32:e3:49:76:92:82:3e:63:23:4b:f9:
55:c5:4e:0a:58:45:59:45:a4:8d:f1:37:67:6c:a6:86:85:10:
12:ac:2a:2b:83:2c:3f:cd:11:5e:21:1f:b6:2a:26:89:ad:b7:
71:b3:a3:06:94:67:4e:38:c4:ec:43:54:2b:61:5e:84:7c:ba:
a1:33:2f:dc:4e:12:dc:ce:2e:68:a8:61:e2:c8:16:61:3b:2c:
b1:9a:9e:d8:2e:db:a7:1c:1b:29:55:05:85:3e:8f:63:8f:3a:
3f:18:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 12:07:43 2024 by rpki-client on console-fra.rpki-client.org