Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/SBBGUVO3y4MB9GyPRxQE6n3MIdc.roa
File: SBBGUVO3y4MB9GyPRxQE6n3MIdc.roa (raw, json)
Hash identifier: 4HqQnK1wW6DbK3hh0sSO9e84QxeTWVdWk+tslzQSJEs=
Subject key identifier: 48:10:46:51:53:B7:CB:83:01:F4:6C:8F:47:14:04:EA:7D:CC:21:D7
Certificate issuer: /CN=684d5d5fd7ed1071ca4739f0e238ba515346c3a1
Certificate serial: 018CC3495DBB8F2F5E56DF261EDCF8D6D78D
Authority key identifier: 68:4D:5D:5F:D7:ED:10:71:CA:47:39:F0:E2:38:BA:51:53:46:C3:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aE1dX9ftEHHKRznw4ji6UVNGw6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/SBBGUVO3y4MB9GyPRxQE6n3MIdc.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5d:bb:8f:2f:5e:56:df:26:1e:dc:f8:d6:d7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684d5d5fd7ed1071ca4739f0e238ba515346c3a1
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4810465153b7cb8301f46c8f471404ea7dcc21d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:1f:f3:60:62:c4:39:88:8f:0c:c5:74:46:
f4:5f:48:af:f7:91:54:60:c4:51:86:51:4b:f1:03:
51:fa:f6:2d:0f:06:e4:7a:50:71:f9:be:c3:d8:8d:
15:99:ee:ab:48:c3:b6:ce:63:81:fc:a7:98:1a:e7:
9b:64:ff:ff:1d:f5:71:46:9b:a6:a5:98:40:71:98:
d5:b4:8b:9d:bf:83:25:cb:ca:1b:fb:37:6f:25:38:
db:cc:f3:d4:c9:99:f2:46:00:48:bd:06:18:e1:b3:
8b:5f:1a:5a:2f:cb:a8:83:d2:a4:2b:6f:51:04:0e:
c9:bc:1c:79:d4:a3:86:52:81:6c:b9:2e:b8:3b:9d:
73:99:f9:a0:79:85:31:21:88:e5:6d:ad:93:3a:1d:
1b:2f:c9:e4:a6:60:c2:25:59:4f:4f:2f:a4:df:ea:
2d:a5:4c:79:c7:da:4c:1c:36:9b:ad:c7:98:21:ba:
4e:a5:f3:de:0f:ce:72:55:7f:bd:4d:61:af:60:47:
5c:33:1e:9a:91:9e:82:7a:e2:68:06:5e:37:65:2b:
97:31:33:5c:9b:0c:29:fe:e5:1e:0c:73:50:56:f4:
90:ed:c8:d5:0e:64:b6:df:b2:2e:56:65:43:e1:5f:
a7:10:34:31:81:aa:a5:82:a1:32:57:4b:d5:ea:31:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:10:46:51:53:B7:CB:83:01:F4:6C:8F:47:14:04:EA:7D:CC:21:D7
X509v3 Authority Key Identifier:
keyid:68:4D:5D:5F:D7:ED:10:71:CA:47:39:F0:E2:38:BA:51:53:46:C3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aE1dX9ftEHHKRznw4ji6UVNGw6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/SBBGUVO3y4MB9GyPRxQE6n3MIdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/aE1dX9ftEHHKRznw4ji6UVNGw6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.66.0/24
Signature Algorithm: sha256WithRSAEncryption
81:29:e9:0b:b0:2a:1c:72:71:ad:c7:8e:b7:bb:fa:5d:86:e3:
7b:e7:27:da:58:de:03:12:0b:cc:0a:65:d3:3a:e0:11:6a:5c:
1a:93:4a:29:0f:40:20:1f:6c:a9:53:49:10:3c:3e:62:4d:bb:
50:c6:f1:af:ae:da:52:3c:fa:84:d7:b1:fd:dc:0d:81:b2:15:
60:f8:34:9f:7b:8d:ff:0c:f5:f2:03:4d:30:e2:1b:5e:28:69:
fd:1f:a0:87:d4:a9:6e:2d:ae:17:7d:cb:9e:dd:b9:68:55:1b:
d6:4c:66:01:45:5a:7e:83:b8:d7:c7:87:9d:9a:a4:f1:2b:f9:
6c:19:77:c0:5b:92:02:8c:a9:a9:c7:fe:02:62:ae:bf:22:f1:
1d:b4:55:18:37:c8:86:9b:c5:8e:f2:58:8b:61:5a:23:ca:5d:
ab:95:e7:39:1a:be:14:03:ba:8d:34:1e:9d:ae:5a:25:8e:92:
47:d8:08:3e:71:ba:5d:87:29:7d:bc:5d:65:63:af:9b:51:ab:
5f:44:19:b6:9a:d1:de:f4:79:18:6c:65:ce:0f:4a:b8:b0:58:
94:7d:2b:49:c2:ae:54:f7:f0:02:8b:56:cd:64:74:87:cf:37:
23:46:56:37:82:52:f8:c4:21:2d:ef:d7:bb:fc:30:70:b0:dc:
4f:a0:d1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:42 2024 by rpki-client on console-ams.rpki-client.org