Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/YtQbmUTnWBJEXl0epEIjnpl9GLo.roa
File: YtQbmUTnWBJEXl0epEIjnpl9GLo.roa (raw, json)
Hash identifier: heWv+xqBlGplKYAQbKhaHJ0VeiiJ9/KR6W8lBwwNOe8=
Subject key identifier: 62:D4:1B:99:44:E7:58:12:44:5E:5D:1E:A4:42:23:9E:99:7D:18:BA
Certificate issuer: /CN=684d5d5fd7ed1071ca4739f0e238ba515346c3a1
Certificate serial: 018326EB6AB8F146D95C58527717534B5899
Authority key identifier: 68:4D:5D:5F:D7:ED:10:71:CA:47:39:F0:E2:38:BA:51:53:46:C3:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aE1dX9ftEHHKRznw4ji6UVNGw6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/YtQbmUTnWBJEXl0epEIjnpl9GLo.roa
Signing time: Sat 10 Sep 2022 10:21:45 +0000
ROA not before: Sat 10 Sep 2022 10:21:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:eb:6a:b8:f1:46:d9:5c:58:52:77:17:53:4b:58:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684d5d5fd7ed1071ca4739f0e238ba515346c3a1
Validity
Not Before: Sep 10 10:21:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62d41b9944e75812445e5d1ea442239e997d18ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:fc:22:5c:15:a5:6c:94:58:7a:b3:fe:cf:
81:88:25:cd:f2:84:4f:7c:f0:c6:83:33:4f:82:73:
3d:37:82:d0:f6:33:3b:f7:ec:03:0f:c8:64:42:77:
19:a4:25:4b:4f:b9:59:f8:8b:80:77:d9:4d:73:bb:
e6:2e:94:90:4e:36:9a:50:64:99:49:ed:4f:52:0e:
76:15:93:da:b1:50:0d:88:76:71:05:ae:09:52:37:
21:b7:02:56:84:57:e1:26:05:9b:63:2c:12:ee:ab:
d9:e2:c8:88:d5:b2:8f:18:0f:92:0c:2a:f1:ba:ec:
45:6f:61:7c:26:73:fe:eb:42:4b:7d:53:a0:85:95:
6a:50:dc:b2:70:50:16:48:de:c2:10:63:dc:07:83:
71:e2:8a:23:7b:66:0c:d7:01:53:58:cf:b6:60:88:
9a:fb:25:3c:a3:2f:a6:83:ed:36:58:d4:92:10:68:
4d:a0:60:ba:c0:50:1a:c7:4c:e2:ce:2a:16:62:c4:
d3:f7:0c:f5:62:26:29:de:f3:49:1a:74:8d:5a:fd:
69:89:bd:f6:25:0a:47:e7:e9:d0:c2:03:b1:ce:f6:
2b:d1:2f:49:f1:ea:56:1f:3d:7d:18:0a:ac:ba:3e:
1e:c4:4c:f5:0c:4a:34:cf:1f:f4:a7:40:6e:4a:51:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D4:1B:99:44:E7:58:12:44:5E:5D:1E:A4:42:23:9E:99:7D:18:BA
X509v3 Authority Key Identifier:
keyid:68:4D:5D:5F:D7:ED:10:71:CA:47:39:F0:E2:38:BA:51:53:46:C3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aE1dX9ftEHHKRznw4ji6UVNGw6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/YtQbmUTnWBJEXl0epEIjnpl9GLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/aE1dX9ftEHHKRznw4ji6UVNGw6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.66.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e8:93:70:7c:04:e0:1f:a4:03:8a:cb:c8:5b:63:8f:3f:d6:
3f:fb:1a:fe:16:b0:6b:60:11:46:bc:dd:e2:57:ff:a7:aa:e2:
00:02:4b:a1:e4:6f:b3:15:25:dc:f9:37:93:fa:af:87:e0:da:
fe:20:8c:fe:62:34:db:8f:9e:57:6d:2a:c7:9f:e8:63:c9:cb:
d8:6d:55:90:39:be:52:e6:b3:fa:5b:ef:5a:fd:bb:8d:3e:ff:
e3:29:cc:80:89:72:44:30:3e:a7:cd:f3:36:11:be:b1:d5:5a:
1e:19:a4:43:45:a0:25:69:e9:a7:1f:5b:c5:02:a7:af:aa:06:
10:bd:ad:cb:1d:55:7c:d5:0c:64:30:72:6c:52:a9:70:36:f4:
2d:3c:99:94:69:29:60:64:9c:57:d3:8b:31:c7:27:74:7a:ea:
fd:f6:2f:6e:ce:e9:a6:77:38:05:86:04:60:f4:39:d9:68:7f:
23:78:f4:a8:e9:a9:de:38:0d:7a:ce:91:c3:46:37:80:db:9d:
a7:41:65:83:15:4c:08:db:9f:5e:91:e3:65:a4:de:bd:82:ed:
41:48:03:6c:68:34:5a:e8:93:92:16:cf:f6:0f:14:15:70:b5:
cb:5b:03:09:1a:2f:f6:dc:fd:2a:5c:0a:34:f3:a4:4c:d7:8c:
99:fe:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:04 2025 by rpki-client