Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/1HbF1EFYT8lVKKagEEw5zeVG6MI.roa
File: 1HbF1EFYT8lVKKagEEw5zeVG6MI.roa (raw, json)
Hash identifier: +1f/aliLiX7qUKfNIoZqWM/Ff/FxZaqKzThIQcL3VG8=
Subject key identifier: D4:76:C5:D4:41:58:4F:C9:55:28:A6:A0:10:4C:39:CD:E5:46:E8:C2
Certificate issuer: /CN=b3793db16019be73717adb23d6e51c4df0dd10b1
Certificate serial: 018573BAA39888EC38864EAB2502B484EB4F
Authority key identifier: B3:79:3D:B1:60:19:BE:73:71:7A:DB:23:D6:E5:1C:4D:F0:DD:10:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3k9sWAZvnNxetsj1uUcTfDdELE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/1HbF1EFYT8lVKKagEEw5zeVG6MI.roa
Signing time: Mon 02 Jan 2023 18:24:49 +0000
ROA not before: Mon 02 Jan 2023 18:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21500
IP address blocks: 62.106.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:a3:98:88:ec:38:86:4e:ab:25:02:b4:84:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3793db16019be73717adb23d6e51c4df0dd10b1
Validity
Not Before: Jan 2 18:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d476c5d441584fc95528a6a0104c39cde546e8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:57:07:e4:66:65:f2:ba:56:2b:53:12:2e:
6d:6e:3b:12:24:5f:06:3b:3f:4f:4d:7d:9b:77:30:
3c:35:da:93:84:e1:b0:a8:70:d0:2a:bd:d5:9d:79:
92:43:c0:c6:d5:ed:61:cb:64:94:a1:ce:a0:71:9b:
a6:85:9a:f9:5e:7a:1f:d9:77:b3:e1:d4:13:55:ef:
fd:a2:1d:c0:a9:2a:06:e8:d5:92:29:df:7a:26:6d:
9c:39:23:23:8e:1d:3f:01:f6:1e:da:2d:45:73:54:
1a:10:2a:e0:27:26:ee:2e:92:b5:79:4c:3b:83:38:
4d:3d:59:cb:b7:4c:7a:06:48:9f:2d:9e:9c:6c:39:
c9:d7:0b:f4:24:19:8a:8a:c7:49:eb:cf:f2:9b:a3:
9d:4a:62:ca:78:68:a2:88:e8:5f:fa:ef:2c:8e:e7:
2c:3a:f4:a1:60:15:e2:73:07:78:4a:01:a2:58:49:
b2:f3:6b:34:7e:aa:54:86:1b:67:6f:78:17:be:37:
e9:95:40:df:7a:ca:7f:cc:03:94:2c:f3:bb:18:61:
93:3c:d1:9a:f3:c1:21:8b:6e:c6:d8:8c:97:91:94:
2b:7b:28:e1:69:93:54:ec:d7:04:96:8f:59:f6:28:
cc:c9:93:21:70:d8:de:1c:28:fe:b3:4e:4d:45:13:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:C5:D4:41:58:4F:C9:55:28:A6:A0:10:4C:39:CD:E5:46:E8:C2
X509v3 Authority Key Identifier:
keyid:B3:79:3D:B1:60:19:BE:73:71:7A:DB:23:D6:E5:1C:4D:F0:DD:10:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3k9sWAZvnNxetsj1uUcTfDdELE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/1HbF1EFYT8lVKKagEEw5zeVG6MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.68.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a9:7c:5b:03:7b:49:b8:d8:0a:12:d3:38:59:c8:6c:9b:ab:
55:a5:e4:4d:00:10:cb:86:be:d9:3b:f2:4a:d3:fc:7f:fd:83:
3f:52:ec:3a:94:95:f2:c3:e3:9d:df:ad:5e:fe:6b:8f:af:87:
b7:f2:00:e4:9a:e2:91:e7:92:79:b8:32:60:f9:35:86:1e:3d:
3e:f5:44:6f:15:59:91:b8:46:31:18:8f:27:84:ac:eb:d2:27:
a6:47:7f:e1:9f:1e:4e:0a:05:68:d9:f8:41:a2:7d:12:93:5b:
3a:d4:f8:2f:53:47:1c:94:af:2d:09:0a:9b:b3:20:76:35:0b:
8e:4a:3f:9e:ce:cc:69:25:62:9e:26:75:3d:c4:1d:8f:18:68:
dd:f6:76:7b:30:b2:a9:60:37:8f:f1:8f:97:bd:a7:e1:ea:cc:
e2:5f:3a:37:fd:9d:bf:31:a8:be:2a:ee:c4:da:c8:27:3b:d9:
ec:7e:53:c7:90:00:55:11:67:74:bd:4f:fe:bd:b1:de:fd:22:
a8:a8:06:51:80:45:84:b8:d9:4f:b5:3f:00:68:6c:89:f0:15:
b2:38:ff:35:87:58:8b:6d:60:c8:8f:6c:81:cf:e9:df:3d:89:
45:32:d1:a0:57:8f:a3:a0:ac:29:15:d4:07:20:73:18:f9:d0:
ba:84:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:07 2024 by rpki-client on console-ams.rpki-client.org