Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/SfLV910O1VN68WdkJb56LoKZyYE.roa
File: SfLV910O1VN68WdkJb56LoKZyYE.roa (raw, json)
Hash identifier: fDUmNiQNUueJGPt/yLM/LBMUrj/+7e8/zWTRRldJuRo=
Subject key identifier: 49:F2:D5:F7:5D:0E:D5:53:7A:F1:67:64:25:BE:7A:2E:82:99:C9:81
Certificate issuer: /CN=b3793db16019be73717adb23d6e51c4df0dd10b1
Certificate serial: B13DF5
Authority key identifier: B3:79:3D:B1:60:19:BE:73:71:7A:DB:23:D6:E5:1C:4D:F0:DD:10:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3k9sWAZvnNxetsj1uUcTfDdELE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/SfLV910O1VN68WdkJb56LoKZyYE.roa
Signing time: Sat 01 Jan 2022 13:04:45 +0000
ROA not before: Sat 01 Jan 2022 13:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21500
IP address blocks: 62.106.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11615733 (0xb13df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3793db16019be73717adb23d6e51c4df0dd10b1
Validity
Not Before: Jan 1 13:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49f2d5f75d0ed5537af1676425be7a2e8299c981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:25:87:5c:31:fc:55:d4:06:2b:e1:22:61:
8d:94:e4:1b:28:85:ff:2b:90:9e:e8:fc:52:ac:70:
d3:c3:a1:4e:44:30:4b:79:c9:12:b6:11:45:94:1b:
56:1b:20:45:40:c6:2b:70:c4:3d:f3:35:72:53:94:
cb:4a:b0:0c:5d:a1:f8:d0:97:7d:a8:3f:20:3b:61:
7e:4f:3a:04:a4:d2:42:47:ce:14:5b:b2:cf:7c:bf:
f8:92:4f:40:bf:7f:33:a5:02:e3:ce:f2:ce:46:71:
78:a8:70:2b:91:cc:51:e6:80:ea:0f:04:9b:87:a0:
14:56:02:b2:36:a1:12:34:24:22:79:69:a9:0f:d4:
16:71:8d:67:9f:f8:46:2f:62:56:0c:3d:16:15:3d:
f1:c9:cd:90:e2:48:b2:e4:72:59:98:fa:b0:92:87:
4a:64:58:71:d3:63:02:85:60:00:4c:c3:d4:66:e8:
f8:a1:38:ff:a2:81:d2:21:0f:3c:a4:d8:fe:42:91:
50:9c:35:f2:1c:ab:2e:58:5d:c9:bc:57:be:68:49:
5d:78:dc:d4:c0:c4:b7:5b:61:5c:e0:d2:9e:f7:03:
a0:70:34:80:cf:5d:da:05:8c:89:f0:b9:de:6c:88:
c2:f1:2e:77:fc:c8:e2:fb:bb:67:1f:93:e6:36:ab:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F2:D5:F7:5D:0E:D5:53:7A:F1:67:64:25:BE:7A:2E:82:99:C9:81
X509v3 Authority Key Identifier:
keyid:B3:79:3D:B1:60:19:BE:73:71:7A:DB:23:D6:E5:1C:4D:F0:DD:10:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3k9sWAZvnNxetsj1uUcTfDdELE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/SfLV910O1VN68WdkJb56LoKZyYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:89:5f:17:21:ce:39:8d:80:99:46:1e:4b:10:3d:a9:85:72:
56:1e:3d:e6:08:f8:01:90:3d:14:bf:f0:3f:79:08:fc:17:e3:
87:88:10:4e:14:7e:ff:11:6e:17:32:7a:ec:ef:ba:ad:9a:91:
3a:02:e3:74:d9:c6:dc:81:ad:e4:fc:73:e8:b0:f1:a5:8e:1c:
15:51:2d:ff:9a:f9:9f:22:2f:c0:13:26:17:4c:7e:7b:a0:c1:
bd:f2:fd:91:0c:af:2a:3c:b0:e5:d4:ef:7b:bc:f0:9d:a9:a4:
7c:8b:1d:cf:e8:d1:c4:29:cc:34:f5:33:37:58:e5:76:4f:1f:
36:aa:84:8b:29:9b:0b:8c:37:79:bb:97:be:cf:b4:04:24:74:
b4:5c:1e:65:a9:a6:29:62:cf:f1:89:d2:da:20:d0:40:94:1f:
e7:8b:9d:b1:e0:60:5c:b0:19:2c:a2:98:83:8b:17:cb:65:24:
27:03:50:5f:fd:5f:17:98:15:77:45:af:c9:9c:55:67:22:62:
33:10:bb:93:09:2c:1f:ad:f5:47:04:b0:b2:36:0c:c6:87:3f:
8f:bd:55:26:7b:1f:f5:9e:35:f5:44:4f:af:0e:38:3d:7e:4f:
e8:00:30:21:5a:ab:05:b1:1a:a3:7a:57:57:f0:7c:e5:5a:59:
a3:df:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:03 2024 by rpki-client on console-fra.rpki-client.org