Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/2rvjykXwa2jICKt5g6YidrFe1Ks.roa
File: 2rvjykXwa2jICKt5g6YidrFe1Ks.roa (raw, json)
Hash identifier: CxXwTkHMiwS6e+pgxTtLI6+KQwnsPLgw06sxDbprFY8=
Subject key identifier: DA:BB:E3:CA:45:F0:6B:68:C8:08:AB:79:83:A6:22:76:B1:5E:D4:AB
Certificate issuer: /CN=75620e5666518bb700409fb4087a875c99f37211
Certificate serial: 01856D2F2EDE07EC4CB0D484C28E6385D1F9
Authority key identifier: 75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/2rvjykXwa2jICKt5g6YidrFe1Ks.roa
Signing time: Sun 01 Jan 2023 11:54:46 +0000
ROA not before: Sun 01 Jan 2023 11:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 62.106.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:2e:de:07:ec:4c:b0:d4:84:c2:8e:63:85:d1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75620e5666518bb700409fb4087a875c99f37211
Validity
Not Before: Jan 1 11:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dabbe3ca45f06b68c808ab7983a62276b15ed4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:82:c2:6e:01:4d:5b:89:e3:62:86:af:68:
b2:72:48:d3:43:5a:a4:6e:83:11:67:a2:7d:1b:d8:
ca:ad:ca:20:f4:a7:06:6e:af:50:05:1d:fc:e3:4c:
7d:b3:d9:c6:b8:25:7c:99:ed:60:54:6d:1a:41:33:
46:53:50:5b:6a:4e:0d:b3:0b:bf:48:c9:16:67:a2:
11:bc:1f:ff:74:eb:f3:b9:8b:e6:55:4f:60:8c:69:
de:07:12:6f:2d:02:30:1c:8c:1c:fe:95:e5:29:26:
87:19:bd:54:46:47:f7:9f:b6:9c:73:a4:d4:e0:79:
72:f3:a7:20:71:13:fb:65:38:f8:0c:33:98:a3:2d:
96:9e:28:7c:9f:b0:cb:b6:0a:2c:82:59:be:91:72:
db:dd:d2:53:ef:8f:e5:64:8f:ef:42:e5:f2:14:6b:
72:d2:d4:2e:c6:17:18:42:84:f9:8a:c2:b4:e0:a1:
c4:27:a1:6a:65:cb:dc:cd:46:f2:62:e1:04:d0:4e:
fb:c8:cf:e9:cf:4c:a6:9c:4e:85:9e:00:02:6d:2e:
01:bb:7f:9e:b6:01:65:54:fd:61:30:78:df:5e:68:
de:f5:16:69:0e:b4:f8:b3:2a:c7:be:68:d5:da:02:
d2:dd:82:50:ee:ce:15:d5:06:9b:6b:30:b5:87:8c:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BB:E3:CA:45:F0:6B:68:C8:08:AB:79:83:A6:22:76:B1:5E:D4:AB
X509v3 Authority Key Identifier:
keyid:75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/2rvjykXwa2jICKt5g6YidrFe1Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a1:0a:98:3c:81:f5:90:42:9d:90:04:86:85:c3:ad:8b:31:
e0:7e:66:f7:08:a0:9f:4d:aa:9f:ac:ed:2b:ff:ba:16:f7:97:
e5:66:5d:a4:da:18:36:e9:7f:37:1e:8e:a1:f8:7f:10:99:6a:
df:50:bb:df:34:1a:3b:6c:00:e4:a8:7d:fe:58:83:c2:d8:d0:
c2:f1:8f:a2:ef:d9:61:96:ae:ac:b1:93:05:59:93:aa:30:96:
16:d1:30:57:e7:41:cf:b8:fe:69:6b:28:d5:aa:37:f5:ee:bb:
72:b7:8d:e2:ac:1f:52:e0:af:5c:c9:41:7a:d1:18:51:0a:c6:
ea:23:b9:7d:e4:a9:ff:46:1c:6c:90:a1:89:67:44:9a:47:b6:
93:c0:62:7f:c5:63:b9:30:c4:0e:4c:62:c2:a0:21:05:6e:73:
d1:16:ef:62:5f:ac:23:2f:2d:2c:63:49:e7:ec:5d:b4:75:72:
46:47:9f:fb:bf:6e:35:d0:ec:f0:ca:ce:b2:07:c9:d3:4e:e9:
07:ae:6a:1f:fe:68:80:0b:af:ba:02:dd:f9:0f:9c:27:71:61:
05:0c:e5:f9:57:2b:6c:aa:93:c8:db:59:c8:26:22:e3:ae:8a:
bf:71:03:b5:2c:24:6a:5e:ab:a7:b5:34:0d:17:1e:38:35:d3:
7b:9e:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:36 2025 by rpki-client