Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/DFPFXta21as4NEpN2OPTGT43naQ.roa
File: DFPFXta21as4NEpN2OPTGT43naQ.roa (raw, json)
Hash identifier: UCJHSyKjvf6td8B5r8ejqO4sQ4jj0S0dXq734H0NjBs=
Subject key identifier: 0C:53:C5:5E:D6:B6:D5:AB:38:34:4A:4D:D8:E3:D3:19:3E:37:9D:A4
Certificate issuer: /CN=75620e5666518bb700409fb4087a875c99f37211
Certificate serial: 018B01062E0A3682EE1EE93A17B59C493B8A
Authority key identifier: 75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/DFPFXta21as4NEpN2OPTGT43naQ.roa
Signing time: Thu 05 Oct 2023 18:07:43 +0000
ROA not before: Thu 05 Oct 2023 18:07:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 62.106.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:06:2e:0a:36:82:ee:1e:e9:3a:17:b5:9c:49:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75620e5666518bb700409fb4087a875c99f37211
Validity
Not Before: Oct 5 18:07:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c53c55ed6b6d5ab38344a4dd8e3d3193e379da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c6:f1:4a:5f:6c:0d:31:00:a1:7d:83:ef:94:
a9:9e:fc:26:57:f4:14:ef:09:3c:75:b7:9c:e1:45:
86:35:cb:7d:61:75:92:67:b2:0d:f9:16:89:06:9f:
03:88:12:c8:52:e7:29:33:ba:b2:07:35:95:9c:1e:
28:99:6f:05:67:4c:8b:41:ad:a1:1c:76:7f:b9:e0:
2b:89:35:fa:16:03:74:da:29:93:58:87:09:9b:56:
68:39:af:89:f0:63:61:42:b0:06:a0:a9:10:2d:06:
dd:48:f4:17:97:40:af:a9:13:fb:bd:12:a1:46:1c:
fa:c4:c8:c7:68:a3:5b:f5:7c:7d:60:7e:bc:2e:aa:
11:b7:a2:b2:f0:27:b8:5b:6d:94:88:2e:01:39:67:
54:82:a6:4b:5f:66:9b:bf:f1:96:a6:4a:4d:25:a4:
0a:92:fe:93:48:27:bb:3d:0c:ab:f5:3b:ff:b6:36:
e8:c9:56:da:dd:b9:c1:30:76:53:0e:2f:08:73:6c:
8c:63:60:54:2d:53:f6:72:50:ad:5c:2d:dd:cd:fe:
b4:24:a7:83:a5:50:c0:ad:b2:ad:75:0c:2f:6e:c0:
0b:de:3e:0b:4e:23:db:f3:a6:c6:eb:9f:4b:0f:16:
2c:a6:71:8e:8b:63:94:95:c0:f2:4b:ad:c7:90:25:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:53:C5:5E:D6:B6:D5:AB:38:34:4A:4D:D8:E3:D3:19:3E:37:9D:A4
X509v3 Authority Key Identifier:
keyid:75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/DFPFXta21as4NEpN2OPTGT43naQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:a8:29:43:64:92:6d:6a:49:b7:a3:5b:c8:57:c2:e0:3d:aa:
02:ec:5d:f1:c9:f8:7f:d9:ea:a0:a8:c9:81:ea:89:f5:a4:9e:
95:4e:cd:87:48:b5:95:23:dd:72:58:f3:8d:b8:14:c0:f9:b1:
40:13:72:7e:5c:f4:1c:36:7f:86:86:56:e8:96:9d:fc:83:a6:
59:9b:cd:58:17:e9:7e:0f:de:68:c2:46:0e:47:07:e3:71:08:
13:eb:19:dd:30:f1:0d:31:a4:78:45:15:1f:77:8b:12:69:8e:
02:5d:49:ae:69:f4:ff:4b:b4:57:60:2f:e0:0b:93:67:c1:64:
45:ac:ab:fc:75:11:25:4c:90:b6:0e:c5:60:64:45:e6:12:ad:
dc:ca:fc:fb:aa:6a:79:d7:a0:1d:04:c3:fe:dd:49:7d:60:71:
5d:ff:43:d4:60:e1:8c:8f:1d:6d:22:a9:b1:13:72:14:1a:55:
50:7d:8e:52:96:66:f8:49:9f:82:b8:39:fe:ca:96:ca:de:55:
18:cc:1b:3c:35:32:c7:e6:6a:32:42:53:4b:e8:db:7d:a0:32:
58:e3:c1:20:d1:72:e3:fe:4e:bb:d8:8f:a9:cb:de:67:90:ef:
fc:65:f5:d6:29:f4:1d:3d:e0:83:17:f4:06:17:6b:23:23:06:
81:ab:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 13:01:03 2023 by rpki-client on console-fra.rpki-client.org