Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/K4QmScIE6wN2VkUvjcnuLFNSabE.roa
File: K4QmScIE6wN2VkUvjcnuLFNSabE.roa (raw, json)
Hash identifier: W6GV52K0GuLIaT62KLj9mzCq7X/tzm6h9vzB8NzNl/0=
Subject key identifier: 2B:84:26:49:C2:04:EB:03:76:56:45:2F:8D:C9:EE:2C:53:52:69:B1
Certificate issuer: /CN=243603eff76daf94542f23d560f9fca579ac97ed
Certificate serial: 018706870F24CEA5445A0963D73050BF9B32
Authority key identifier: 24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/K4QmScIE6wN2VkUvjcnuLFNSabE.roa
Signing time: Tue 21 Mar 2023 23:35:27 +0000
ROA not before: Tue 21 Mar 2023 23:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 62.106.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:87:0f:24:ce:a5:44:5a:09:63:d7:30:50:bf:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=243603eff76daf94542f23d560f9fca579ac97ed
Validity
Not Before: Mar 21 23:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b842649c204eb037656452f8dc9ee2c535269b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:96:dc:e9:1b:3c:2b:6c:c3:ab:00:52:58:
70:0d:b5:74:49:db:de:56:77:0e:ee:e8:60:04:d8:
c2:5a:5f:cc:4e:bc:b9:b0:35:cd:e2:85:66:58:55:
46:2b:48:a9:55:79:48:77:03:a9:86:17:44:ff:0b:
1b:1c:2e:92:b7:5e:ee:90:01:80:af:1f:bb:39:c1:
ff:c0:1e:d7:c4:41:d6:e1:a8:22:43:af:b1:0a:ed:
41:ee:f5:f7:46:cb:ea:ae:67:0d:76:68:ce:aa:97:
c2:21:7b:95:53:cd:cf:58:24:12:a9:0f:9a:ea:ce:
21:fe:b0:e0:c1:bc:c8:9f:33:21:e6:97:42:90:13:
bc:d1:7f:97:dc:f6:5c:7d:09:c6:b8:47:cf:50:e2:
be:d7:ee:f3:ba:e2:4c:20:0f:b6:01:9f:a0:1e:24:
50:b3:df:60:95:20:97:2d:5a:aa:11:df:8d:56:72:
7d:f8:8e:16:80:83:bf:1c:81:9f:d5:c1:01:ee:8f:
14:6f:d5:ca:8f:27:f7:bb:b1:16:db:56:c2:75:1f:
7c:29:19:74:02:8a:e8:f4:11:d7:c9:61:70:e8:80:
e7:89:5a:8e:22:1f:39:67:c5:3b:8a:96:65:ee:db:
c1:19:c5:22:5d:b9:4a:9f:89:f8:8e:36:13:af:e9:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:84:26:49:C2:04:EB:03:76:56:45:2F:8D:C9:EE:2C:53:52:69:B1
X509v3 Authority Key Identifier:
keyid:24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/K4QmScIE6wN2VkUvjcnuLFNSabE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/JDYD7_dtr5RULyPVYPn8pXmsl-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e0:4c:56:1d:50:a4:e7:82:e1:94:5a:09:3f:0b:7f:ed:68:
9c:29:59:7b:47:1b:42:93:5b:8a:6b:83:8f:fb:c0:8e:a4:e4:
7d:eb:1f:e1:b5:1f:b8:c2:e2:d5:11:8b:5b:15:59:9b:f8:1f:
28:7c:8b:7d:c9:db:87:f2:01:7e:37:b4:e3:69:ce:74:99:03:
09:50:3b:1b:2a:77:b1:13:0d:a4:72:b0:97:4c:d2:cf:9d:f5:
57:f4:40:c9:b2:14:15:f2:68:e0:b9:c8:bc:97:e3:16:15:db:
ee:5c:1f:64:08:64:1c:df:b7:8d:5d:0d:0f:fb:4c:d8:78:0c:
0f:52:ea:42:82:db:85:f8:43:b4:c6:24:e2:8d:4c:fb:a8:54:
37:72:0c:89:f3:6e:8d:b1:a4:6d:a5:4a:6a:d9:0e:8e:05:54:
15:d5:88:b6:2c:0d:56:66:28:10:0b:ef:23:76:32:ed:92:f9:
74:64:e1:97:9c:fb:b2:25:95:84:c5:b9:55:a8:8f:57:8d:b6:
4c:8d:b4:12:ce:61:6d:49:61:e4:cc:28:37:8c:7c:51:90:28:
86:4a:fc:62:dc:92:dc:bb:c8:5d:87:a7:20:d0:86:d9:97:98:
32:bf:ca:e0:7b:b8:a9:7e:75:9e:76:30:47:fd:b4:97:19:4c:
7a:46:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:31 2025 by rpki-client