Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/6APhXlY3h9-ld56Dt6zDv_z2OeI.roa
File: 6APhXlY3h9-ld56Dt6zDv_z2OeI.roa (raw, json)
Hash identifier: Z/+fDfT/+QjAOd8BJNqXxNtHJi4w0s6hyD45JzWHqVg=
Subject key identifier: E8:03:E1:5E:56:37:87:DF:A5:77:9E:83:B7:AC:C3:BF:FC:F6:39:E2
Certificate issuer: /CN=e501fe097897739c5bf9b257313a76974e242556
Certificate serial: 018446987DE70C2B9B2F33A55F61210F7614
Authority key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/6APhXlY3h9-ld56Dt6zDv_z2OeI.roa
Signing time: Sat 05 Nov 2022 07:01:49 +0000
ROA not before: Sat 05 Nov 2022 07:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 62.3.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:98:7d:e7:0c:2b:9b:2f:33:a5:5f:61:21:0f:76:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501fe097897739c5bf9b257313a76974e242556
Validity
Not Before: Nov 5 07:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e803e15e563787dfa5779e83b7acc3bffcf639e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:aa:06:6a:e3:e8:8b:0a:00:00:40:2b:e6:
ec:60:3c:28:a4:d0:96:cc:df:2c:2a:03:cf:61:64:
78:88:c2:e8:bc:d6:19:24:e8:5d:5f:62:75:26:5a:
4b:0f:0c:4c:72:00:4e:e4:d8:64:6b:ba:d2:ee:f7:
09:a5:46:25:2f:46:de:49:a6:4b:85:ac:fe:0c:52:
35:c1:cd:4c:9a:4f:28:b6:a7:c7:60:cd:e8:8c:1f:
68:1d:e0:3a:5d:9d:d5:0c:85:cf:0d:bf:51:3a:d5:
43:62:e7:bd:48:ab:a1:55:65:4a:6f:2a:7d:83:cb:
1f:15:c3:a0:e9:0b:c9:ce:5e:f8:7d:7a:22:49:e0:
e5:9d:81:8a:79:82:42:23:04:be:ee:ae:60:77:c7:
76:64:18:45:4b:3f:42:f3:a0:22:a3:a0:7b:c9:78:
bf:8b:b6:99:8e:2a:6c:0d:d4:2e:e9:a4:3a:a6:10:
ac:d3:8f:e9:5d:80:31:c1:2e:fb:2d:70:b9:60:64:
4b:9b:f7:cc:15:ef:b3:ef:b1:12:ae:ef:13:16:c4:
72:d9:1e:76:33:01:da:69:ae:a1:16:da:3a:82:a4:
9a:2f:cf:be:f5:f9:9e:57:ab:30:5e:90:1a:19:21:
ee:da:b7:38:63:17:6d:d4:fc:3d:9b:24:55:54:8b:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:03:E1:5E:56:37:87:DF:A5:77:9E:83:B7:AC:C3:BF:FC:F6:39:E2
X509v3 Authority Key Identifier:
keyid:E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/6APhXlY3h9-ld56Dt6zDv_z2OeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.35.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:57:12:02:5c:54:c0:84:6d:03:85:68:c6:51:ad:55:ec:f6:
2c:8c:59:eb:9b:70:24:38:65:e2:42:af:3e:ce:0d:60:8b:45:
4f:44:3f:c4:6e:f0:8b:96:41:2b:0a:df:71:fd:cf:4e:38:ce:
7e:01:43:fb:8c:26:7c:9d:5e:dc:11:a1:75:70:35:25:cc:78:
0a:f9:cb:78:0a:c5:c1:4d:16:f4:5c:b2:33:28:04:01:53:ea:
13:0b:0a:44:10:ae:a4:02:35:91:cc:a4:b0:75:6f:81:df:f0:
fa:2e:7a:36:b3:9c:cd:fe:fe:7a:b8:ca:45:c2:25:a9:35:f6:
2e:59:91:b2:08:b6:d5:b8:51:83:d9:39:fc:da:25:bc:17:32:
e1:eb:68:a9:6c:a8:f5:fb:db:5c:5e:7c:a8:15:d4:e9:2f:1b:
fc:ed:27:c6:85:34:8b:4f:85:fe:42:23:ad:97:17:70:af:3a:
f1:ba:57:7b:72:8f:eb:cf:40:36:54:41:7c:3e:ad:51:a0:32:
b8:6e:37:8f:67:8e:4e:92:da:1d:e5:f1:57:bb:b4:3d:c3:09:
48:3a:59:66:78:80:9c:a2:c1:55:2a:5a:46:87:b5:3b:10:7e:
c2:dc:d6:19:cb:47:c1:a1:aa:96:ae:55:80:47:75:2e:11:6f:
1d:7a:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org