Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/tMB3_I0d7UjixX6Dd1yU_k9Cy-4.roa
File: tMB3_I0d7UjixX6Dd1yU_k9Cy-4.roa (raw, json)
Hash identifier: eMN2oK12TVMSE7kWXT4TxtuuuQt81gSzFnvBaVu3T7g=
Subject key identifier: B4:C0:77:FC:8D:1D:ED:48:E2:C5:7E:83:77:5C:94:FE:4F:42:CB:EE
Certificate issuer: /CN=e501fe097897739c5bf9b257313a76974e242556
Certificate serial: 01FA1D4A
Authority key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/tMB3_I0d7UjixX6Dd1yU_k9Cy-4.roa
Signing time: Thu 30 Jun 2022 03:50:02 +0000
ROA not before: Thu 30 Jun 2022 03:50:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 62.3.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33168714 (0x1fa1d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501fe097897739c5bf9b257313a76974e242556
Validity
Not Before: Jun 30 03:50:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4c077fc8d1ded48e2c57e83775c94fe4f42cbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:10:51:2f:8f:ba:74:21:a9:3c:fd:1b:e1:
d7:55:71:16:6b:6a:19:95:f8:2d:06:16:51:63:c2:
b9:9d:0a:3d:4c:5c:77:1a:c3:be:8e:ce:39:3a:0a:
2b:a1:52:f3:b2:16:bd:91:c3:b9:76:c6:1b:fc:d3:
7f:e6:7e:bb:a4:7f:2e:ab:01:08:53:9e:d9:a7:52:
ad:4a:0f:e6:3a:64:d2:c8:a5:67:02:d0:0b:b1:09:
6c:b0:a3:f4:4a:8d:72:49:0d:d3:27:83:3a:1f:9e:
81:7f:e4:b0:6c:07:5c:db:56:93:f1:d1:39:a7:95:
11:9e:2d:98:93:5d:8b:b5:91:10:8f:95:73:c6:1e:
26:7e:d7:2d:e0:44:f9:3b:27:7d:d1:b8:e7:d2:55:
63:ee:53:25:8d:c5:44:e2:75:fc:e4:0e:ec:46:84:
fb:c8:18:78:1c:d1:47:3f:fa:ae:6f:c9:56:9e:b1:
db:05:db:38:b7:1d:ff:7a:f0:a5:d2:d3:98:0a:98:
87:2e:c8:75:3a:18:bb:81:b5:16:d4:af:c9:5c:09:
1e:4b:90:af:7c:d9:4e:34:97:19:e7:ae:76:d7:a1:
1f:c3:b4:a0:1c:ce:1a:85:e8:7e:81:c3:22:03:47:
72:30:a4:72:dc:80:26:c3:84:00:0e:58:10:d2:7e:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:77:FC:8D:1D:ED:48:E2:C5:7E:83:77:5C:94:FE:4F:42:CB:EE
X509v3 Authority Key Identifier:
keyid:E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/tMB3_I0d7UjixX6Dd1yU_k9Cy-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.35.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:a1:fd:74:17:d4:63:30:ae:12:17:32:f8:73:78:68:c2:e5:
24:84:94:a8:ff:2c:68:fd:cd:ec:e7:3e:5d:ed:49:bd:c8:8f:
2e:e8:ce:3d:0b:a3:0b:bb:99:99:62:77:4a:63:3e:8e:fb:2e:
00:26:08:66:25:10:ad:bf:07:b2:f9:ac:0b:c9:60:78:39:71:
f8:a7:6a:e2:ba:fa:48:94:ea:ee:30:35:c4:c4:33:79:23:05:
27:e2:5d:c1:67:52:32:f3:e6:f4:b6:d4:3c:e3:f2:e8:ba:58:
b4:dd:1a:cc:50:1f:2b:a0:49:00:35:de:db:29:76:1a:02:65:
b8:62:5b:a3:d6:da:cd:d6:5f:d9:30:32:57:9c:84:fe:67:ea:
d8:97:65:51:5d:6e:75:90:41:2f:ca:f6:61:b5:c4:08:da:58:
5e:95:97:db:ce:fc:10:94:51:14:04:36:e0:97:62:3d:d2:c0:
25:7e:18:68:d3:5b:72:90:24:dd:9e:1a:a5:c3:09:ef:e2:e8:
b9:2e:e9:ee:46:0a:f6:d0:0d:68:fc:b6:07:83:4d:d3:c2:44:
24:6c:2a:81:a8:1f:61:01:d4:0f:9c:03:f1:aa:6d:57:db:19:
85:09:68:4b:d8:d5:ca:ae:92:a4:d3:99:0e:a6:30:c3:c8:91:
5e:00:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org