Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/0SbxHsK_RdndqqDxl5WW0JzDYWA.roa
File: 0SbxHsK_RdndqqDxl5WW0JzDYWA.roa (raw, json)
Hash identifier: KeVmrM0UK4bpHBWjRrQaQdRlLyZ+BVV3c/6KPHjJRSk=
Subject key identifier: D1:26:F1:1E:C2:BF:45:D9:DD:AA:A0:F1:97:95:96:D0:9C:C3:61:60
Certificate issuer: /CN=3e5693737ef1b022185b36c68f7d337723d7cdfb
Certificate serial: 01856F9DC3A6CAC432F4FFC95EF06C20BBF1
Authority key identifier: 3E:56:93:73:7E:F1:B0:22:18:5B:36:C6:8F:7D:33:77:23:D7:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlaTc37xsCIYWzbGj30zdyPXzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/0SbxHsK_RdndqqDxl5WW0JzDYWA.roa
Signing time: Sun 01 Jan 2023 23:14:48 +0000
ROA not before: Sun 01 Jan 2023 23:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 62.68.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c3:a6:ca:c4:32:f4:ff:c9:5e:f0:6c:20:bb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5693737ef1b022185b36c68f7d337723d7cdfb
Validity
Not Before: Jan 1 23:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d126f11ec2bf45d9ddaaa0f1979596d09cc36160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:aa:46:7f:24:7f:96:00:f7:fd:4e:64:44:
09:a9:c3:42:cf:b7:02:fd:4f:ab:e5:c2:33:82:33:
65:e2:14:38:dc:e5:4c:ce:58:ef:23:ce:ab:3c:0c:
27:d2:45:81:d2:7e:fb:41:e7:41:8e:c3:f3:c7:96:
c9:fb:98:24:23:03:fb:ae:f2:25:5b:bb:48:47:6e:
9a:02:dd:ac:ff:3c:b3:2e:07:11:6e:0e:5b:1c:44:
54:f4:8f:b4:72:2d:3c:b4:67:a2:d4:c0:1b:05:fb:
5d:2c:5f:a4:21:75:16:7f:69:fb:99:3f:68:c9:e9:
d9:1b:37:43:45:ca:ab:68:a5:67:eb:c5:17:3e:cd:
65:cb:85:bd:3d:63:75:bd:83:91:68:21:56:3b:1e:
66:22:38:ca:26:04:80:86:0b:17:00:5f:67:cd:c3:
58:34:2b:f5:81:2d:20:d3:00:b8:60:41:84:3d:23:
92:f2:e8:fd:0b:9d:ee:1d:76:cd:3c:db:3c:91:49:
a5:87:67:84:4b:50:33:e7:28:ce:a7:33:b3:14:47:
8e:5a:a7:b2:83:37:c0:48:09:79:93:6d:0e:7b:2c:
fe:39:41:e7:c0:0b:64:4c:75:75:a5:b6:c2:5e:c3:
df:5a:43:72:0c:2b:cf:56:65:36:70:38:ce:a0:5d:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:26:F1:1E:C2:BF:45:D9:DD:AA:A0:F1:97:95:96:D0:9C:C3:61:60
X509v3 Authority Key Identifier:
keyid:3E:56:93:73:7E:F1:B0:22:18:5B:36:C6:8F:7D:33:77:23:D7:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlaTc37xsCIYWzbGj30zdyPXzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/0SbxHsK_RdndqqDxl5WW0JzDYWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/PlaTc37xsCIYWzbGj30zdyPXzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.87.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:1d:f0:01:d3:4d:d5:51:ae:f8:17:fe:dc:2a:11:85:4e:dd:
fc:c6:8d:57:14:60:ca:9c:35:5e:5e:26:64:69:fc:8d:c7:1a:
2b:3d:cc:f9:29:23:7f:75:b3:1b:79:0b:bc:6c:77:34:f9:38:
b3:ef:70:06:5b:6f:63:77:7c:d3:d5:46:04:84:60:df:bf:6f:
d3:31:bb:c5:b9:80:53:70:2c:bc:0b:fd:53:0d:8b:c6:cc:54:
5a:dd:d1:88:b0:46:0d:e5:15:f5:11:a2:96:f7:af:63:3d:0c:
50:7b:dc:ba:a6:0c:fb:ac:c7:33:7d:74:9d:50:84:02:4e:61:
05:af:67:cd:1e:2a:21:03:c2:7d:33:3a:be:ec:9e:75:b2:48:
05:e2:e6:2d:54:15:5b:18:14:2c:f3:11:2d:94:28:28:78:11:
4c:84:d0:58:8d:45:b6:e7:70:7a:ac:49:ba:30:33:09:a4:f6:
5a:57:83:1e:20:c6:4b:a5:dc:5f:f6:fa:c8:f9:70:12:a0:3a:
20:37:8a:d2:ab:ff:22:9e:68:b5:a7:07:2e:d1:dd:ab:10:fd:
c6:38:11:bb:d1:a7:59:87:3d:5b:1c:d4:5e:d0:97:37:da:e4:
0a:c8:61:96:d9:c4:f0:9f:ea:bd:d7:24:46:04:52:2d:ca:e7:
84:a7:b0:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvncOmysQy9P/JXvBsILvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNTY5MzczN2VmMWIwMjIxODViMzZjNjhmN2QzMzc3MjNk
N2NkZmIwHhcNMjMwMTAxMjMxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTI2ZjExZWMyYmY0NWQ5ZGRhYWEwZjE5Nzk1OTZkMDljYzM2MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDeqRn8kf5YA9/1OZEQJqcNCz7cC
/U+r5cIzgjNl4hQ43OVMzljvI86rPAwn0kWB0n77QedBjsPzx5bJ+5gkIwP7rvIl
W7tIR26aAt2s/zyzLgcRbg5bHERU9I+0ci08tGei1MAbBftdLF+kIXUWf2n7mT9o
yenZGzdDRcqraKVn68UXPs1ly4W9PWN1vYORaCFWOx5mIjjKJgSAhgsXAF9nzcNY
NCv1gS0g0wC4YEGEPSOS8uj9C53uHXbNPNs8kUmlh2eES1Az5yjOpzOzFEeOWqey
gzfASAl5k20Oeyz+OUHnwAtkTHV1pbbCXsPfWkNyDCvPVmU2cDjOoF3fDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEm8R7Cv0XZ3aqg8ZeVltCcw2FgMB8GA1UdIwQY
MBaAFD5Wk3N+8bAiGFs2xo99M3cj1837MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGxhVGMzN3hzQ0lZV3piR2ozMHpkeVBYemZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kODA5NTMtOWQyNi00YzViLWFlZDct
YjYzMGQ3ZTI3MDExLzEvMFNieEhzS19SZG5kcXFEeGw1V1cwSnpEWVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kODA5NTMtOWQyNi00YzViLWFlZDctYjYzMGQ3ZTI3MDEx
LzEvUGxhVGMzN3hzQ0lZV3piR2ozMHpkeVBYemZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRXMA0G
CSqGSIb3DQEBCwUAA4IBAQDGHfAB003VUa74F/7cKhGFTt38xo1XFGDKnDVeXiZk
afyNxxorPcz5KSN/dbMbeQu8bHc0+Tiz73AGW29jd3zT1UYEhGDfv2/TMbvFuYBT
cCy8C/1TDYvGzFRa3dGIsEYN5RX1EaKW969jPQxQe9y6pgz7rMczfXSdUIQCTmEF
r2fNHiohA8J9Mzq+7J51skgF4uYtVBVbGBQs8xEtlCgoeBFMhNBYjUW253B6rEm6
MDMJpPZaV4MeIMZLpdxf9vrI+XASoDogN4rSq/8inmi1pwcu0d2rEP3GOBG70adZ
hz1bHNRe0Jc32uQKyGGW2cTwn+q91yRGBFItyueEp7CC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org