Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/LL8Rsolm4kKd93XvPrTc7vffBUY.roa
File: LL8Rsolm4kKd93XvPrTc7vffBUY.roa (raw, json)
Hash identifier: Zkq2ejTjnua9v7HRv+SpvQZ4EfMJd2jejB0CCty2wiY=
Subject key identifier: 2C:BF:11:B2:89:66:E2:42:9D:F7:75:EF:3E:B4:DC:EE:F7:DF:05:46
Certificate issuer: /CN=3e5693737ef1b022185b36c68f7d337723d7cdfb
Certificate serial: 018CC26D285165F282B12ACCC667AAB8635C
Authority key identifier: 3E:56:93:73:7E:F1:B0:22:18:5B:36:C6:8F:7D:33:77:23:D7:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlaTc37xsCIYWzbGj30zdyPXzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/LL8Rsolm4kKd93XvPrTc7vffBUY.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 62.68.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:51:65:f2:82:b1:2a:cc:c6:67:aa:b8:63:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5693737ef1b022185b36c68f7d337723d7cdfb
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cbf11b28966e2429df775ef3eb4dceef7df0546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:ef:17:7b:f3:91:22:52:62:bd:cb:ca:94:
b4:fb:c0:9d:1a:62:49:d9:ea:7a:65:fd:ef:66:9b:
02:c7:41:41:f0:42:df:51:81:81:fc:a4:a1:c0:3f:
9a:fd:ce:6f:e6:8e:b6:91:6a:54:de:1a:5b:14:90:
03:8b:97:32:59:22:73:83:53:30:18:6b:73:84:ea:
4d:ce:4b:64:e2:74:8e:6c:3f:30:86:d8:d2:46:17:
9e:35:90:c9:f3:21:16:6a:3e:7f:cd:c9:eb:ab:2a:
52:af:f4:70:63:34:d5:e4:24:77:ca:a5:33:53:e4:
07:cf:48:52:05:cc:94:a2:b0:61:e9:4f:36:b5:79:
f6:fb:da:7e:da:2a:f0:a2:95:c8:3d:42:1b:6d:c8:
ad:c6:76:7c:0c:78:b3:91:59:c3:23:49:0e:bd:2e:
fc:c7:6c:89:69:ad:e0:fe:b4:b6:c1:16:56:dd:90:
c3:3d:02:4e:1e:76:af:85:d8:88:e5:c9:04:bd:2f:
48:15:0d:32:d1:f9:ca:4a:02:e7:f4:8b:f2:7b:36:
b0:cb:3d:5d:e7:26:dc:1c:da:29:55:fd:3a:03:e7:
81:d5:1b:12:61:94:94:ca:2e:13:83:14:2a:9c:40:
7d:54:28:e8:f7:58:ee:19:91:ed:33:e3:09:b8:3c:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BF:11:B2:89:66:E2:42:9D:F7:75:EF:3E:B4:DC:EE:F7:DF:05:46
X509v3 Authority Key Identifier:
keyid:3E:56:93:73:7E:F1:B0:22:18:5B:36:C6:8F:7D:33:77:23:D7:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlaTc37xsCIYWzbGj30zdyPXzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/LL8Rsolm4kKd93XvPrTc7vffBUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/PlaTc37xsCIYWzbGj30zdyPXzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ce:c9:fa:87:10:77:77:02:8d:d8:fb:fa:39:bb:c7:46:b3:
85:c9:71:2c:da:2e:c3:02:d2:dc:37:03:0f:b2:5d:90:21:87:
74:5c:00:21:f0:01:35:e6:ad:4b:ce:71:fd:25:12:9e:b1:cc:
36:1d:17:d4:c1:82:a8:b6:e5:48:58:d4:c8:29:f5:fc:d8:49:
da:75:66:8d:85:72:91:6f:fd:90:ac:42:5e:75:23:de:24:b5:
f0:17:c5:ee:1c:de:ae:f5:27:36:3d:43:37:79:ba:3b:7c:24:
52:e4:c7:33:1b:6d:33:23:16:19:21:ec:d7:87:8f:47:80:3b:
c7:ea:51:6b:44:9a:8a:a4:33:0f:91:a3:80:af:f1:94:ec:ae:
02:0d:5f:49:b9:2a:6f:bd:35:b3:6e:a0:07:c4:17:76:74:8b:
46:5a:01:ba:a1:09:01:4b:19:d1:76:57:3b:3e:69:3c:f5:26:
a9:b8:c0:ef:1d:8d:68:0a:15:4e:97:b7:71:b2:81:32:32:50:
61:a7:92:f9:82:17:ba:40:97:4d:46:ff:e0:0c:d2:07:c4:db:
da:b3:0d:e3:96:60:db:5b:bb:51:7a:86:81:23:15:31:15:5d:
f4:0e:1b:ad:96:89:31:e8:df:eb:28:f8:d7:2f:b1:82:50:fa:
49:94:8f:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbShRZfKCsSrMxmequGNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNTY5MzczN2VmMWIwMjIxODViMzZjNjhmN2QzMzc3MjNk
N2NkZmIwHhcNMjQwMTAxMDAyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2JmMTFiMjg5NjZlMjQyOWRmNzc1ZWYzZWI0ZGNlZWY3ZGYwNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnnvF3vzkSJSYr3LypS0+8CdGmJJ
2ep6Zf3vZpsCx0FB8ELfUYGB/KShwD+a/c5v5o62kWpU3hpbFJADi5cyWSJzg1Mw
GGtzhOpNzktk4nSObD8whtjSRheeNZDJ8yEWaj5/zcnrqypSr/RwYzTV5CR3yqUz
U+QHz0hSBcyUorBh6U82tXn2+9p+2irwopXIPUIbbcitxnZ8DHizkVnDI0kOvS78
x2yJaa3g/rS2wRZW3ZDDPQJOHnavhdiI5ckEvS9IFQ0y0fnKSgLn9Ivyezawyz1d
5ybcHNopVf06A+eB1RsSYZSUyi4TgxQqnEB9VCjo91juGZHtM+MJuDzqAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCy/EbKJZuJCnfd17z603O733wVGMB8GA1UdIwQY
MBaAFD5Wk3N+8bAiGFs2xo99M3cj1837MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGxhVGMzN3hzQ0lZV3piR2ozMHpkeVBYemZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kODA5NTMtOWQyNi00YzViLWFlZDct
YjYzMGQ3ZTI3MDExLzEvTEw4UnNvbG00a0tkOTNYdlByVGM3dmZmQlVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kODA5NTMtOWQyNi00YzViLWFlZDctYjYzMGQ3ZTI3MDEx
LzEvUGxhVGMzN3hzQ0lZV3piR2ozMHpkeVBYemZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRXMA0G
CSqGSIb3DQEBCwUAA4IBAQB7zsn6hxB3dwKN2Pv6ObvHRrOFyXEs2i7DAtLcNwMP
sl2QIYd0XAAh8AE15q1LznH9JRKescw2HRfUwYKotuVIWNTIKfX82EnadWaNhXKR
b/2QrEJedSPeJLXwF8XuHN6u9Sc2PUM3ebo7fCRS5MczG20zIxYZIezXh49HgDvH
6lFrRJqKpDMPkaOAr/GU7K4CDV9JuSpvvTWzbqAHxBd2dItGWgG6oQkBSxnRdlc7
Pmk89SapuMDvHY1oChVOl7dxsoEyMlBhp5L5ghe6QJdNRv/gDNIHxNvasw3jlmDb
W7tReoaBIxUxFV30Dhutlokx6N/rKPjXL7GCUPpJlI/a
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org