Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/2TJmZ7doj1yV980pFCVRkrUU0yw.roa
File: 2TJmZ7doj1yV980pFCVRkrUU0yw.roa (raw, json)
Hash identifier: IXpWReqIaF7RHOXYEO4IesLPjBKO0JnmQQc34m9hMko=
Subject key identifier: D9:32:66:67:B7:68:8F:5C:95:F7:CD:29:14:25:51:92:B5:14:D3:2C
Certificate issuer: /CN=51b365732103ca64a5885e5b90f8edada08e2884
Certificate serial: 0186B3836F9EE202708FA949301AE09C4641
Authority key identifier: 51:B3:65:73:21:03:CA:64:A5:88:5E:5B:90:F8:ED:AD:A0:8E:28:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNlcyEDymSliF5bkPjtraCOKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/2TJmZ7doj1yV980pFCVRkrUU0yw.roa
Signing time: Sun 05 Mar 2023 20:43:00 +0000
ROA not before: Sun 05 Mar 2023 20:43:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 62.122.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:83:6f:9e:e2:02:70:8f:a9:49:30:1a:e0:9c:46:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b365732103ca64a5885e5b90f8edada08e2884
Validity
Not Before: Mar 5 20:43:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9326667b7688f5c95f7cd2914255192b514d32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:82:4b:fa:b3:29:43:2f:4e:66:86:5d:79:
e2:b8:68:e0:99:c7:c5:f6:c8:ff:f0:8e:22:65:f0:
45:0b:e4:51:3f:8b:00:bf:c8:8b:af:a1:3d:b8:22:
38:2c:a0:6c:07:ee:1a:96:75:fe:5b:9c:94:1e:17:
d0:78:47:cf:e0:2a:7a:73:f2:a3:ca:d2:f0:ac:12:
7b:95:38:bc:f6:e3:ff:f5:35:92:78:75:27:75:c4:
10:e8:6d:e3:f1:9c:bb:8a:a2:42:12:80:29:59:49:
6d:bc:e4:7d:83:fd:3c:93:0a:45:25:28:26:aa:05:
b1:ac:27:fb:a4:fa:17:60:c9:a3:e5:be:db:fd:4f:
ca:9b:fc:90:90:59:5a:7b:a7:44:f6:8e:e8:6e:35:
c1:57:4c:8a:34:7c:e1:06:31:22:54:97:26:0c:f4:
d4:ad:88:3e:80:15:37:77:f4:d7:e1:d6:60:62:62:
ea:2d:05:c8:4a:65:0e:3d:3b:5a:2d:78:7b:87:83:
58:46:35:ff:48:19:42:ea:3a:54:25:f9:ff:9a:45:
ce:b0:c1:ea:c3:8d:31:62:79:8c:d7:4c:87:5a:8f:
86:06:b1:39:26:d0:ef:27:48:11:db:0b:54:22:4d:
23:62:75:99:7a:3b:7b:fd:bb:88:f9:27:de:af:32:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:66:67:B7:68:8F:5C:95:F7:CD:29:14:25:51:92:B5:14:D3:2C
X509v3 Authority Key Identifier:
keyid:51:B3:65:73:21:03:CA:64:A5:88:5E:5B:90:F8:ED:AD:A0:8E:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNlcyEDymSliF5bkPjtraCOKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/2TJmZ7doj1yV980pFCVRkrUU0yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/UbNlcyEDymSliF5bkPjtraCOKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a8:17:31:d5:a6:b8:04:6d:02:5b:a9:e4:d8:41:3e:54:d4:
8b:df:3e:ab:24:0d:e4:ac:6b:dd:e0:58:0a:71:ee:fb:16:31:
c2:d1:b6:87:3a:85:5b:3a:08:ba:51:c9:4c:14:d1:60:0d:4a:
25:b7:ad:b9:4e:d9:cf:47:a3:60:d0:a2:eb:79:b0:c6:de:69:
31:fd:7b:c4:7f:f0:0b:b6:bd:5f:59:f5:61:00:08:5c:7a:3f:
95:b5:1d:ab:eb:83:60:4b:af:38:a0:34:ed:e0:f4:21:92:c6:
50:a8:1b:b8:fb:60:2b:43:58:75:0d:d8:94:83:28:a3:d8:1d:
a1:e3:0d:7f:77:cf:29:0f:a0:87:3e:b0:8a:da:7b:b9:ab:eb:
68:43:5a:4d:dc:8a:0d:36:df:1a:5e:fe:5a:25:14:16:9b:6c:
5a:31:bf:e4:2b:78:3d:8f:06:37:db:62:08:dd:06:96:a3:fd:
af:47:95:1e:1f:29:45:7f:1d:d7:7a:31:7c:62:63:8e:66:45:
61:62:44:b8:d9:2d:6b:34:d6:e1:af:95:24:bb:02:3c:89:61:
56:98:c5:c6:71:8c:17:30:05:0d:99:aa:53:5e:da:3c:3d:e2:
b1:19:f2:e0:d8:f2:47:e1:9e:48:75:7a:84:1f:22:14:0f:2e:
b1:48:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:36 2025 by rpki-client