Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4851a0-d1ed-4fb8-bd5f-1e24aad2acbc/1/k2YQ8X8VjslauYTJIFSFRId8Rnc.roa
File: k2YQ8X8VjslauYTJIFSFRId8Rnc.roa (raw, json)
Hash identifier: q6mytr6FJI5VcsMWKEOi5a39VanIL23RKymkPC3zLDU=
Subject key identifier: 93:66:10:F1:7F:15:8E:C9:5A:B9:84:C9:20:54:85:44:87:7C:46:77
Certificate issuer: /CN=c3dc0c14f757e5b7ff030a3fa04fdc8443ad7b3d
Certificate serial: 01856DA6425F7A98C1DFFBBF6780349A92DA
Authority key identifier: C3:DC:0C:14:F7:57:E5:B7:FF:03:0A:3F:A0:4F:DC:84:43:AD:7B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9wMFPdX5bf_Awo_oE_chEOtez0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4851a0-d1ed-4fb8-bd5f-1e24aad2acbc/1/k2YQ8X8VjslauYTJIFSFRId8Rnc.roa
Signing time: Sun 01 Jan 2023 14:04:50 +0000
ROA not before: Sun 01 Jan 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 62.3.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:42:5f:7a:98:c1:df:fb:bf:67:80:34:9a:92:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dc0c14f757e5b7ff030a3fa04fdc8443ad7b3d
Validity
Not Before: Jan 1 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=936610f17f158ec95ab984c920548544877c4677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:ea:74:ce:ba:f2:11:d3:90:f3:30:f0:5b:
c4:8d:15:8b:7f:83:b3:46:5e:a6:1b:09:6b:6e:55:
55:a3:c7:10:5a:2a:be:e2:68:5d:e3:9d:00:3c:7b:
8d:58:79:74:2c:16:cd:0e:48:a0:63:42:cd:8b:6c:
27:83:7b:c1:bc:0f:6e:65:50:c6:d0:90:fc:c9:2a:
09:83:c6:f4:34:fe:e5:c7:18:92:fc:ee:a9:26:fd:
c0:91:a1:23:a7:a7:85:01:b5:13:9c:f9:12:73:22:
8f:34:2e:30:5d:f3:41:00:4a:ba:3d:f1:68:39:ff:
8c:19:dc:5f:75:79:21:f6:0b:07:0a:f9:db:39:4e:
b2:b4:19:4d:ce:f0:7b:fa:ba:b5:0a:0d:63:97:c4:
38:93:75:59:01:1c:94:55:9f:7d:82:21:df:87:a2:
da:ef:99:a4:b3:dd:40:46:9c:5b:86:dd:80:9c:03:
14:0b:14:af:f5:2f:03:21:8d:bf:77:dd:90:f3:f0:
e2:79:eb:35:11:58:1e:61:73:5e:5d:37:09:c9:c0:
47:bd:64:35:7d:c6:45:88:78:5d:05:f5:7a:f7:bc:
82:f6:c2:9e:d4:bd:2d:1d:f1:2f:00:6e:f8:5e:92:
49:f5:cd:c2:d6:86:7f:b0:9d:b7:75:9a:d4:67:3d:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:10:F1:7F:15:8E:C9:5A:B9:84:C9:20:54:85:44:87:7C:46:77
X509v3 Authority Key Identifier:
keyid:C3:DC:0C:14:F7:57:E5:B7:FF:03:0A:3F:A0:4F:DC:84:43:AD:7B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9wMFPdX5bf_Awo_oE_chEOtez0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4851a0-d1ed-4fb8-bd5f-1e24aad2acbc/1/k2YQ8X8VjslauYTJIFSFRId8Rnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4851a0-d1ed-4fb8-bd5f-1e24aad2acbc/1/w9wMFPdX5bf_Awo_oE_chEOtez0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.53.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f5:7a:84:8b:08:30:f2:ea:e0:d9:5f:58:c8:a7:6a:b9:50:
c0:8a:2c:63:f6:a2:66:2a:74:11:46:6a:7f:78:64:89:40:17:
8e:2b:db:40:3e:62:51:8d:af:f0:33:01:31:4f:16:74:95:0f:
3d:b7:ee:ce:3c:c2:01:d4:7e:46:1e:f0:6b:fb:e4:5a:98:bb:
fb:34:1c:88:26:7b:f5:a8:57:9d:64:d0:70:a7:00:25:f3:71:
04:68:51:0e:c4:a0:3a:bc:b1:58:c5:c3:d2:6d:1a:58:9a:2f:
b0:af:d6:74:f9:16:3b:bc:73:0d:20:36:d7:fd:ce:d1:d7:18:
2c:e4:7a:aa:49:5a:aa:59:75:90:5b:b1:1a:60:d7:bb:25:3f:
a8:0b:22:8e:95:36:af:90:ed:96:b0:7e:3c:54:e5:3e:af:cd:
4e:ca:66:99:40:e5:76:b1:cc:32:4b:f2:af:f0:98:e4:8f:3f:
40:25:0d:af:4b:10:8f:a3:aa:73:20:b6:7b:83:60:5e:bb:8e:
eb:54:29:bc:39:8b:cf:a7:1b:9b:e3:8c:49:a3:0e:6d:2e:51:
92:6a:01:e7:4c:1a:c9:92:90:76:3a:f8:17:60:73:12:07:5e:
7d:90:ed:1b:11:11:ee:d5:ea:90:6d:6f:42:e4:2c:79:a8:29:
19:97:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:34 2025 by rpki-client