Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/veCaOtRBPyzMvYvtoM7mOCRxKNc.roa
File: veCaOtRBPyzMvYvtoM7mOCRxKNc.roa (raw, json)
Hash identifier: aShwS0ssKOCBhLroXv7dIZEtaEYyQ7WamdQGUYJS70k=
Subject key identifier: BD:E0:9A:3A:D4:41:3F:2C:CC:BD:8B:ED:A0:CE:E6:38:24:71:28:D7
Certificate issuer: /CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Certificate serial: 01856D019003D1EC5FBC95129804958EE3C3
Authority key identifier: 02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/veCaOtRBPyzMvYvtoM7mOCRxKNc.roa
Signing time: Sun 01 Jan 2023 11:04:57 +0000
ROA not before: Sun 01 Jan 2023 11:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 62.106.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:90:03:d1:ec:5f:bc:95:12:98:04:95:8e:e3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Validity
Not Before: Jan 1 11:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bde09a3ad4413f2cccbd8beda0cee638247128d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:93:37:48:5f:42:66:17:fa:2a:13:eb:3b:
7c:4b:b7:fb:5e:82:30:ac:81:98:1d:82:3b:78:1b:
af:3a:df:47:07:9a:b8:e6:0c:94:37:16:6b:d0:c5:
ef:f8:86:0c:52:57:f7:ec:b4:73:4d:0d:90:8a:29:
e0:10:c5:ab:b2:89:bd:a3:b7:cf:e6:5e:b4:83:fb:
41:21:09:4d:36:11:98:9b:0f:88:c6:c0:e3:7b:6e:
00:0e:94:2a:b1:5d:73:8e:7d:8e:0d:ce:56:86:a2:
e3:57:22:21:57:6e:e7:23:a4:76:17:36:73:5c:11:
fd:ca:6c:92:9b:42:01:ce:46:83:e7:88:70:46:ee:
13:03:f1:29:cb:4e:12:24:dd:14:6d:f3:8c:83:86:
4f:c8:c0:0a:68:0b:c0:46:fc:6d:e3:b4:42:c8:8f:
6b:64:08:fd:45:58:e3:b1:4e:72:af:a5:5b:40:5c:
74:14:4f:8f:41:97:4c:23:e2:38:46:82:cd:0a:ea:
73:58:f1:9c:9d:3c:73:7d:df:08:bf:54:1e:e9:a2:
e0:2c:12:55:11:11:77:f5:e4:56:c4:9d:42:7b:11:
e3:f0:1b:b1:cf:ab:1d:21:1f:fc:a7:e0:be:bd:9d:
14:e7:ab:3d:d9:ef:19:ec:85:60:cd:cf:0a:93:01:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E0:9A:3A:D4:41:3F:2C:CC:BD:8B:ED:A0:CE:E6:38:24:71:28:D7
X509v3 Authority Key Identifier:
keyid:02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/veCaOtRBPyzMvYvtoM7mOCRxKNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:35:a9:a6:a5:21:0f:02:9e:e6:32:2b:05:12:02:45:88:76:
14:99:d5:40:21:0b:c7:b5:0a:d4:a9:22:c3:67:06:85:a0:5c:
c2:e1:1b:fb:e0:51:e7:84:34:38:91:1e:c3:be:f7:96:f5:7a:
58:c9:cc:fc:80:20:21:37:88:53:79:2c:c7:30:54:da:1e:63:
50:c6:95:43:23:8c:d4:91:11:c2:4c:44:45:e8:ed:cb:39:fb:
50:1b:c8:cf:d1:a4:83:6f:e8:2c:cf:a7:cb:c3:82:59:ab:92:
54:bd:53:12:0e:a1:93:fb:73:29:8e:9f:18:b0:35:0f:03:f8:
83:51:df:b0:94:85:36:05:34:fe:97:b4:f0:58:7c:ed:21:e8:
13:0e:64:57:82:37:35:99:63:09:f6:1f:7a:71:c5:6b:f6:41:
8a:b2:6d:a4:33:57:0e:86:1f:7c:7f:13:ea:74:3e:b6:09:8c:
29:12:5d:ee:59:0c:dd:03:b0:53:a1:d7:58:05:92:58:20:a8:
ad:7b:e9:32:c8:44:21:e6:3b:2d:67:26:23:f1:35:8c:9c:12:
78:a4:a8:3f:12:e3:8e:c9:85:af:d0:43:36:41:31:4f:68:9b:
4c:f5:f5:23:8f:4e:11:6c:e4:91:3f:1f:c1:c6:39:8e:35:3b:
16:32:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:15 2024 by rpki-client on console-ams.rpki-client.org