Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/iJq7KuI9V-z5rE8BJUG0t5IhuQw.roa
File: iJq7KuI9V-z5rE8BJUG0t5IhuQw.roa (raw, json)
Hash identifier: QQAtbf0tSqb9kxA7Ehsn3m2DcrCRyLdh/t7z8p/wOl4=
Subject key identifier: 88:9A:BB:2A:E2:3D:57:EC:F9:AC:4F:01:25:41:B4:B7:92:21:B9:0C
Certificate issuer: /CN=c1cf5c1ef95344a7852f3e737bfff3da69b54269
Certificate serial: 01882086B3BDF38317142CE1FEBD808A980F
Authority key identifier: C1:CF:5C:1E:F9:53:44:A7:85:2F:3E:73:7B:FF:F3:DA:69:B5:42:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc9cHvlTRKeFLz5ze__z2mm1Qmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/iJq7KuI9V-z5rE8BJUG0t5IhuQw.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 62.106.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b3:bd:f3:83:17:14:2c:e1:fe:bd:80:8a:98:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cf5c1ef95344a7852f3e737bfff3da69b54269
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=889abb2ae23d57ecf9ac4f012541b4b79221b90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:a1:f4:67:e3:59:16:eb:6f:d3:a3:f6:52:
2a:d9:f1:9d:4e:b7:32:9d:6e:24:6f:50:e9:21:c5:
e7:96:95:b1:37:45:9c:db:11:81:56:14:0c:1d:66:
2d:c1:e0:14:53:cc:7e:88:9b:22:5c:20:01:47:e6:
43:18:61:e3:e9:42:da:3e:b4:ff:a8:d0:d9:8b:86:
8f:f1:80:bf:01:55:16:26:fb:2f:d3:1a:79:d6:b1:
06:1e:a4:a8:02:b5:ff:d0:4a:6d:e0:4f:2e:60:c0:
5d:93:84:1f:93:71:c9:b5:f0:45:ad:2e:80:3d:56:
7c:cc:ab:53:3c:c4:ce:00:77:40:92:53:26:20:d3:
bc:5c:86:7b:0f:1f:9e:4f:da:50:0e:d2:23:71:18:
1a:96:74:88:56:f5:3a:53:ed:a6:77:58:fc:a2:98:
d5:94:e3:2c:d4:a0:1d:e1:43:2b:be:5c:c2:5a:87:
56:a0:ad:04:9d:76:1b:db:30:d2:a2:05:4a:12:7f:
db:59:15:36:3c:d2:cb:f8:a6:6e:77:11:ef:e9:3b:
86:f9:7e:7b:05:51:45:6f:1f:47:31:67:b9:e0:09:
87:31:ce:e5:f7:97:eb:ad:7c:97:08:1a:1c:db:4f:
9e:dd:8a:d7:cf:ba:c3:34:de:ed:9a:75:44:91:d1:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9A:BB:2A:E2:3D:57:EC:F9:AC:4F:01:25:41:B4:B7:92:21:B9:0C
X509v3 Authority Key Identifier:
keyid:C1:CF:5C:1E:F9:53:44:A7:85:2F:3E:73:7B:FF:F3:DA:69:B5:42:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc9cHvlTRKeFLz5ze__z2mm1Qmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/iJq7KuI9V-z5rE8BJUG0t5IhuQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/wc9cHvlTRKeFLz5ze__z2mm1Qmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9c:e1:27:4c:62:38:6b:31:3d:96:7d:ca:e4:1b:99:26:5b:
f8:de:a5:87:9a:38:e7:77:8b:17:67:eb:21:2f:7e:3e:83:8c:
db:b1:4d:44:ca:d6:89:3a:f3:16:0d:fe:cb:83:63:87:ac:d2:
08:21:c6:14:52:23:4a:49:40:4c:48:dd:61:ef:0d:48:c4:d5:
76:a7:9b:42:07:04:64:3a:a0:f0:3e:52:9f:2d:55:dd:1f:47:
0a:8a:3f:ba:ab:8f:a6:7d:04:16:55:95:79:43:61:3c:7a:d6:
11:72:2d:ec:10:d8:dd:ba:69:9d:b5:1f:9f:21:51:4e:a1:50:
1c:9c:78:8e:fe:b8:a3:2c:a9:0d:cc:24:2e:f7:f5:a8:99:28:
ca:4e:d6:99:88:51:d1:d0:97:7d:a8:2b:96:d6:e2:da:2c:b1:
98:a1:c8:2b:88:45:23:39:1d:bc:af:0e:91:0b:e5:55:13:70:
b0:7d:58:88:bd:2e:33:36:59:a5:5c:54:28:f3:64:2e:ab:45:
0c:79:a3:17:eb:77:4a:bc:dd:43:98:d2:4a:19:71:b6:38:43:
42:46:ae:96:ef:57:99:01:78:aa:32:46:35:59:31:6e:49:41:
2f:d1:ad:59:5d:46:1f:26:a2:a2:33:bc:0b:1d:ee:b8:d6:5c:
09:5c:86:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:10 2025 by rpki-client