Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/O-DlvhqLf8DhCblzmTKm1S8x-V0.roa
File: O-DlvhqLf8DhCblzmTKm1S8x-V0.roa (raw, json)
Hash identifier: 7r2/v7IeuLo2NtfWlNUvH5j4Cr6xa4aHrtAmgC1D2eI=
Subject key identifier: 3B:E0:E5:BE:1A:8B:7F:C0:E1:09:B9:73:99:32:A6:D5:2F:31:F9:5D
Certificate issuer: /CN=8d6ff72d9bbc5eef67360bc717c54b2ba1b0b3e4
Certificate serial: 018B89A3D0237125ABA1BE9BC54DDE737274
Authority key identifier: 8D:6F:F7:2D:9B:BC:5E:EF:67:36:0B:C7:17:C5:4B:2B:A1:B0:B3:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jW_3LZu8Xu9nNgvHF8VLK6Gws-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/O-DlvhqLf8DhCblzmTKm1S8x-V0.roa
Signing time: Wed 01 Nov 2023 06:48:15 +0000
ROA not before: Wed 01 Nov 2023 06:48:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197715
IP address blocks: 62.106.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:a3:d0:23:71:25:ab:a1:be:9b:c5:4d:de:73:72:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6ff72d9bbc5eef67360bc717c54b2ba1b0b3e4
Validity
Not Before: Nov 1 06:48:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3be0e5be1a8b7fc0e109b9739932a6d52f31f95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:41:9f:2b:91:32:94:67:37:9d:98:3c:ea:
0f:76:fe:af:17:7e:f2:d7:66:73:21:0c:c7:3b:6f:
cc:9c:62:77:25:c2:15:04:91:0b:ed:71:a6:fa:3b:
10:d5:c0:9d:1d:97:59:21:d2:5b:0b:62:ca:3d:b7:
80:95:0f:86:4e:ed:a0:eb:1e:72:ab:20:e0:2b:53:
6a:a4:b7:62:bf:4e:2a:e7:16:62:59:8a:21:73:19:
04:cf:2b:01:6c:f1:63:8e:4a:a2:2d:fa:e3:8d:0c:
6e:cf:0f:9f:a3:eb:5c:21:4d:d3:30:a0:33:2d:a4:
2a:e2:cd:28:7e:4d:53:5d:b2:35:0c:a6:0e:a9:a0:
32:30:aa:f2:f5:a7:8d:2d:e0:de:87:2c:7a:b5:e7:
db:71:c1:c5:f6:fc:2e:78:56:a3:e3:a9:3f:bf:14:
3f:00:f7:0e:2d:bc:db:bd:5a:b7:33:2c:ee:4f:70:
b8:83:e0:72:d7:0c:f5:c7:0f:a2:45:40:59:65:c4:
4b:82:fc:b1:90:21:04:d1:da:c6:f5:e8:3c:eb:41:
74:4d:01:b3:8b:6d:97:19:fb:da:b9:6b:fe:e5:74:
60:78:78:2a:5a:94:07:c1:6c:c7:91:87:0a:e0:07:
ab:71:8e:98:71:57:85:9f:c1:1b:79:e8:98:31:91:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:E5:BE:1A:8B:7F:C0:E1:09:B9:73:99:32:A6:D5:2F:31:F9:5D
X509v3 Authority Key Identifier:
keyid:8D:6F:F7:2D:9B:BC:5E:EF:67:36:0B:C7:17:C5:4B:2B:A1:B0:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jW_3LZu8Xu9nNgvHF8VLK6Gws-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/O-DlvhqLf8DhCblzmTKm1S8x-V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/jW_3LZu8Xu9nNgvHF8VLK6Gws-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.89.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8c:75:4e:fd:d3:84:80:e6:f9:7b:23:ad:ed:17:a2:d6:7d:
f0:bb:44:9e:97:c2:16:7c:b5:aa:c5:72:4a:bf:e7:da:20:80:
7a:da:e6:1e:23:76:21:3d:d1:dd:2b:ae:92:71:1e:43:71:be:
40:b9:5d:3b:11:a3:95:17:0d:0a:20:da:64:d0:80:73:6f:c7:
9a:68:34:ee:8a:7d:5a:e4:15:b0:a0:3e:4e:52:da:14:1d:45:
e1:66:d4:ff:a1:2d:1a:15:c0:86:ed:aa:9d:50:8e:0a:79:28:
c9:cf:40:f0:55:9b:60:f7:5b:88:21:f8:8a:23:af:57:96:e6:
e0:4c:07:69:9f:77:6c:fc:f4:44:ed:34:ea:f5:62:26:24:b6:
35:ac:98:a7:b0:b2:81:ce:c6:51:b3:75:5c:09:0b:83:0c:6a:
15:7f:7f:ec:74:ef:72:d1:fb:ba:84:1b:db:84:2b:af:02:f1:
1a:40:46:17:f8:26:21:45:73:d7:3f:b0:a3:70:66:d5:a2:aa:
3b:3f:f9:fa:93:be:bd:bb:89:4e:b0:b8:d4:df:3d:1c:fa:6b:
10:d2:f1:25:d6:8b:82:cc:f2:c9:d7:7e:24:8f:26:4e:c1:b2:
02:00:4f:e7:17:4b:7e:70:cd:93:6e:5e:6e:a4:ca:ed:0f:17:
dd:88:60:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 15:22:21 2023 by rpki-client on console-fra.rpki-client.org