Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/HbKq6x7z8I9wrn0As3SN1cnVDlI.roa
File: HbKq6x7z8I9wrn0As3SN1cnVDlI.roa (raw, json)
Hash identifier: vZnEbe4iTreX5KLq4nVhd9ovtutSZaSC1H1D4oLh7Dc=
Subject key identifier: 1D:B2:AA:EB:1E:F3:F0:8F:70:AE:7D:00:B3:74:8D:D5:C9:D5:0E:52
Certificate issuer: /CN=144ccce7224da99cbc5433da41cfd582fa60d3b6
Certificate serial: 0186D9DBE94F161FB568DEA6B80C24EDA863
Authority key identifier: 14:4C:CC:E7:22:4D:A9:9C:BC:54:33:DA:41:CF:D5:82:FA:60:D3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEzM5yJNqZy8VDPaQc_Vgvpg07Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/HbKq6x7z8I9wrn0As3SN1cnVDlI.roa
Signing time: Mon 13 Mar 2023 07:25:13 +0000
ROA not before: Mon 13 Mar 2023 07:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50267
IP address blocks: 62.106.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:db:e9:4f:16:1f:b5:68:de:a6:b8:0c:24:ed:a8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144ccce7224da99cbc5433da41cfd582fa60d3b6
Validity
Not Before: Mar 13 07:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1db2aaeb1ef3f08f70ae7d00b3748dd5c9d50e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:5c:02:33:b7:e9:ab:84:29:24:3a:f0:56:
04:99:45:ff:83:dd:69:4c:56:51:8c:9b:90:2e:45:
5c:61:25:da:5c:60:fe:f8:91:b6:bb:51:37:83:21:
ea:d5:c2:1e:d5:c3:1a:5c:17:a7:fa:5b:d5:c0:54:
48:3c:db:2d:00:55:7e:c2:99:f4:0a:6d:4a:ea:b4:
42:4b:b4:7b:6a:e6:d8:ce:be:04:fb:ee:33:6c:41:
45:1b:5e:c7:b7:3e:62:90:46:8a:88:f8:cc:c5:ea:
8a:ee:3b:22:2b:ee:6c:8b:be:ef:70:dc:81:f1:d6:
21:08:06:bd:1c:bc:e7:91:73:ed:18:e3:b7:f3:0d:
50:e7:e5:37:47:7b:9b:2a:3b:69:16:08:c3:dc:7b:
7e:52:1f:2b:0d:f6:dc:df:13:9b:34:8a:47:ee:3c:
e9:85:5e:6c:9a:3d:d2:ec:40:65:69:98:97:ec:21:
49:94:e8:58:33:0f:dd:0f:49:e2:b5:8b:b3:fc:2b:
f2:16:c0:26:a4:21:ec:fd:71:18:31:bc:20:43:5f:
0c:de:f9:35:da:6f:1a:d8:ec:c3:3a:ae:c9:89:fc:
be:3c:d3:c3:47:17:ff:74:22:1e:1d:3d:b2:5a:61:
2d:b1:74:b0:09:12:8c:b1:9d:1c:01:67:34:ed:f6:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B2:AA:EB:1E:F3:F0:8F:70:AE:7D:00:B3:74:8D:D5:C9:D5:0E:52
X509v3 Authority Key Identifier:
keyid:14:4C:CC:E7:22:4D:A9:9C:BC:54:33:DA:41:CF:D5:82:FA:60:D3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEzM5yJNqZy8VDPaQc_Vgvpg07Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/HbKq6x7z8I9wrn0As3SN1cnVDlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0d814f-d9f7-4d68-8bfc-3a1c25d83105/1/FEzM5yJNqZy8VDPaQc_Vgvpg07Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:bf:6a:a2:f1:25:00:d6:15:46:d9:2c:f5:db:52:a0:17:b3:
29:14:98:51:87:c0:f7:92:27:25:ba:9b:df:bc:3f:a0:26:56:
77:63:67:fe:02:51:51:4d:e9:4a:81:b3:9b:26:8a:28:02:fe:
b5:e6:df:04:e3:79:8c:b6:b9:64:ac:75:21:4b:01:84:0d:03:
dd:46:82:31:00:3d:05:8f:b1:1d:7a:d4:b2:28:ad:40:fa:18:
5d:d4:9d:f9:3a:8c:d3:ae:ad:01:ae:d8:e5:9c:4f:80:39:63:
1d:bf:a1:87:0a:c8:a1:5e:58:c3:99:3b:a4:26:9f:de:fc:09:
70:7a:28:18:6b:e0:65:38:ff:b7:7d:6f:32:f4:f2:ba:a1:86:
28:d2:43:fb:05:f4:fc:b8:b0:87:59:30:ad:d8:4f:78:6f:4e:
2d:a6:00:00:ba:a0:76:d4:f5:f4:ef:d9:2b:d7:18:7a:79:4f:
d3:2d:40:dc:f2:d2:5a:28:17:d6:da:bb:67:d9:77:7d:76:9b:
13:6d:81:92:16:2a:2d:28:66:c0:d6:47:d8:e3:1f:ef:84:ed:
96:91:13:d4:b0:81:d9:bf:84:73:9b:c8:32:8e:ca:1b:8a:d5:
ba:8f:6b:a9:50:b0:93:60:7b:25:4c:a3:9a:84:0f:6f:2f:b0:
a8:0f:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:19 2024 by rpki-client on console-fra.rpki-client.org