Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/Cj4GWeUtlDF_5KFoEUr0yEal4K4.roa
File: Cj4GWeUtlDF_5KFoEUr0yEal4K4.roa (raw, json)
Hash identifier: kc6l3NmeAAQoHwG4xpwU7yPUdCtyynNArM/c5QvgkLE=
Subject key identifier: 0A:3E:06:59:E5:2D:94:31:7F:E4:A1:68:11:4A:F4:C8:46:A5:E0:AE
Certificate issuer: /CN=71a66a84521f6f29f6f5da7c2e4f446dcf340151
Certificate serial: 81E86E
Authority key identifier: 71:A6:6A:84:52:1F:6F:29:F6:F5:DA:7C:2E:4F:44:6D:CF:34:01:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caZqhFIfbyn29dp8Lk9Ebc80AVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/Cj4GWeUtlDF_5KFoEUr0yEal4K4.roa
Signing time: Sat 01 Jan 2022 00:55:53 +0000
ROA not before: Sat 01 Jan 2022 00:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 62.204.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8513646 (0x81e86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a66a84521f6f29f6f5da7c2e4f446dcf340151
Validity
Not Before: Jan 1 00:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a3e0659e52d94317fe4a168114af4c846a5e0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:53:52:7d:71:f5:a5:70:fc:22:df:7a:dd:
da:39:b0:dd:26:74:05:cb:be:a6:e6:84:be:f2:a5:
2a:43:93:46:df:87:2f:e2:cb:f1:e1:a8:9e:ba:a8:
1d:2b:ef:77:a2:73:cb:5a:e7:f5:b6:44:12:bb:91:
1d:13:de:99:71:0b:8a:fe:ad:f6:97:70:ea:d8:31:
14:22:72:bc:34:87:8f:50:ff:61:cc:2e:de:c7:7d:
59:cf:e3:a5:1b:f3:f3:b2:bd:33:45:4c:1c:a3:09:
f0:41:39:7d:d2:e0:44:0c:57:62:fe:31:95:e1:c5:
1c:7c:08:ed:e0:8e:28:df:44:5f:61:eb:6d:fc:1f:
8d:3d:94:33:41:65:a3:a4:47:44:54:1e:8e:25:3d:
f0:28:df:20:31:67:75:d5:bc:87:6b:58:50:fa:0f:
c6:32:05:56:c3:62:fc:21:48:0d:63:f6:3c:81:85:
30:f8:cc:8e:95:c4:25:29:fb:e2:b1:54:68:a2:07:
9a:ab:37:10:56:cd:24:b8:d0:3a:1d:cc:be:b2:69:
44:30:c3:02:2f:b7:f9:b8:df:5c:72:fc:6a:ad:16:
2c:07:99:8c:f2:22:11:00:6d:d7:12:4d:f5:c2:67:
9a:78:82:3f:da:dd:b9:b3:68:09:d1:0d:08:1d:f9:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:06:59:E5:2D:94:31:7F:E4:A1:68:11:4A:F4:C8:46:A5:E0:AE
X509v3 Authority Key Identifier:
keyid:71:A6:6A:84:52:1F:6F:29:F6:F5:DA:7C:2E:4F:44:6D:CF:34:01:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caZqhFIfbyn29dp8Lk9Ebc80AVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/Cj4GWeUtlDF_5KFoEUr0yEal4K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/caZqhFIfbyn29dp8Lk9Ebc80AVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6a:0e:b8:aa:89:92:a7:b8:cc:d1:31:1f:dd:f6:31:35:4a:
43:f1:2c:87:20:53:9b:a7:53:37:67:24:45:8b:fe:a2:b1:f6:
73:02:29:45:f8:c4:13:d1:a3:cd:24:5a:cd:e0:c7:f6:05:ea:
4e:3e:b6:7b:78:22:dd:6d:87:ae:93:ad:e6:c4:f0:9d:a9:ce:
72:7b:46:5c:49:02:06:9e:39:84:9d:db:78:df:90:aa:ce:f2:
d2:ee:be:78:84:d0:a5:1b:ac:64:4b:5b:ba:81:81:1a:5a:40:
a1:32:cb:b9:dd:2f:06:93:22:e2:ca:22:d2:6a:ec:9a:30:39:
5c:25:5f:b1:83:70:b4:1f:30:0e:3f:85:76:f7:a0:fc:a7:20:
0b:7d:51:bb:5e:5c:0f:92:dd:a8:50:b6:4b:0a:9f:8d:46:a5:
74:a6:f8:1b:73:ba:90:fc:30:2a:6c:78:8c:72:f3:6d:5d:ef:
54:f0:76:63:f1:bc:f2:da:16:35:60:32:8f:4a:e4:c5:d5:84:
a5:4d:53:12:45:70:e1:a3:1e:f2:2a:69:d3:ab:b9:b8:48:49:
7d:ad:ce:8e:56:8a:47:e7:e6:c3:f4:09:cd:53:b1:33:5d:7a:
c8:d8:96:28:25:3e:2a:c5:bb:cf:ce:63:0e:17:eb:ef:3d:bc:
c5:07:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org