Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/1-i0z8KtKKzmzhb5xMYdMNIWPL5o.roa
File: 1-i0z8KtKKzmzhb5xMYdMNIWPL5o.roa (raw, json)
Hash identifier: Tlk3TfR3N6HoMhMAM4FjzfXEI/FKrActZeE2TlBtzpM=
Subject key identifier: FA:2D:33:F0:AB:4A:2B:39:B3:85:BE:71:31:87:4C:34:85:8F:2F:9A
Certificate issuer: /CN=6c9b33fd0bf5f364f4894a7c32c36217aa5b4ab2
Certificate serial: 01856F0B76181B1F1EBBEC656E53E6017210
Authority key identifier: 6C:9B:33:FD:0B:F5:F3:64:F4:89:4A:7C:32:C3:62:17:AA:5B:4A:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJsz_Qv182T0iUp8MsNiF6pbSrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/1-i0z8KtKKzmzhb5xMYdMNIWPL5o.roa
Signing time: Sun 01 Jan 2023 20:35:00 +0000
ROA not before: Sun 01 Jan 2023 20:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 62.233.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:76:18:1b:1f:1e:bb:ec:65:6e:53:e6:01:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9b33fd0bf5f364f4894a7c32c36217aa5b4ab2
Validity
Not Before: Jan 1 20:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa2d33f0ab4a2b39b385be7131874c34858f2f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:5d:5c:52:a7:b8:4a:ee:4b:5e:b3:9a:db:
aa:ac:71:7e:6c:b0:40:d9:00:db:35:28:cc:7e:43:
7a:a1:b2:8e:59:55:f3:91:4b:e0:64:08:f4:da:20:
73:74:60:5b:19:81:2c:1a:b3:90:39:9a:ed:dc:ba:
c4:99:6c:13:e0:4d:e2:99:b5:e5:04:64:27:cb:40:
36:5c:82:73:81:fd:d8:76:6a:08:37:a8:67:9c:64:
86:42:a1:e3:9d:c3:af:54:c5:59:1c:c5:e3:55:d1:
db:c3:d1:b2:7f:1f:db:03:8d:8a:bd:ba:18:10:0a:
de:f9:f2:05:93:6d:8b:f6:60:9d:1b:fc:53:3a:7c:
8e:76:45:3d:57:20:79:7a:16:10:73:ae:ed:9d:c0:
b9:1b:e1:f6:8a:0a:9d:8f:39:63:52:0d:4d:5d:0c:
40:a6:0c:0d:1e:7f:8e:71:b1:ba:07:7c:e0:38:d0:
78:9a:5c:86:f2:81:38:0e:2f:c2:0e:88:ce:e5:b4:
95:26:e5:c3:ad:4a:b0:8d:a6:5f:43:5d:f4:eb:a1:
cb:98:94:6b:4d:cf:e6:d1:be:f8:aa:58:12:5f:b5:
67:4a:99:91:c0:a4:5a:f8:2e:fe:50:24:7a:09:12:
8b:45:60:fb:ee:51:fb:c6:70:67:c1:2a:41:2c:29:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2D:33:F0:AB:4A:2B:39:B3:85:BE:71:31:87:4C:34:85:8F:2F:9A
X509v3 Authority Key Identifier:
keyid:6C:9B:33:FD:0B:F5:F3:64:F4:89:4A:7C:32:C3:62:17:AA:5B:4A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJsz_Qv182T0iUp8MsNiF6pbSrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/1-i0z8KtKKzmzhb5xMYdMNIWPL5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5c5442-396e-432e-8e8b-13ffeec7ddaa/1/bJsz_Qv182T0iUp8MsNiF6pbSrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:70:50:a2:17:e2:fd:b4:54:3a:fa:f1:47:1d:e8:be:45:6a:
50:97:a3:97:92:06:45:44:a3:8a:3d:b7:39:06:2f:07:b1:63:
0c:be:da:0a:e5:98:cd:d9:0d:65:07:f6:8f:65:3e:9f:c6:7b:
b0:7e:5c:4d:5b:8a:56:14:56:2d:0f:f9:44:d8:66:01:63:f5:
74:a4:72:f6:46:6d:d2:a1:3c:ca:2a:a4:bf:c6:32:ff:03:36:
aa:d4:77:71:59:04:da:dc:ef:9c:c0:4e:fd:e9:db:54:e6:0a:
81:95:e8:a8:9f:07:54:4b:fb:18:df:13:37:90:72:24:c5:ef:
5b:4e:ac:a5:0a:8e:38:66:18:3c:42:51:1a:16:9b:a8:81:f2:
19:c6:29:cd:13:99:ce:3b:1f:38:b6:26:33:73:f3:eb:b8:84:
83:3c:48:48:56:f6:5e:56:65:b9:89:45:aa:a5:97:4a:b7:89:
a3:cf:3a:0b:9f:24:a0:3b:ec:97:95:b8:0e:35:51:8c:56:4a:
6c:39:a1:fb:8e:c5:1f:3d:14:d6:02:b8:7a:5c:12:f1:b0:25:
1f:cc:80:b4:4f:d2:ce:4d:eb:df:a9:cf:87:bb:16:c4:12:58:
37:6b:17:87:89:65:81:e7:09:5a:e7:2c:23:90:77:df:06:29:
83:37:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org