Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/k9sEA47uTrj9hw_4OxnpwYc_GWY.roa
File: k9sEA47uTrj9hw_4OxnpwYc_GWY.roa (raw, json)
Hash identifier: zfq2jOOpevvfXbbubeiDml4tzRoNV+s2r+lXVVcv0Q0=
Subject key identifier: 93:DB:04:03:8E:EE:4E:B8:FD:87:0F:F8:3B:19:E9:C1:87:3F:19:66
Certificate issuer: /CN=bbda9a35ccb296448e8b5656861314ada525b666
Certificate serial: 018B011DFB3210C6AD57FB56CBD3EF2AC2D2
Authority key identifier: BB:DA:9A:35:CC:B2:96:44:8E:8B:56:56:86:13:14:AD:A5:25:B6:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9qaNcyylkSOi1ZWhhMUraUltmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/k9sEA47uTrj9hw_4OxnpwYc_GWY.roa
Signing time: Thu 05 Oct 2023 18:33:43 +0000
ROA not before: Thu 05 Oct 2023 18:33:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 62.204.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:1d:fb:32:10:c6:ad:57:fb:56:cb:d3:ef:2a:c2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbda9a35ccb296448e8b5656861314ada525b666
Validity
Not Before: Oct 5 18:33:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93db04038eee4eb8fd870ff83b19e9c1873f1966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:33:cd:8e:b7:54:05:a6:44:b4:ee:13:3c:51:
7e:df:1a:b1:08:dd:a9:52:9a:d0:6e:f5:a6:6d:81:
4a:ec:6f:e6:47:77:fe:6a:76:55:f4:8a:eb:54:dc:
aa:a2:df:ec:3d:16:86:f7:97:87:d9:6c:c6:91:95:
0c:ea:8e:9a:38:d2:47:41:71:75:ba:99:fe:0f:d7:
08:85:0f:36:e3:7c:f2:18:d4:68:1c:ef:bd:5f:3a:
f3:74:7d:5d:3f:b7:21:69:3d:ff:61:66:2c:5b:a3:
cd:20:1a:80:0e:cb:74:d3:cd:2c:15:ad:3c:89:73:
49:4b:7e:7b:ad:7f:d1:bb:39:b9:e7:63:17:4e:0c:
8b:b5:fb:fa:af:1f:b3:3e:02:8e:43:e1:14:47:31:
f2:63:1b:a4:11:19:18:d2:37:49:76:b4:05:8c:c3:
46:aa:ba:2c:a5:e1:d4:b8:30:34:67:ae:13:ec:e7:
e7:0f:3c:1b:d3:c5:42:c6:67:44:9b:63:a9:74:ac:
47:da:0b:89:b3:a4:73:ed:9f:3a:86:ce:37:76:dd:
bc:27:59:ef:fe:1d:3a:63:ee:0d:4e:8c:81:09:94:
c4:b4:59:5a:2d:1c:c1:23:ee:5e:4d:8d:d6:cb:ca:
31:1a:dd:0a:63:45:3a:55:1c:9c:97:73:81:9d:ce:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DB:04:03:8E:EE:4E:B8:FD:87:0F:F8:3B:19:E9:C1:87:3F:19:66
X509v3 Authority Key Identifier:
keyid:BB:DA:9A:35:CC:B2:96:44:8E:8B:56:56:86:13:14:AD:A5:25:B6:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9qaNcyylkSOi1ZWhhMUraUltmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/k9sEA47uTrj9hw_4OxnpwYc_GWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/u9qaNcyylkSOi1ZWhhMUraUltmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.33.0/24
Signature Algorithm: sha256WithRSAEncryption
84:27:ee:63:38:42:d3:79:9c:41:95:fb:38:bf:43:31:e0:a5:
cc:28:b1:df:d8:6a:a0:86:59:47:98:9e:96:74:35:5e:c2:93:
a5:17:a6:6c:66:cf:75:db:f1:9d:c3:b4:61:2f:6b:e0:3e:0b:
05:8d:b5:4e:b4:75:49:5e:7d:9e:36:1b:85:ae:c1:fd:0b:ae:
e2:9c:d0:9e:5e:3d:21:2f:e5:f1:5d:38:a1:33:e8:9f:74:2d:
db:6f:6c:1d:e2:22:1e:ea:61:73:dc:bb:f9:8f:0c:f1:5d:df:
f3:cd:66:8d:68:9c:8a:15:60:b6:11:9f:03:23:71:40:22:ed:
ef:92:6a:dc:58:7f:b7:09:f3:73:32:92:1d:79:eb:16:46:58:
38:6d:22:de:93:77:9c:1d:81:dc:11:74:e3:bb:62:7f:b3:15:
ab:fd:f8:48:bd:d3:70:8a:8a:93:17:d0:cb:30:d6:0c:c1:10:
18:62:17:a0:e6:e5:17:63:be:dd:a5:79:f3:96:a8:93:77:22:
a0:da:0e:79:eb:cb:58:f7:1e:1b:06:76:a4:00:03:d5:4c:4f:
95:0e:e6:7e:36:33:38:ed:db:fe:71:e0:19:66:5f:03:c4:b3:
6b:c6:cd:92:b2:7f:bb:81:27:74:e5:67:55:19:c6:bd:8b:9f:
d3:3b:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 10:31:42 2023 by rpki-client on console-fra.rpki-client.org