Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/lZNd-9Nc9UJHg1o-8uKVP_--fos.roa
File: lZNd-9Nc9UJHg1o-8uKVP_--fos.roa (raw, json)
Hash identifier: Jqw+NF5cWzJqNiOGaPrWFvZdh5NSPbnuplVKl+LDG9s=
Subject key identifier: 95:93:5D:FB:D3:5C:F5:42:47:83:5A:3E:F2:E2:95:3F:FF:BE:7E:8B
Certificate issuer: /CN=659479e85d98443ae916ab4be88574ead841b019
Certificate serial: C302C9
Authority key identifier: 65:94:79:E8:5D:98:44:3A:E9:16:AB:4B:E8:85:74:EA:D8:41:B0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZR56F2YRDrpFqtL6IV06thBsBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/lZNd-9Nc9UJHg1o-8uKVP_--fos.roa
Signing time: Sat 01 Jan 2022 00:52:34 +0000
ROA not before: Sat 01 Jan 2022 00:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 62.204.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12780233 (0xc302c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659479e85d98443ae916ab4be88574ead841b019
Validity
Not Before: Jan 1 00:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95935dfbd35cf54247835a3ef2e2953fffbe7e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:68:34:8b:be:38:b9:f7:f5:3f:91:9e:54:
03:e2:9f:9f:e2:94:1b:05:ed:18:45:c7:f7:5c:de:
12:13:90:31:a8:e0:8c:31:32:4f:c7:87:f9:75:60:
73:77:a6:d3:8f:e8:12:b0:20:3d:d4:b0:5e:8d:8a:
08:99:8e:80:44:d4:c8:7a:52:27:c7:68:c4:a5:e6:
27:e5:d9:42:cd:18:61:de:e8:05:aa:de:73:c8:b5:
ca:c6:4a:37:0c:fd:0a:b4:9f:dd:46:fc:c1:e5:de:
b5:a4:a3:e3:01:23:95:6f:cd:f6:69:9f:30:85:97:
de:11:a0:ce:c3:07:e9:25:3e:27:f3:42:f3:98:8d:
c1:37:63:43:b4:5a:e9:81:3e:9b:59:cb:70:c3:48:
12:b2:d7:26:58:f3:63:fc:03:09:41:9a:c8:07:e0:
a1:49:14:dc:78:65:7b:c8:d5:9d:93:6b:1b:37:9e:
5e:36:44:5b:41:85:72:f7:aa:34:8b:08:a4:fc:d5:
29:9f:1b:58:28:d5:1e:2d:a8:b0:28:4a:40:be:9d:
2d:a1:d1:67:01:55:93:46:7a:92:b1:23:be:70:43:
c0:44:9b:4d:3a:70:9e:f1:48:64:bc:68:a9:41:5a:
8c:3a:88:b8:3a:89:45:43:54:90:de:6a:7b:90:a1:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:5D:FB:D3:5C:F5:42:47:83:5A:3E:F2:E2:95:3F:FF:BE:7E:8B
X509v3 Authority Key Identifier:
keyid:65:94:79:E8:5D:98:44:3A:E9:16:AB:4B:E8:85:74:EA:D8:41:B0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZR56F2YRDrpFqtL6IV06thBsBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/lZNd-9Nc9UJHg1o-8uKVP_--fos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/ZZR56F2YRDrpFqtL6IV06thBsBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.52.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4f:5d:84:c4:66:7f:f3:e8:09:09:b6:f2:c9:13:35:68:79:
3b:a0:86:11:b2:74:ad:5c:90:59:c8:3d:da:b2:09:95:f3:9f:
14:dd:c1:21:45:0c:4e:b7:49:f6:72:30:35:12:fd:a9:74:85:
5a:2b:cd:07:7a:dc:73:0c:ba:af:b3:dd:02:b9:46:8b:e4:bd:
08:1d:44:88:e7:35:30:02:6f:74:6f:3d:17:61:3a:cb:d3:62:
bd:3c:d8:9a:93:f4:44:74:ec:c4:24:92:b6:f3:80:55:00:30:
88:64:76:f8:15:98:07:aa:da:06:f7:fd:10:9a:54:d5:fc:3b:
06:9a:32:91:41:31:67:65:27:8a:67:a3:31:26:bd:22:96:90:
4b:8f:9f:2a:23:e3:1c:c1:54:84:11:b7:6d:6c:92:94:ae:b6:
7d:fc:c1:69:f8:2f:96:fa:19:7a:78:53:5d:0d:f7:c9:3b:ea:
35:bf:f2:95:56:0c:55:38:bb:67:cb:12:6e:ea:8f:79:08:d4:
00:5f:3b:19:00:83:0c:a0:58:47:a8:1a:20:1e:42:1d:35:79:
6a:d5:49:16:58:7c:f1:cb:b1:74:83:a1:59:c0:df:eb:27:38:
5c:5f:bc:2e:d3:14:85:44:0b:c9:83:7a:ed:b6:6c:4c:a4:bf:
58:88:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org