Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/YjWFO7kxLLTw7OzCcfV913VK4TY.roa
File: YjWFO7kxLLTw7OzCcfV913VK4TY.roa (raw, json)
Hash identifier: dtaYUm2j/8VCipPBvRJRDV2QWLWDiCpO9OfAcQmt8Cg=
Subject key identifier: 62:35:85:3B:B9:31:2C:B4:F0:EC:EC:C2:71:F5:7D:D7:75:4A:E1:36
Certificate issuer: /CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Certificate serial: 01856F42B8EDF8470DE630247A8117968EC6
Authority key identifier: 16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/YjWFO7kxLLTw7OzCcfV913VK4TY.roa
Signing time: Sun 01 Jan 2023 21:35:21 +0000
ROA not before: Sun 01 Jan 2023 21:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205450
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b8:ed:f8:47:0d:e6:30:24:7a:81:17:96:8e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Validity
Not Before: Jan 1 21:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6235853bb9312cb4f0ececc271f57dd7754ae136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:57:85:df:23:3b:86:ac:32:7d:d4:95:a3:17:
3f:16:86:91:10:82:6e:5b:24:02:a7:69:ee:9e:a7:
43:37:b7:25:fa:4c:e4:19:c7:d7:d5:97:2b:72:33:
dd:36:1d:03:f3:2e:a7:ba:97:42:b6:f5:d3:12:8b:
a5:97:d7:8d:b0:b8:09:da:d7:66:86:ec:e9:96:16:
12:96:59:4e:7d:0d:e5:a2:b6:59:ef:a1:87:89:58:
9b:e0:55:f6:e1:6c:dc:78:d2:e5:b4:d0:7c:37:e5:
ec:48:95:49:e8:aa:3d:0c:25:ef:5c:e5:10:ab:16:
18:f2:68:c9:b1:c4:69:a3:e9:d6:6a:e1:05:b5:03:
0c:c5:83:73:92:e6:e4:c5:6b:fa:1f:7b:8c:be:99:
2e:10:1a:40:f5:ed:b5:58:b3:23:fc:fa:83:b9:4e:
22:43:b0:f2:da:49:35:42:f0:09:ae:a9:90:2e:b9:
6a:bb:f7:36:7b:28:07:42:1e:a1:32:83:0e:d5:9f:
0f:c4:6a:95:37:5e:36:a6:85:66:f2:3e:e6:fa:b8:
4a:0b:f9:6f:23:20:6b:2b:b7:5b:38:09:a7:82:e2:
71:e9:1e:06:35:d4:59:9b:ac:aa:96:fd:9e:5e:5a:
1b:06:7d:bc:1d:03:bb:38:b2:28:bb:a8:af:4d:da:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:35:85:3B:B9:31:2C:B4:F0:EC:EC:C2:71:F5:7D:D7:75:4A:E1:36
X509v3 Authority Key Identifier:
keyid:16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/YjWFO7kxLLTw7OzCcfV913VK4TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/FnulbNyMl2YsG1fZAaH4ZYit8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1c:9f:15:0e:7f:93:f5:72:55:be:e0:db:2e:13:0c:07:62:
da:f2:58:43:be:66:d3:e2:ca:92:1e:41:e5:24:42:99:c7:3b:
2e:f1:9d:4e:eb:9a:8f:b1:c7:7a:08:12:05:8d:f7:56:4a:ab:
f4:62:b2:a3:dd:2b:30:02:4c:8d:cb:25:c4:e3:b8:80:f5:3e:
6f:15:f7:16:9a:b9:7c:fa:12:3f:7e:72:94:c4:66:dd:ad:d7:
b9:50:09:9d:b1:c3:a3:68:4b:a8:62:a0:a4:ab:99:4e:b6:78:
d3:bb:17:85:06:0a:52:e7:e2:37:04:d0:51:5b:6a:01:98:b6:
cb:26:66:03:91:8f:c4:3e:43:55:4c:d3:e3:61:80:0a:57:38:
29:ee:9f:79:36:07:ba:d1:c2:66:5d:ee:60:d5:6e:b7:42:03:
26:bb:66:5d:14:b3:ad:5f:df:3c:ed:ba:bb:23:89:aa:ef:f7:
22:40:3c:3d:4d:db:44:c3:78:ed:2d:7c:fe:7e:b2:5d:93:8f:
0d:d2:79:87:e2:b2:6c:ef:7b:7f:ee:f8:07:d6:0a:5b:7f:0c:
e6:91:5f:92:e1:2c:0d:ae:3e:9d:40:5b:05:ad:62:16:d1:e9:
48:5c:26:46:e3:c6:9e:e9:0e:df:19:86:85:26:fb:4b:7f:08:
5b:a0:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:14 2024 by rpki-client on console-ams.rpki-client.org