Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/Dr2M98XLF0yIjSkcAOgqmEHxLuE.roa
File: Dr2M98XLF0yIjSkcAOgqmEHxLuE.roa (raw, json)
Hash identifier: PNALboniN+9Wzdzgy/GV9Cqm7SYlVkTZUTiQZ5yb2l0=
Subject key identifier: 0E:BD:8C:F7:C5:CB:17:4C:88:8D:29:1C:00:E8:2A:98:41:F1:2E:E1
Certificate issuer: /CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
Certificate serial: 01856F54977C6783EA20A6D2E07544D3108C
Authority key identifier: 0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/Dr2M98XLF0yIjSkcAOgqmEHxLuE.roa
Signing time: Sun 01 Jan 2023 21:54:52 +0000
ROA not before: Sun 01 Jan 2023 21:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 62.204.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:97:7c:67:83:ea:20:a6:d2:e0:75:44:d3:10:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
Validity
Not Before: Jan 1 21:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ebd8cf7c5cb174c888d291c00e82a9841f12ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:43:77:ab:a1:de:93:f7:06:fa:99:30:2f:60:
37:c1:96:cf:f9:0a:96:f3:25:c3:bd:2c:ef:6a:7f:
f6:7e:ac:95:64:6e:44:8f:14:b8:e7:f7:e4:4c:f4:
43:b2:b2:d2:0b:6a:fd:78:08:1c:7b:2b:40:7e:a8:
e4:92:e5:a9:1c:ec:78:31:b4:b3:0f:91:f6:65:9a:
47:c0:c5:2e:97:e2:be:cf:40:5e:a3:27:5c:c7:d8:
ca:be:c5:cd:ba:8a:c4:b3:65:60:4d:64:58:3f:81:
d8:5f:52:fa:5d:61:3f:34:b7:ec:4e:6e:31:e6:fb:
7d:07:2a:57:85:99:ad:87:86:a1:f2:c7:aa:a2:06:
ed:28:29:60:b4:59:27:79:31:63:42:5d:17:18:a1:
d2:c2:a6:c2:23:93:d0:1e:92:af:e2:86:ce:76:c3:
21:c6:15:1b:54:9c:a9:02:15:23:28:8d:89:f1:66:
61:47:8f:13:fb:2d:13:4b:91:0d:a0:06:e5:23:0b:
08:25:bc:95:a6:ad:55:40:2e:ed:14:ec:c6:10:59:
66:ac:2a:f1:cf:db:66:c5:89:e5:3c:ec:aa:f5:a9:
48:92:a8:a2:67:4c:f4:a5:f3:0f:f1:79:d0:a8:62:
a3:05:5f:c3:74:6d:a4:89:89:18:f4:24:cd:67:f8:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BD:8C:F7:C5:CB:17:4C:88:8D:29:1C:00:E8:2A:98:41:F1:2E:E1
X509v3 Authority Key Identifier:
keyid:0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/Dr2M98XLF0yIjSkcAOgqmEHxLuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.36.0/24
Signature Algorithm: sha256WithRSAEncryption
82:45:18:cf:e2:7c:56:73:e5:0c:1f:d9:ac:77:59:a3:de:af:
93:2c:2d:1a:43:5d:9a:30:ed:95:bf:1d:f8:34:0a:38:98:09:
b4:00:bc:01:6b:45:03:97:1c:fe:79:6e:cf:0d:b6:76:ed:ee:
9c:9e:87:9f:69:8b:93:87:6b:6e:36:ef:22:c2:cc:ef:30:cc:
bc:66:e8:9e:1e:b3:f5:5a:f6:f3:69:6b:c8:3c:b7:3f:14:41:
89:e8:3b:fe:4d:1e:45:61:46:7f:34:79:3d:6f:16:48:26:e2:
d8:01:f0:cd:15:06:63:f0:e0:f2:aa:87:c3:13:f3:24:3f:cb:
f3:24:09:98:6b:df:ad:d3:99:a4:15:17:5b:28:3e:3e:1c:97:
e2:9d:ac:d1:1c:90:29:8a:d5:36:bd:ec:af:92:bc:72:81:b1:
d9:ca:6e:24:46:2f:f3:ae:bb:77:a2:cc:15:34:8b:89:f0:ac:
18:22:c0:79:23:b0:63:18:bf:ac:fb:30:ba:12:02:bc:78:ee:
10:15:6f:8a:70:04:5d:0d:43:b6:04:cf:ab:a4:0a:3e:05:e9:
4a:62:3e:ae:91:de:63:bb:35:7a:3c:50:3c:75:4d:fe:90:b2:
1b:8a:3c:51:0c:74:7c:6c:3f:8c:c5:4f:b9:ae:15:11:a7:2d:
76:36:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 08:00:54 2023 by rpki-client on console-ams.rpki-client.org