Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/8-b2ctrfN1LSAxyz9aVRYmFHJxE.roa
File: 8-b2ctrfN1LSAxyz9aVRYmFHJxE.roa (raw, json)
Hash identifier: rdGTDTfk0Pi1yJU2eWr4hvx38875VrmI2uf2jhYU5GQ=
Subject key identifier: F3:E6:F6:72:DA:DF:37:52:D2:03:1C:B3:F5:A5:51:62:61:47:27:11
Certificate issuer: /CN=b424721e133a182a1fd0d09656e3ce74d85acf60
Certificate serial: 0185708C9F4CB3D2114611415F702601B21E
Authority key identifier: B4:24:72:1E:13:3A:18:2A:1F:D0:D0:96:56:E3:CE:74:D8:5A:CF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCRyHhM6GCof0NCWVuPOdNhaz2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/8-b2ctrfN1LSAxyz9aVRYmFHJxE.roa
Signing time: Mon 02 Jan 2023 03:35:42 +0000
ROA not before: Mon 02 Jan 2023 03:35:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 62.106.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:9f:4c:b3:d2:11:46:11:41:5f:70:26:01:b2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424721e133a182a1fd0d09656e3ce74d85acf60
Validity
Not Before: Jan 2 03:35:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3e6f672dadf3752d2031cb3f5a5516261472711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:e8:72:38:a3:77:c9:95:59:94:b9:a8:d0:
23:c8:96:1b:f4:05:78:a9:a6:14:5f:59:c9:6c:6a:
fa:41:4b:f2:8f:f3:25:93:c2:b2:ea:6e:ec:ff:e6:
bf:d5:0e:5c:b6:81:88:d7:2c:1f:5b:f8:ce:03:a2:
81:ab:65:66:3b:66:0c:14:bd:f8:30:e0:de:d0:fc:
6a:40:28:f8:2e:44:22:1a:83:ae:e4:ea:ee:b2:89:
6d:eb:9d:a6:00:0f:a3:40:eb:3d:39:a4:dd:cf:1f:
52:5c:05:bf:76:b8:2c:41:6a:e0:f9:66:17:e8:fa:
34:48:42:31:82:73:1a:56:86:07:d7:61:f7:56:ea:
c2:02:3b:a2:c3:ef:2f:8a:c6:b7:c4:c6:64:6d:f3:
27:94:2a:79:ae:03:f4:62:bd:90:66:04:ba:ab:b0:
73:5a:30:88:fc:cf:cf:1b:4a:b5:24:7a:6b:3f:42:
3e:32:b2:4b:b2:4f:5e:16:52:5a:e6:78:06:cf:c9:
d6:7b:7c:6a:13:f5:4d:1d:a1:99:69:ef:89:e7:47:
fc:bd:a8:b6:dc:ba:85:e9:dd:da:f8:f1:20:a3:b0:
96:3f:5d:2b:e8:4a:89:05:3e:60:60:79:b9:12:43:
c3:08:b5:c2:19:7f:5f:c3:63:69:36:af:e1:81:e4:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E6:F6:72:DA:DF:37:52:D2:03:1C:B3:F5:A5:51:62:61:47:27:11
X509v3 Authority Key Identifier:
keyid:B4:24:72:1E:13:3A:18:2A:1F:D0:D0:96:56:E3:CE:74:D8:5A:CF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCRyHhM6GCof0NCWVuPOdNhaz2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/8-b2ctrfN1LSAxyz9aVRYmFHJxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/tCRyHhM6GCof0NCWVuPOdNhaz2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.74.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b8:cb:f0:24:69:aa:d0:6d:9c:b8:4b:c2:1d:ad:12:8b:ff:
89:66:8c:53:e8:bd:a4:e9:00:14:56:dd:5f:a8:14:d8:25:71:
3f:a0:74:f0:dc:eb:53:83:d9:20:1b:9a:99:ba:ff:1a:9f:76:
54:03:58:cc:c1:f3:23:1e:d3:17:ea:2c:ac:ee:5e:be:38:4f:
b8:a6:06:e2:47:ee:12:b3:7e:3e:c1:63:1d:ca:66:28:5f:b4:
1b:e3:e4:2b:4e:5c:1b:25:98:48:a4:64:32:d7:df:9a:d3:77:
ca:72:58:94:a9:73:df:f5:a4:c2:63:c5:61:b6:6d:a2:40:85:
78:aa:6e:e3:e1:0b:55:e9:e0:44:0b:6f:b5:91:8d:5e:37:8a:
c4:6e:0b:63:9f:f4:0f:cb:37:39:2e:b3:c8:56:82:a4:82:2f:
0d:c2:19:b4:c2:9a:26:7b:cd:dc:89:15:3b:86:aa:6b:75:1e:
2a:a0:16:25:db:6a:b5:a7:8b:aa:be:18:24:db:ae:19:00:a4:
2e:8e:61:87:09:2d:01:53:ed:57:1d:00:3f:d6:c9:86:6f:00:
dd:9a:64:f1:48:a5:e8:9d:c7:82:ab:d6:2b:e2:9d:00:2b:3d:
ff:1f:cd:6a:4f:93:da:83:2e:a1:f2:51:f8:10:3d:1d:6e:ea:
cc:42:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:26 2024 by rpki-client on console-ams.rpki-client.org