Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/pYBr4A-J7YtZSqvN4PyKBI1lylI.roa
File: pYBr4A-J7YtZSqvN4PyKBI1lylI.roa (raw, json)
Hash identifier: Xm+VdinPpaIk8r+fGO1Y0pjQoqpXp/q6JAdg7vgjxX4=
Subject key identifier: A5:80:6B:E0:0F:89:ED:8B:59:4A:AB:CD:E0:FC:8A:04:8D:65:CA:52
Certificate issuer: /CN=7ad5da58d6ac9c7c26754bf80da9303e0b972617
Certificate serial: 7D8BC8
Authority key identifier: 7A:D5:DA:58:D6:AC:9C:7C:26:75:4B:F8:0D:A9:30:3E:0B:97:26:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etXaWNasnHwmdUv4DakwPguXJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/pYBr4A-J7YtZSqvN4PyKBI1lylI.roa
Signing time: Sat 01 Jan 2022 01:52:44 +0000
ROA not before: Sat 01 Jan 2022 01:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 62.3.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8227784 (0x7d8bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad5da58d6ac9c7c26754bf80da9303e0b972617
Validity
Not Before: Jan 1 01:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5806be00f89ed8b594aabcde0fc8a048d65ca52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:c4:1d:c3:50:c7:96:e7:cf:a6:1c:1c:56:
2a:11:fe:97:4c:d6:d4:b0:d4:5c:96:19:ba:69:34:
ef:c1:99:34:b6:e3:a5:0a:9b:7d:de:fe:97:ec:0c:
26:ce:f2:eb:67:24:22:94:ee:10:45:da:41:d6:25:
0b:c4:81:c2:34:3c:8a:9e:81:03:5a:4a:07:b7:86:
27:07:09:ab:a4:9a:06:92:56:d2:67:e1:27:1e:9b:
54:8f:5f:6c:42:ac:df:e9:86:ea:ca:6f:b4:6a:5b:
83:85:2f:d3:a6:28:d1:10:89:7b:ed:9a:f9:68:b2:
c3:49:04:27:39:6f:ed:3d:70:fe:74:ef:d9:a0:ea:
1a:60:e5:fa:84:6d:e1:40:35:c4:e4:85:b2:69:83:
1d:ae:8a:5b:76:30:0d:e8:69:28:50:22:75:6f:9f:
54:40:92:08:af:ef:01:bc:a6:f3:95:c8:c8:cf:4e:
2f:22:b0:bf:7f:b9:8e:13:79:d0:c8:26:3c:5d:72:
12:5f:93:a3:0b:75:52:60:9f:d4:a4:79:54:ce:df:
ac:86:5a:79:1d:20:ce:15:62:41:7b:fd:4b:53:8a:
80:e4:62:bd:15:ab:6b:ca:98:f6:4b:02:24:35:45:
ac:e2:b2:9a:18:67:f2:03:0b:67:1e:3f:7e:d7:ca:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:6B:E0:0F:89:ED:8B:59:4A:AB:CD:E0:FC:8A:04:8D:65:CA:52
X509v3 Authority Key Identifier:
keyid:7A:D5:DA:58:D6:AC:9C:7C:26:75:4B:F8:0D:A9:30:3E:0B:97:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etXaWNasnHwmdUv4DakwPguXJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/pYBr4A-J7YtZSqvN4PyKBI1lylI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/etXaWNasnHwmdUv4DakwPguXJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:57:69:f7:2f:c1:07:66:b7:ee:e2:c3:09:64:28:bc:a8:0f:
a3:6a:5e:fa:b5:9f:7d:2c:1c:20:ec:e3:80:99:3e:5f:66:e8:
06:c9:b3:dd:49:16:39:cc:a3:55:e0:9c:f6:11:2f:f7:fc:83:
4e:99:2d:a7:73:03:d4:c1:c4:30:00:3c:5e:d8:86:18:c5:d5:
5d:15:36:5b:fb:9b:76:60:2d:ec:a0:3c:43:ad:07:c4:64:2a:
39:67:5f:99:db:91:57:4c:1b:95:6d:77:a1:24:8d:28:cd:90:
2e:d2:ba:98:a8:ad:e8:78:14:ba:79:f5:ad:b9:de:10:e1:d2:
55:35:9a:de:7e:2e:97:44:c4:d2:52:02:c9:d5:dd:72:72:87:
b8:c0:57:af:ac:9a:e1:b4:ab:e2:33:fa:65:cd:63:c7:c7:b9:
84:b9:d6:0a:22:09:cd:5b:56:19:89:49:d8:77:1e:a2:d9:84:
13:d2:38:06:5b:7f:8a:05:7f:bf:de:64:ee:7f:4a:58:72:cf:
20:4d:f0:9b:f3:44:5b:d2:35:5b:bd:fe:ec:da:36:e8:77:a4:
22:36:12:65:47:ff:9d:53:ff:43:bb:98:8f:bc:96:f1:13:9b:
b3:4d:98:a4:35:85:af:01:19:bf:ca:7b:9d:5f:d7:a3:4a:0f:
04:52:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:00 2024 by rpki-client on console-fra.rpki-client.org