Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/j3Geif3mFL2iH8QtDazaPf12_6o.roa
File: j3Geif3mFL2iH8QtDazaPf12_6o.roa (raw, json)
Hash identifier: wcfVBgidKd68L0LkDeqQo0jbhqSzLD1qtazlOZJ1/e4=
Subject key identifier: 8F:71:9E:89:FD:E6:14:BD:A2:1F:C4:2D:0D:AC:DA:3D:FD:76:FF:AA
Certificate issuer: /CN=c28b7e9b1c317d351e37623661a38c693e2df291
Certificate serial: 01845C3231165614EF5E04C4B861C85AF266
Authority key identifier: C2:8B:7E:9B:1C:31:7D:35:1E:37:62:36:61:A3:8C:69:3E:2D:F2:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wot-mxwxfTUeN2I2YaOMaT4t8pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/j3Geif3mFL2iH8QtDazaPf12_6o.roa
Signing time: Wed 09 Nov 2022 11:41:43 +0000
ROA not before: Wed 09 Nov 2022 11:41:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200436
IP address blocks: 62.3.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:32:31:16:56:14:ef:5e:04:c4:b8:61:c8:5a:f2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28b7e9b1c317d351e37623661a38c693e2df291
Validity
Not Before: Nov 9 11:41:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f719e89fde614bda21fc42d0dacda3dfd76ffaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:45:4d:55:d2:b1:04:ed:9c:20:7f:bf:98:
c1:4a:00:59:25:2a:ef:52:0e:09:0b:05:f5:90:7c:
fb:e7:01:95:1c:55:c8:07:17:a4:61:da:fc:e7:9b:
65:a3:14:de:8a:c1:74:68:cf:63:46:c5:75:8b:78:
7d:9a:bd:b4:74:13:ed:2d:d8:86:0f:00:85:1b:89:
4f:88:ad:b9:1f:c1:30:aa:93:17:65:90:0d:5f:98:
28:11:8b:e5:80:2c:cb:9b:a1:57:f5:78:b2:e2:ad:
e6:f0:14:05:1b:bc:9e:b8:af:cc:27:f7:a5:0a:20:
ad:da:86:9e:6c:63:47:0a:1f:0e:25:09:40:3b:ba:
6b:df:a3:de:fe:0d:0a:af:96:73:b1:17:94:fa:91:
5d:c3:fc:81:e7:4f:0d:8a:28:cd:55:d6:b0:da:f5:
aa:14:06:6f:93:0a:16:d5:ff:cc:4f:57:b1:c9:0f:
82:d2:77:93:7d:0e:26:a1:c6:d1:5f:67:39:83:40:
21:61:02:3b:e8:1a:54:ee:d4:04:7a:e2:8e:b9:66:
a8:4e:ab:60:61:b0:78:20:e4:8e:ac:c8:16:99:62:
81:cd:94:1a:a2:58:99:ce:3b:99:c5:f5:2f:07:85:
96:e0:af:c0:eb:d8:37:ad:ce:76:cd:52:dd:69:17:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:9E:89:FD:E6:14:BD:A2:1F:C4:2D:0D:AC:DA:3D:FD:76:FF:AA
X509v3 Authority Key Identifier:
keyid:C2:8B:7E:9B:1C:31:7D:35:1E:37:62:36:61:A3:8C:69:3E:2D:F2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wot-mxwxfTUeN2I2YaOMaT4t8pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/j3Geif3mFL2iH8QtDazaPf12_6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/50f19d-306d-4789-a302-26cdf195d382/1/wot-mxwxfTUeN2I2YaOMaT4t8pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.14.0/24
Signature Algorithm: sha256WithRSAEncryption
38:64:84:44:97:be:83:26:09:16:23:28:01:b7:c5:f7:21:c5:
d6:aa:42:5c:8f:45:51:dc:88:be:fd:58:cd:8e:e3:72:47:28:
67:42:1e:91:99:f1:6a:eb:dd:95:c0:57:e3:3a:d4:c0:8d:a4:
8a:0b:a0:2e:54:13:53:48:dc:35:b7:86:19:67:c6:11:97:aa:
e9:0b:59:45:41:a2:32:b9:a5:8f:7c:19:ca:95:3b:78:65:20:
67:45:0b:57:0a:3e:6f:94:3a:9c:85:15:92:5d:09:80:77:d1:
c8:6b:8d:5f:6f:3d:51:6f:28:5e:78:e9:7d:fd:8c:08:14:d3:
c0:0e:a8:f0:71:cd:36:c3:d2:51:2b:0b:23:ff:6e:90:a2:7f:
05:46:3e:fb:f7:2e:d9:63:a2:83:1b:f8:86:99:36:f3:c8:b5:
df:48:c8:db:fc:04:c9:40:47:3a:e5:c5:73:40:1a:1a:9d:51:
04:86:65:6c:2e:16:77:b5:53:a5:99:03:bb:2e:ec:b0:f1:82:
6a:8c:37:a4:5b:d4:02:a1:2f:6b:e5:24:c1:88:a7:03:d5:51:
00:06:b9:6e:67:24:c2:c1:ff:3c:b2:02:34:c9:2b:45:7e:f5:
60:98:3e:38:fb:b9:ee:3b:6b:27:57:16:21:10:c6:b4:36:97:
14:79:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:36 2024 by rpki-client on console-fra.rpki-client.org