Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/a9A7_rnixRU9dk3H-CXsqX4_-gI.roa
File: a9A7_rnixRU9dk3H-CXsqX4_-gI.roa (raw, json)
Hash identifier: AWsY571Pm4N1lcinGvn4JjzqN0F2uoo6lfah55BtwS0=
Subject key identifier: 6B:D0:3B:FE:B9:E2:C5:15:3D:76:4D:C7:F8:25:EC:A9:7E:3F:FA:02
Certificate issuer: /CN=1b4d5c7b33d6669a30ac2b9a4de2ffcf64c711ab
Certificate serial: 018964C05FBEE5ABA91C7E073523F43CED80
Authority key identifier: 1B:4D:5C:7B:33:D6:66:9A:30:AC:2B:9A:4D:E2:FF:CF:64:C7:11:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G01cezPWZpowrCuaTeL_z2THEas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/a9A7_rnixRU9dk3H-CXsqX4_-gI.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 62.204.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5f:be:e5:ab:a9:1c:7e:07:35:23:f4:3c:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d5c7b33d6669a30ac2b9a4de2ffcf64c711ab
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bd03bfeb9e2c5153d764dc7f825eca97e3ffa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:01:01:7f:28:8d:b7:33:0e:f9:a1:cf:56:
be:9c:fc:35:00:db:95:e1:ad:67:1b:de:33:24:8a:
74:b8:a6:28:9f:91:83:9e:6f:44:da:c1:34:67:37:
ac:a6:ff:6d:7c:92:21:99:8a:b4:69:c0:74:80:ba:
27:b2:8e:db:77:5e:ec:30:12:60:ae:18:6c:92:2a:
59:bb:82:a1:d5:91:be:cf:55:2b:01:5e:54:03:fe:
c6:5c:2c:8a:fa:45:04:7a:27:24:20:7a:ae:a5:b0:
c2:3f:5e:65:53:67:83:05:8b:4f:8e:0f:d4:44:81:
94:d0:8e:c0:22:fc:da:41:2d:fa:91:dd:b9:dc:39:
f0:95:91:f6:fa:e5:c9:fc:8b:54:6b:c7:c3:b9:9c:
c8:e9:40:8b:a2:25:21:8b:d1:cd:79:ec:54:e1:fb:
6b:4a:4c:84:3a:64:88:bd:e4:35:c0:97:c4:c3:88:
48:4c:43:ef:3e:20:11:ff:67:7d:ba:45:70:32:00:
e4:eb:dc:e7:a6:3f:a4:a1:f6:1c:d3:e8:92:6e:5d:
bd:5c:55:32:04:4b:91:48:c5:2c:a3:88:e7:4e:35:
77:f9:9d:8e:bf:a0:2b:a4:a3:e9:0e:3f:f5:66:ee:
0d:0a:22:68:43:3a:9b:aa:db:df:cd:a8:f6:d8:30:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D0:3B:FE:B9:E2:C5:15:3D:76:4D:C7:F8:25:EC:A9:7E:3F:FA:02
X509v3 Authority Key Identifier:
keyid:1B:4D:5C:7B:33:D6:66:9A:30:AC:2B:9A:4D:E2:FF:CF:64:C7:11:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G01cezPWZpowrCuaTeL_z2THEas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/a9A7_rnixRU9dk3H-CXsqX4_-gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.38.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b9:fb:9e:55:75:c8:79:da:e8:8f:d4:76:7b:36:80:4b:32:
ff:2a:96:26:1b:d6:57:e7:e6:0c:b4:0d:6e:72:e9:f5:70:87:
75:e1:28:c0:4a:83:45:fc:d8:7c:24:fb:63:62:6c:02:71:66:
e5:86:22:98:7c:1c:25:b5:60:86:c5:60:a5:30:1e:82:e3:a3:
59:48:60:80:01:bc:ba:f9:3a:85:65:e2:44:e8:5b:0e:19:b6:
70:3d:15:21:ce:78:4b:26:bf:b9:ee:4c:2a:72:10:d3:39:3a:
c0:c8:26:e9:08:d6:b7:a2:c9:e3:50:76:a2:0f:3a:ae:b3:7a:
9e:b6:f9:ef:26:57:a9:04:d8:f3:df:9e:8b:fc:eb:56:05:80:
86:dd:3c:17:dd:70:6f:0f:04:74:3e:df:16:85:25:7f:40:cc:
1a:eb:14:5e:ac:c3:f6:c6:e2:08:b8:7c:39:c6:5d:8f:0d:39:
7e:b4:1d:23:b6:2a:37:8a:fd:98:f8:a3:95:ba:a4:87:06:09:
bc:37:75:3d:86:42:a5:fd:e3:91:f5:af:83:8a:9f:f9:d8:60:
e6:63:93:fd:09:eb:20:52:97:1e:2f:db:33:df:d8:e5:0a:65:
d1:90:85:8a:b9:f7:90:14:81:08:df:83:8a:59:92:a8:9d:4b:
0f:d5:cc:06
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 18 12:35:13 2023 by rpki-client on console-fra.rpki-client.org