Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/guv7BOwn14I26Dw6CBOKeMOp_qQ.roa
File: guv7BOwn14I26Dw6CBOKeMOp_qQ.roa (raw, json)
Hash identifier: FzFdCY0fNyrxPz3q9OaLIhMxjC5FeKMXhBHdKH1KIqM=
Subject key identifier: 82:EB:FB:04:EC:27:D7:82:36:E8:3C:3A:08:13:8A:78:C3:A9:FE:A4
Certificate issuer: /CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
Certificate serial: 0185710C25A56DCB0E25F05617A7CC2D45A6
Authority key identifier: 68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/guv7BOwn14I26Dw6CBOKeMOp_qQ.roa
Signing time: Mon 02 Jan 2023 05:54:59 +0000
ROA not before: Mon 02 Jan 2023 05:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 62.106.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:25:a5:6d:cb:0e:25:f0:56:17:a7:cc:2d:45:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
Validity
Not Before: Jan 2 05:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82ebfb04ec27d78236e83c3a08138a78c3a9fea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:54:55:cf:f3:11:42:b2:e5:a4:cb:a6:f3:
7c:c1:81:a5:75:6e:46:e1:a7:61:d8:41:16:17:fd:
b8:ae:43:fd:5e:ff:21:2e:a4:fe:1c:4b:d9:88:f2:
1b:56:8e:08:03:81:b8:b9:72:36:7d:b1:36:84:25:
ba:b4:2a:6d:46:41:08:bd:e7:5a:7c:b2:be:fb:0e:
54:10:73:5d:aa:7b:58:05:b3:5a:4c:11:be:c3:4b:
72:66:9c:85:a5:d1:d0:45:8d:c6:21:c8:c1:2e:34:
48:00:9c:dc:c9:e6:74:97:ee:10:ee:55:2f:b3:69:
23:6e:01:38:79:19:75:1a:95:62:5b:f9:03:fe:2f:
c4:d0:12:fe:64:38:a8:41:9f:21:e7:3d:30:6f:ff:
a2:bf:58:9a:42:0b:83:14:2e:da:da:e8:6f:90:3c:
05:80:d9:85:17:fb:13:b5:75:83:ac:cd:c0:fc:1b:
a6:42:8b:63:b9:4d:45:6a:e2:c0:8a:4f:f4:04:8e:
eb:f3:31:43:9f:2d:61:74:39:03:7f:8a:ec:d1:d0:
1e:41:0b:e6:b1:c2:34:5c:31:19:62:0f:e1:38:4d:
20:e9:c4:36:df:5a:c8:30:88:0f:71:3a:eb:a4:12:
4a:32:f2:a6:a5:f4:ea:93:d5:44:b7:5e:0d:db:40:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EB:FB:04:EC:27:D7:82:36:E8:3C:3A:08:13:8A:78:C3:A9:FE:A4
X509v3 Authority Key Identifier:
keyid:68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/guv7BOwn14I26Dw6CBOKeMOp_qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bc:42:9e:18:e0:5b:31:20:9d:75:83:41:d2:b9:f8:96:c9:
2a:58:a3:b6:53:29:ea:9b:54:75:cd:d7:17:53:75:47:fe:04:
1f:ae:e0:4c:65:3f:f3:76:0d:14:6c:ef:d2:43:46:19:a8:ce:
d7:0e:18:4d:31:f7:49:36:5c:d8:30:4b:a6:5d:b0:18:ad:ac:
5d:b5:b1:c2:ff:dd:46:8c:a5:c1:de:3f:db:ce:69:40:74:a2:
5c:7b:c7:b3:20:85:d0:0a:32:60:00:2a:a7:98:d3:7a:81:15:
95:9a:b2:ac:23:f4:e5:46:50:19:f0:37:6b:46:df:a5:3e:37:
20:b0:36:67:a5:8b:5b:58:c0:92:9f:52:f0:71:1f:83:60:df:
e6:54:8f:cb:6c:ef:bf:be:44:54:a9:5a:f8:0b:a6:1d:84:c2:
aa:95:5c:95:17:08:92:5b:8f:56:98:dd:34:8f:87:c3:30:c7:
96:d1:61:54:81:6b:61:3e:b0:78:b5:13:76:41:c0:75:8e:ab:
5a:60:7d:77:2d:3a:fa:12:ee:d9:5b:23:bc:c6:e3:7e:7f:50:
e2:55:f8:9c:11:3d:16:ed:a1:c3:ba:a3:93:33:ac:e4:ce:f5:
63:ee:01:0a:cd:85:c3:0c:65:44:06:25:32:8d:1d:2f:72:05:
bd:c6:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org