Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/MNn1t35bNAr-oY6V7idpcL4xpVY.roa
File: MNn1t35bNAr-oY6V7idpcL4xpVY.roa (raw, json)
Hash identifier: qTilsdH02/K9AraUenLNIIMgWz7UojXpL70qPzifoJE=
Subject key identifier: 30:D9:F5:B7:7E:5B:34:0A:FE:A1:8E:95:EE:27:69:70:BE:31:A5:56
Certificate issuer: /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial: 01867DA9C4401BF14850D9C24596698C43A0
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/MNn1t35bNAr-oY6V7idpcL4xpVY.roa
Signing time: Thu 23 Feb 2023 09:45:23 +0000
ROA not before: Thu 23 Feb 2023 09:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 62.122.230.0/24 maxlen: 24
62.122.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:a9:c4:40:1b:f1:48:50:d9:c2:45:96:69:8c:43:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Validity
Not Before: Feb 23 09:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30d9f5b77e5b340afea18e95ee276970be31a556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:01:26:21:c0:ca:87:51:52:f8:f8:f1:11:
bf:f4:b9:30:02:8f:f2:2a:94:23:0e:a1:93:c0:2c:
9c:90:c9:c3:91:12:5e:ac:3a:36:42:40:67:c1:e9:
d8:d8:6e:a5:36:6d:47:37:32:c1:d3:b7:c9:81:57:
51:33:b4:d9:3a:21:ee:08:e5:49:1c:4a:63:9a:e9:
a3:c5:50:a5:01:a5:71:62:a4:07:fe:f0:67:69:85:
fd:e5:10:39:36:27:89:e2:9c:43:61:4e:9f:13:2f:
b7:20:b4:94:66:a2:0f:08:72:9c:40:e6:2a:0c:c8:
47:77:f2:76:7f:1a:31:d0:59:b3:e1:8a:4d:b3:4b:
9c:c7:49:ae:7c:fe:50:e1:c8:53:5a:6a:3d:7a:4a:
83:06:61:98:ed:9c:e2:8f:e9:57:34:3f:6e:85:f3:
2d:75:74:41:23:fd:f3:e8:2b:48:07:69:45:61:4c:
27:16:a9:ff:5d:49:15:74:f4:ce:47:b6:0a:3f:34:
f9:90:10:e4:84:0b:e9:fe:ef:e9:a3:88:b1:e4:42:
5e:6f:e1:c5:12:2f:0e:8f:45:6f:dc:4f:1f:40:a2:
2a:20:de:7f:a1:c0:56:41:22:75:33:46:e3:18:35:
61:3e:a0:7b:5e:c5:f2:2c:d2:f0:c4:0f:e3:12:c1:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D9:F5:B7:7E:5B:34:0A:FE:A1:8E:95:EE:27:69:70:BE:31:A5:56
X509v3 Authority Key Identifier:
keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/MNn1t35bNAr-oY6V7idpcL4xpVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.228.0/24
62.122.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2f:79:eb:67:10:40:4e:12:c1:26:c9:e2:dd:6a:80:16:c5:
02:cb:f3:d0:c5:bf:8f:7e:a6:e4:ba:5a:b9:4f:5c:04:94:a2:
f1:af:5b:bf:67:19:3e:93:a6:b2:bc:8a:bb:7c:19:3f:ab:d5:
a0:95:9f:7d:de:c0:4d:2f:ef:75:a0:91:dc:18:97:24:8d:fb:
63:46:6d:39:70:80:08:5f:ab:59:d8:96:9c:cc:d8:46:4f:18:
2c:fa:93:5e:dd:8d:8c:dc:b2:1c:a8:b7:a1:12:85:fd:15:15:
e7:c7:31:69:2e:51:eb:ed:b0:f9:72:47:38:13:11:f1:4b:c1:
5c:f9:59:a8:d1:17:01:68:8c:99:40:40:63:eb:eb:05:e6:e1:
65:86:ed:93:04:ce:0e:47:04:f6:ab:1f:3e:c1:c8:bc:2c:6e:
13:e7:28:ee:c9:62:1b:6b:0e:de:27:23:09:b1:a2:af:c0:8a:
79:94:b8:c0:ab:8d:58:06:b6:16:3c:de:46:20:17:65:77:08:
82:1d:b9:56:8b:97:2c:ac:d5:f4:7d:51:a7:c8:2f:1b:4b:bb:
62:ac:c0:55:5f:a5:a4:55:ce:92:52:c3:42:94:62:ae:14:21:
01:7f:46:fc:63:bd:b0:37:6c:a2:6e:6a:36:c4:8a:90:1a:ea:
53:75:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:28 2024 by rpki-client on console-fra.rpki-client.org