Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/aY2bP7d7Iz8hwH8IlVvYLBAirwk.roa
File: aY2bP7d7Iz8hwH8IlVvYLBAirwk.roa (raw, json)
Hash identifier: h2geabgGp24GX4B/6xWjqoyPj3+qgNH4je5tIgH8iDE=
Subject key identifier: 69:8D:9B:3F:B7:7B:23:3F:21:C0:7F:08:95:5B:D8:2C:10:22:AF:09
Certificate issuer: /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial: 0187B22599F96183E4CB402E6B4A45256FEF
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/aY2bP7d7Iz8hwH8IlVvYLBAirwk.roa
Signing time: Mon 24 Apr 2023 07:23:41 +0000
ROA not before: Mon 24 Apr 2023 07:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 62.122.230.0/24 maxlen: 24
62.122.228.0/24 maxlen: 24
62.122.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:25:99:f9:61:83:e4:cb:40:2e:6b:4a:45:25:6f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Validity
Not Before: Apr 24 07:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=698d9b3fb77b233f21c07f08955bd82c1022af09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:0d:e4:f6:e5:1c:c1:91:31:32:d9:64:1f:
17:88:0e:88:85:e6:57:ab:e9:de:87:18:b6:5c:e6:
51:f7:9e:40:03:7b:5c:2d:35:d1:31:b2:cd:c8:b6:
e1:ed:93:aa:15:00:af:4b:63:e1:c6:04:eb:3e:5b:
64:37:cc:4f:4a:75:08:4a:54:a1:1e:be:f0:dc:28:
55:15:37:fd:38:55:06:0c:1d:21:67:e2:3b:b1:16:
24:98:48:a7:64:d2:9b:9f:da:f6:9b:cd:d5:d6:f9:
7f:f1:5d:52:21:dd:58:7a:d1:35:6d:f7:2a:96:c7:
ca:0d:2c:00:96:ab:0b:71:54:bb:9a:f6:d6:11:7d:
c3:8f:b8:5e:65:d6:ef:5f:98:b9:0f:85:5c:9d:b4:
63:3f:1c:3a:6a:ef:95:d7:60:9a:fc:f0:d1:42:6e:
e9:0c:21:ad:ab:8a:a0:d5:c5:d6:c5:94:87:f7:7f:
c4:cf:a6:e7:c1:30:d5:06:90:74:e4:c8:33:ce:f1:
b0:f6:ec:83:67:2f:ff:0b:a0:72:7f:35:27:cf:51:
da:53:2b:41:bb:3c:03:64:42:a8:2b:79:a8:32:9c:
8c:14:55:ec:1b:4c:96:f0:2b:13:54:05:b2:3e:82:
36:8e:65:d6:4d:92:e7:8f:36:0e:16:4f:d5:90:56:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8D:9B:3F:B7:7B:23:3F:21:C0:7F:08:95:5B:D8:2C:10:22:AF:09
X509v3 Authority Key Identifier:
keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/aY2bP7d7Iz8hwH8IlVvYLBAirwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.228.0/24
62.122.230.0/23
Signature Algorithm: sha256WithRSAEncryption
83:19:3f:3b:20:8a:c2:8e:a3:69:8f:df:0b:ed:df:63:3b:fd:
b0:70:cd:7d:3d:84:05:d4:74:4a:b0:cf:54:0b:73:f8:85:e5:
7c:a0:06:07:9f:65:ae:2c:36:bd:89:b2:d4:cd:c8:e3:7c:61:
71:fd:17:86:cd:81:ed:2d:ba:69:cd:62:da:0a:cc:bc:d7:35:
b5:f3:98:a1:96:a7:59:e9:69:a4:25:ab:0a:1e:36:cb:84:ac:
0e:62:28:0c:54:30:25:f3:6d:bd:72:89:a9:94:19:9c:99:aa:
39:3d:57:60:61:c1:53:ee:31:04:fe:cd:f7:4d:d7:89:b6:7c:
4d:03:87:2b:48:34:41:cf:69:81:57:f3:86:ee:d8:ad:78:c1:
c6:64:61:ad:8b:be:88:bb:77:2b:d2:a6:95:10:b7:60:6a:3f:
0f:53:99:c1:d9:32:b4:73:22:f3:5e:4e:29:b3:b7:88:26:c5:
63:3b:66:1d:85:39:37:6d:bb:28:79:73:f9:fd:df:c0:99:da:
a6:57:b4:ea:4b:8e:81:40:1f:e7:12:76:bf:b6:0b:b6:98:58:
73:c6:31:43:2e:d6:cf:8e:90:12:fe:62:f4:0d:90:85:f0:60:
33:ba:c3:a6:94:8b:f3:03:70:46:51:c7:ed:22:45:a0:4e:77:
01:1e:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:28 2024 by rpki-client on console-fra.rpki-client.org