Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/psD71W1ZXSncFco9CEDXcEH8E3A.roa
File: psD71W1ZXSncFco9CEDXcEH8E3A.roa (raw, json)
Hash identifier: DNg2eEGH5TgfY1lendGJg85olleB3Eo8HMN7Blwjsn0=
Subject key identifier: A6:C0:FB:D5:6D:59:5D:29:DC:15:CA:3D:08:40:D7:70:41:FC:13:70
Certificate issuer: /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial: 0184A385F4EF5D27C85FF88150A2D2BD64FD
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/psD71W1ZXSncFco9CEDXcEH8E3A.roa
Signing time: Wed 23 Nov 2022 08:06:15 +0000
ROA not before: Wed 23 Nov 2022 08:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 62.122.230.0/24 maxlen: 24
62.122.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:85:f4:ef:5d:27:c8:5f:f8:81:50:a2:d2:bd:64:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Validity
Not Before: Nov 23 08:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6c0fbd56d595d29dc15ca3d0840d77041fc1370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:43:31:cd:32:87:5d:96:53:61:b5:01:c5:
51:c4:37:a7:60:37:f3:5d:e0:5b:03:7a:41:2d:dc:
d6:4d:ea:6f:30:f5:af:42:45:a7:d3:dd:8f:96:05:
a0:d9:7b:71:ab:f4:b0:9a:dc:93:53:7e:7d:77:1e:
8d:c7:64:e3:85:6c:62:cd:c0:a8:82:86:a7:fb:c2:
38:af:f4:9c:d0:07:7b:27:6c:3a:c3:80:17:92:ff:
12:f7:ef:21:79:20:7a:bc:f5:31:d3:ab:41:7a:36:
77:6a:34:1f:4f:db:1b:96:12:27:d6:4a:a4:69:70:
6f:78:df:07:ab:3e:83:96:68:20:37:a2:d6:72:c8:
31:6a:3f:1c:5e:b4:e4:78:5d:6c:f9:22:7b:23:6e:
9c:8d:2f:95:6f:8f:69:cd:f7:76:e6:c4:45:6e:7d:
7a:70:7c:4f:4e:6e:8a:39:23:61:27:9c:92:13:89:
33:4d:53:2c:75:94:d5:28:58:e2:e8:bb:5a:81:25:
0e:d5:32:4e:e7:49:f7:b7:26:2a:b3:d1:dc:a2:77:
64:f8:96:7e:ad:76:cc:04:b5:1c:a3:6a:0e:43:06:
d0:05:c6:7a:61:75:c3:ff:d4:d4:24:16:74:1e:87:
f2:4b:63:12:ad:53:5b:6c:be:23:7a:ff:02:ba:a5:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C0:FB:D5:6D:59:5D:29:DC:15:CA:3D:08:40:D7:70:41:FC:13:70
X509v3 Authority Key Identifier:
keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/psD71W1ZXSncFco9CEDXcEH8E3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.228.0/24
62.122.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e1:8c:a8:5e:6a:9c:72:ba:eb:60:e8:29:21:86:45:ed:8c:
f3:f9:4a:f2:11:65:6e:d1:6b:4d:66:c3:91:6d:2b:a3:ab:0c:
fb:c4:f2:56:18:bb:31:48:ac:f9:98:4a:16:72:bc:82:a0:3d:
fc:a0:ea:3d:f8:77:43:08:81:e0:f8:72:0e:75:48:8a:c2:fb:
f0:ff:c1:3b:95:0d:eb:84:28:c5:f6:54:5b:cc:e7:59:7a:7e:
30:20:2e:fc:f4:76:94:53:3f:6c:84:12:6c:8c:8e:52:94:66:
7e:0f:69:9d:bb:1b:1f:f5:f5:a5:1c:8c:97:db:19:48:14:90:
fe:c7:fd:63:25:c2:58:30:8c:70:42:c3:1f:93:5f:d0:41:37:
0b:b7:6e:55:12:29:20:22:51:06:51:cc:4d:4d:7c:83:af:bd:
60:a5:fe:7f:d3:17:c5:70:e4:aa:1e:6e:b0:cf:0d:0f:bb:09:
bd:23:31:3e:05:7a:81:80:de:d0:2f:c9:80:69:b2:ad:c7:a0:
01:3f:83:b5:78:33:92:25:b2:f0:c4:9c:42:19:17:b5:4e:0e:
63:2a:56:9f:ee:f8:2a:2e:18:c8:46:84:60:74:1e:61:e2:5a:
a5:e2:2d:72:17:f4:c1:92:9c:bf:6d:a5:ce:34:f3:91:ce:0c:
c6:f4:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:23 2024 by rpki-client on console-ams.rpki-client.org