Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/wX3sms_VNVa2lQN5XSVrlzK974w.roa
File: wX3sms_VNVa2lQN5XSVrlzK974w.roa (raw, json)
Hash identifier: 8eAxT7zOiN7JRen5yfxEsinpQ3brzj2q3Deo/V4vZdc=
Subject key identifier: C1:7D:EC:9A:CF:D5:35:56:B6:95:03:79:5D:25:6B:97:32:BD:EF:8C
Certificate issuer: /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial: 01856CAF005E11BCDA3DA255F1B6DAEA4630
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/wX3sms_VNVa2lQN5XSVrlzK974w.roa
Signing time: Sun 01 Jan 2023 09:34:46 +0000
ROA not before: Sun 01 Jan 2023 09:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 62.122.230.0/24 maxlen: 24
62.122.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:00:5e:11:bc:da:3d:a2:55:f1:b6:da:ea:46:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Validity
Not Before: Jan 1 09:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c17dec9acfd53556b69503795d256b9732bdef8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4b:cb:91:b4:49:66:c8:98:50:a5:df:36:6a:
d8:52:53:85:3b:07:af:90:37:7d:7b:3a:66:62:ff:
5c:30:b9:25:8d:c8:d0:a5:b3:a3:c2:e4:28:2d:5f:
a5:16:58:7d:f8:6e:91:4f:ed:53:f5:09:07:22:6c:
c5:3d:44:3c:aa:5e:be:f1:63:79:f8:0a:e3:38:59:
b9:eb:89:b7:c2:9c:62:43:e0:46:2f:15:4d:a7:c7:
1d:bc:b3:90:d6:61:f9:1d:8e:62:44:1b:29:b9:af:
2b:a5:f6:8e:d7:0b:77:bb:ce:bc:22:78:ef:14:c5:
d9:a2:33:5f:5d:aa:d2:5c:ae:18:e9:11:1f:46:f7:
09:87:05:ac:4a:17:ee:d3:3c:8f:9d:de:57:0f:6d:
04:8a:06:8b:b1:4b:54:78:d5:d6:2b:17:70:d4:dd:
4e:b4:2a:f9:83:8e:d6:b4:6d:0c:41:7a:06:10:58:
94:fe:91:6d:c8:bd:3e:2e:07:a1:0e:6d:35:87:81:
ba:eb:75:fa:a5:2c:63:7e:33:5e:d8:46:29:9e:97:
c3:f7:d3:04:7a:bc:bd:55:c4:3b:b2:38:36:4e:d3:
31:4d:89:a9:0d:ae:69:af:99:e7:2d:05:b0:72:91:
6b:fd:ca:4b:1d:47:7a:1c:84:3e:11:5c:d7:47:2f:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:EC:9A:CF:D5:35:56:B6:95:03:79:5D:25:6B:97:32:BD:EF:8C
X509v3 Authority Key Identifier:
keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/wX3sms_VNVa2lQN5XSVrlzK974w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.228.0/24
62.122.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:88:b8:98:d1:74:64:e2:54:77:cf:f9:71:ff:23:3a:43:82:
f7:10:d2:91:2a:6e:04:83:3d:05:4b:65:7e:6f:ef:4a:09:7a:
2e:66:43:71:18:17:f1:96:13:63:e5:e2:07:ab:ae:cb:58:6b:
1b:43:32:b9:e6:2b:c8:40:88:41:8f:ce:f1:66:7f:7b:1c:4f:
e1:81:58:e8:19:68:11:62:25:50:3d:c9:4e:23:f8:20:7b:94:
a5:10:94:4b:05:5f:62:60:4a:d0:9f:4f:6f:be:d4:7d:21:99:
7f:a3:aa:a8:bf:f3:2c:83:8a:40:a8:4a:56:63:18:52:ce:49:
5d:d1:d8:d6:50:b1:c5:18:0f:ae:a1:a5:eb:c9:a3:16:16:64:
16:45:cd:88:e9:d1:0f:06:1a:94:c3:11:94:fc:51:8c:87:8e:
77:76:3d:ac:d4:0e:b7:d9:a4:cb:1f:dc:95:da:2f:15:88:95:
89:11:fd:bb:d0:fb:2f:d9:b8:1c:61:ae:c8:e0:a3:42:be:31:
9d:92:d0:2d:f8:94:e3:9b:af:41:06:bc:8e:fc:35:e7:01:b1:
6b:8d:97:9d:f9:76:02:5e:88:d7:24:c0:c6:dd:b4:cf:83:46:
72:ea:b4:45:c4:8e:1a:17:8b:06:de:6e:3f:9c:6b:cd:74:08:
88:dc:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:28 2024 by rpki-client on console-fra.rpki-client.org