Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/DWD1dc8yPNhEN-XQpOA0hw62wqE.roa
File: DWD1dc8yPNhEN-XQpOA0hw62wqE.roa (raw, json)
Hash identifier: X4Lo+/dR91TbA8/dLS2ac5OaF1XMvCRX5aenB4NpTDM=
Subject key identifier: 0D:60:F5:75:CF:32:3C:D8:44:37:E5:D0:A4:E0:34:87:0E:B6:C2:A1
Certificate issuer: /CN=5265f9bfdd3a7855a617dc957227b9eedda433a9
Certificate serial: 01857169E6B303D6DD85EE4E177913F8873F
Authority key identifier: 52:65:F9:BF:DD:3A:78:55:A6:17:DC:95:72:27:B9:EE:DD:A4:33:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmX5v906eFWmF9yVcie57t2kM6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/DWD1dc8yPNhEN-XQpOA0hw62wqE.roa
Signing time: Mon 02 Jan 2023 07:37:23 +0000
ROA not before: Mon 02 Jan 2023 07:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 62.68.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:e6:b3:03:d6:dd:85:ee:4e:17:79:13:f8:87:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5265f9bfdd3a7855a617dc957227b9eedda433a9
Validity
Not Before: Jan 2 07:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d60f575cf323cd84437e5d0a4e034870eb6c2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:e9:ff:4c:73:c2:98:20:41:99:5a:74:67:
2f:c7:ec:35:cc:ef:28:ea:40:a8:92:ee:34:63:9b:
1e:9c:0e:87:e3:cc:72:c1:dd:ba:40:15:91:e0:1d:
fc:65:6f:96:8e:c2:77:1b:eb:d7:85:96:25:4d:bc:
12:91:4a:7e:58:1f:ea:ca:73:9d:64:4f:75:76:8e:
df:9b:7e:58:4e:08:a8:bd:0d:ae:52:d4:75:3c:c6:
47:33:17:32:cf:c7:65:c1:f5:e7:f4:51:cd:aa:5c:
d1:40:1f:8c:3e:21:19:60:53:21:89:11:4a:f9:e6:
b6:c4:8f:0d:93:cd:bf:e0:53:1c:b1:de:26:48:5d:
5f:a3:0d:6f:1a:de:a1:82:42:be:d5:f6:98:44:1c:
15:15:b6:b8:f8:a3:73:ed:07:54:22:32:61:18:6d:
a9:09:29:04:df:1e:2f:66:c5:ca:39:16:59:af:09:
5b:7e:99:76:c4:51:8c:f3:25:fc:eb:03:2c:0c:09:
c7:29:73:64:2f:bf:4c:77:83:98:06:f2:19:4e:73:
54:ff:e2:cd:d4:35:e5:1a:f7:23:3f:f7:1d:06:70:
75:47:bf:93:d0:12:15:09:bc:80:41:87:32:c3:df:
e8:43:ad:41:7f:b1:96:ec:36:5d:fa:6f:7c:c9:af:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:F5:75:CF:32:3C:D8:44:37:E5:D0:A4:E0:34:87:0E:B6:C2:A1
X509v3 Authority Key Identifier:
keyid:52:65:F9:BF:DD:3A:78:55:A6:17:DC:95:72:27:B9:EE:DD:A4:33:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmX5v906eFWmF9yVcie57t2kM6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/DWD1dc8yPNhEN-XQpOA0hw62wqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/UmX5v906eFWmF9yVcie57t2kM6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.83.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:bf:be:26:c6:75:05:74:2c:96:5b:5b:c3:7a:94:d3:48:d9:
ae:b7:16:e3:db:04:03:4a:2f:f8:71:1f:23:4b:5b:57:17:a6:
e9:43:a7:38:ed:1d:36:6c:82:fb:dc:5a:4e:7a:96:5b:3b:28:
9d:da:93:8d:85:58:d7:f9:27:c5:76:56:f4:27:65:33:ac:3e:
63:99:1f:a7:22:86:09:9d:62:ab:38:eb:89:af:48:1b:21:43:
0e:50:dc:ef:7f:8c:f3:40:ff:6f:f4:bf:7d:86:eb:24:d5:6d:
ca:87:2d:7f:9a:15:76:8d:ad:fa:5e:0c:fa:f8:9c:47:c4:21:
fa:14:f8:2f:83:da:3b:66:00:4d:09:bc:7f:35:5a:4e:59:b8:
68:7c:fa:14:28:ea:59:d7:0a:c7:a4:1b:cd:ff:65:99:2b:25:
b8:bb:81:c1:9d:28:70:88:b7:20:d0:36:73:dc:8d:82:38:38:
ac:0b:5e:c9:96:47:be:19:d5:6d:45:27:73:7b:66:3a:0b:22:
d6:0c:b0:2a:bc:a9:c4:97:3f:80:86:43:5d:d5:a3:15:25:a1:
f2:a4:4f:2c:3b:eb:61:cd:1a:ec:14:b5:94:49:b4:1a:4a:62:
13:54:b1:69:55:04:c6:de:c0:df:7c:a6:3c:c4:93:dd:46:30:
ef:4b:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:33 2024 by rpki-client on console-fra.rpki-client.org