Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/_iPY6q0r-LE4NQ8UmgW5BVtxnpE.roa
File: _iPY6q0r-LE4NQ8UmgW5BVtxnpE.roa (raw, json)
Hash identifier: 3vgFeaeLixi4VVc5QPaBvBH/jh+Cp+ejygiHIh2+tJY=
Subject key identifier: FE:23:D8:EA:AD:2B:F8:B1:38:35:0F:14:9A:05:B9:05:5B:71:9E:91
Certificate issuer: /CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Certificate serial: 018572B424E6431988E3A30C739A29BB7A64
Authority key identifier: 26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/_iPY6q0r-LE4NQ8UmgW5BVtxnpE.roa
Signing time: Mon 02 Jan 2023 13:38:06 +0000
ROA not before: Mon 02 Jan 2023 13:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394381
IP address blocks: 62.68.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:24:e6:43:19:88:e3:a3:0c:73:9a:29:bb:7a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Validity
Not Before: Jan 2 13:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe23d8eaad2bf8b138350f149a05b9055b719e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:17:dc:23:78:85:f3:3a:4b:a7:47:e6:7f:
b9:1d:0b:d9:b3:ce:dd:0f:07:fa:85:ac:24:f6:ab:
61:df:15:6f:45:59:e2:08:91:ec:47:b3:02:27:e7:
19:21:b8:20:22:4d:bf:45:02:ff:3b:ef:9c:ff:64:
e3:18:bb:15:97:5a:4e:18:0c:67:95:fd:22:6c:45:
78:5c:24:a2:73:01:ab:31:57:09:5e:47:56:e1:d1:
3d:6d:d1:62:84:dd:bc:98:42:e9:5b:7e:66:cc:c2:
72:b9:36:f3:0d:19:c4:60:0b:34:96:fd:a0:f4:5c:
38:fe:bc:58:66:67:a8:ed:ef:fe:a0:30:08:b8:f3:
d9:15:66:27:26:1e:a4:61:b0:e6:e5:d9:73:3d:fe:
1e:9c:63:1a:b5:16:dc:0d:bf:7a:1b:84:0d:d7:9f:
85:2e:5c:1a:56:48:5e:1b:cd:c6:8e:62:b2:b7:e5:
2d:3c:c9:3f:8d:75:29:ac:a3:1b:46:c4:41:88:0d:
7e:12:de:3a:1c:3a:be:9b:45:0f:3e:8c:a2:91:dd:
b2:9c:44:9c:85:7c:07:12:4e:11:97:ee:67:ea:f5:
69:8a:da:52:2a:d9:86:53:25:2e:7a:27:63:8a:be:
10:6f:32:07:15:4d:fd:6d:11:11:25:c9:f9:18:37:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:D8:EA:AD:2B:F8:B1:38:35:0F:14:9A:05:B9:05:5B:71:9E:91
X509v3 Authority Key Identifier:
keyid:26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/_iPY6q0r-LE4NQ8UmgW5BVtxnpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:64:92:01:bb:a7:ee:17:95:a7:db:e3:e4:8e:d7:5e:04:2c:
49:b6:c0:f9:f9:34:24:86:28:1e:7b:71:fa:f6:64:31:14:05:
10:57:66:12:4d:16:20:b8:cd:a3:73:be:76:2a:22:21:28:cc:
4f:01:c3:f0:6b:be:23:dc:23:ba:3c:69:ba:5f:e6:37:f7:81:
d5:92:31:5c:e5:28:20:7f:0e:44:48:68:bf:26:b8:ac:09:4e:
cb:d3:fe:82:96:7f:eb:49:9b:64:88:bf:d8:5c:c7:63:bc:fa:
36:45:00:6a:96:03:e9:e1:cb:64:95:11:b1:9a:a3:59:cf:f3:
f6:39:a6:c0:46:d9:a1:4b:f7:c6:27:fb:f5:30:52:fe:18:82:
df:ce:d4:5e:94:2a:1b:5c:f9:10:be:eb:1a:98:50:7c:12:96:
fa:f4:a5:3f:b7:ab:07:cc:63:09:8b:81:7b:d6:23:0c:84:3b:
d9:d5:70:f5:50:c9:34:f6:b1:ef:22:a1:33:4b:d9:84:cb:20:
08:37:d1:b6:62:d5:8c:ef:33:af:76:1e:58:36:e6:9a:55:19:
b3:5f:fb:e1:11:5d:ad:fb:b6:45:6c:62:ac:86:71:aa:1d:bb:
eb:4e:d4:71:7f:fa:e5:c7:41:a3:e9:c7:05:2c:7f:dd:25:8a:
3d:4a:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:30 2024 by rpki-client on console-ams.rpki-client.org