Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/pXTi4M0xMKZWu10T1x3O9R-nBjQ.roa
File: pXTi4M0xMKZWu10T1x3O9R-nBjQ.roa (raw, json)
Hash identifier: DomKtFesPPHMOsunSUQHI9aVYV1znchG1q0q5Jchky0=
Subject key identifier: A5:74:E2:E0:CD:31:30:A6:56:BB:5D:13:D7:1D:CE:F5:1F:A7:06:34
Certificate issuer: /CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Certificate serial: 0173E3
Authority key identifier: 26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/pXTi4M0xMKZWu10T1x3O9R-nBjQ.roa
Signing time: Tue 25 Jan 2022 14:22:40 +0000
ROA not before: Tue 25 Jan 2022 14:22:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 62.68.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95203 (0x173e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Validity
Not Before: Jan 25 14:22:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a574e2e0cd3130a656bb5d13d71dcef51fa70634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:24:c2:79:01:ba:c8:9b:6e:d2:73:bb:57:
04:05:f8:c0:4a:f4:dc:5c:d7:ea:37:0c:64:77:70:
28:17:b5:9b:9d:6c:07:27:eb:ee:15:ea:7f:5d:a0:
37:0d:fb:3b:a3:b5:ea:01:cf:29:da:2f:50:b8:2f:
24:6c:91:40:79:e1:2b:e5:b2:cc:f0:45:02:15:77:
21:4d:0a:3b:c2:27:8b:c6:6c:19:46:db:eb:28:e8:
f7:af:14:e6:fa:b7:f1:58:31:32:66:04:52:f5:13:
58:9f:9c:d7:d0:7a:81:47:7f:ac:98:26:ba:c5:6a:
ca:19:70:17:3e:09:d7:e8:a0:93:e1:51:7b:d1:87:
3d:7b:f6:cc:44:5e:6b:99:34:44:cd:e2:f4:be:3d:
36:a9:d7:8f:72:8d:dc:88:8b:6c:e1:33:99:25:fd:
40:69:8c:db:d1:35:80:69:18:d8:b2:a6:e3:7a:7d:
c0:be:97:6c:25:1a:46:00:52:05:90:a7:28:a9:c2:
c9:1e:1a:8d:5e:bd:d2:90:1e:4d:a5:f7:98:a2:99:
91:6a:da:36:a4:88:eb:04:ed:85:f0:b0:68:87:c2:
f9:44:6c:2a:b6:79:61:c6:77:f8:e9:e3:83:bf:25:
82:15:e1:73:2d:70:df:38:25:3e:58:7b:26:0d:9a:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:74:E2:E0:CD:31:30:A6:56:BB:5D:13:D7:1D:CE:F5:1F:A7:06:34
X509v3 Authority Key Identifier:
keyid:26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/pXTi4M0xMKZWu10T1x3O9R-nBjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.79.0/24
Signature Algorithm: sha256WithRSAEncryption
70:76:47:59:26:50:4c:d4:44:52:db:4d:41:61:8d:a8:b6:92:
ab:96:96:ab:01:46:cf:f8:de:e7:c0:ea:b2:cb:71:e1:f4:7f:
db:80:99:ac:2d:c8:e7:f8:24:7e:6e:c9:99:eb:8d:fb:eb:49:
bf:0d:1e:88:2b:f2:3e:64:e0:10:34:29:b9:e8:16:36:14:0a:
66:af:e8:d7:69:ef:5e:a6:b4:a8:9f:36:44:a1:34:c2:57:2e:
56:6a:23:9f:6d:0c:64:5e:13:3f:11:8d:52:4f:54:6c:55:9b:
0b:3a:a7:5e:c0:57:56:8e:dc:24:90:8f:a1:01:37:8f:72:d3:
a3:88:14:c2:a6:20:08:43:9b:de:2e:19:bd:3f:35:1f:d8:75:
8a:d4:65:89:47:93:5b:29:4b:3f:48:49:02:0e:0c:4d:47:bb:
7d:bf:1b:ab:a1:3e:52:b0:5a:8d:c4:de:df:60:d1:2b:3d:7d:
cf:11:38:92:f5:95:9a:81:c0:87:55:eb:47:b4:dc:51:30:cc:
50:50:e9:1f:00:81:68:e2:db:51:05:fe:af:55:4c:ba:91:97:
49:a1:bb:33:28:2e:99:63:98:27:56:af:50:72:eb:fd:f3:23:
c6:08:10:40:4f:e5:b7:20:4c:bf:e3:75:6a:b1:cc:23:9c:4e:
19:7b:83:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:33 2024 by rpki-client on console-fra.rpki-client.org