Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/tpqA6_E3KnIW07G235XFRg5kXME.roa
File: tpqA6_E3KnIW07G235XFRg5kXME.roa (raw, json)
Hash identifier: Z6U8p7NRBW+xhTvUNzpoHywRAUkvQ01K2Ut/s4ii3XE=
Subject key identifier: B6:9A:80:EB:F1:37:2A:72:16:D3:B1:B6:DF:95:C5:46:0E:64:5C:C1
Certificate issuer: /CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Certificate serial: 018CC649ADB5EAF5A97572C20E99B83BFBC6
Authority key identifier: 26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/tpqA6_E3KnIW07G235XFRg5kXME.roa
Signing time: Mon 01 Jan 2024 18:29:26 +0000
ROA not before: Mon 01 Jan 2024 18:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394381
IP address blocks: 62.68.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ad:b5:ea:f5:a9:75:72:c2:0e:99:b8:3b:fb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Validity
Not Before: Jan 1 18:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b69a80ebf1372a7216d3b1b6df95c5460e645cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:5a:50:16:d8:6d:96:c3:f4:38:6a:6f:9b:
6a:11:c0:29:4d:c7:0d:bd:83:92:e7:33:7e:68:d9:
7f:fe:89:97:71:3b:88:0a:2d:c6:95:4f:94:0a:04:
66:9f:e7:ae:39:92:0c:56:7c:57:91:e6:9f:78:8c:
dd:7d:85:97:4c:74:bf:d3:93:10:37:6b:e5:58:42:
f4:89:fb:35:c5:b4:e8:fa:d7:a2:6b:cb:4b:5a:1f:
7b:e4:bf:14:82:87:a0:50:6a:8f:ba:5e:38:5c:be:
26:bb:fa:f1:67:9a:17:57:71:fd:5e:a4:9a:9b:e3:
76:49:7e:7b:39:90:f7:c3:e3:f2:2f:b3:bb:ee:f9:
37:88:e6:56:57:e0:a8:41:0d:ef:e2:df:06:b9:74:
25:c1:78:9f:43:81:cb:30:31:be:6c:95:45:5e:bf:
0d:94:ca:60:e8:58:eb:f3:1e:89:a0:35:a7:27:d7:
f1:a1:d9:7a:4a:17:e8:8a:7a:d9:48:55:d8:5e:ba:
7c:22:5c:90:4b:b3:f9:b4:d5:fa:54:05:f6:5b:a6:
fb:b1:fa:0c:05:1a:2c:eb:3d:eb:8c:de:ad:85:e8:
6f:9c:ce:29:0d:d1:b9:43:b9:c0:a2:d8:48:99:6b:
e9:68:2d:74:9d:94:63:25:26:f3:6b:d4:5d:b0:03:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:80:EB:F1:37:2A:72:16:D3:B1:B6:DF:95:C5:46:0E:64:5C:C1
X509v3 Authority Key Identifier:
keyid:26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/tpqA6_E3KnIW07G235XFRg5kXME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.79.0/24
Signature Algorithm: sha256WithRSAEncryption
61:72:2e:54:72:3a:c1:91:64:c0:61:4c:94:3c:90:34:56:bd:
ae:85:02:6c:58:a6:6d:c1:81:d3:c7:3c:b9:c1:b4:ab:b5:0f:
c2:cd:6f:5a:17:29:ee:f1:4d:68:2f:87:5a:7a:1e:c4:81:5b:
40:36:15:20:15:9b:a7:c7:9a:b3:8b:6b:3b:6f:0d:5c:ab:eb:
5e:c1:d1:7c:c9:d1:a1:97:69:0b:d9:89:7e:2c:ad:de:de:b5:
a8:d5:b1:34:08:f7:18:89:c4:40:7f:ca:50:29:03:b9:53:5b:
1f:ec:6b:41:12:40:0d:8e:2a:ac:5c:3f:8f:1f:ec:72:b6:18:
3a:73:92:dd:d4:dc:a4:50:fd:c3:54:e1:8f:10:09:2e:6b:41:
77:c7:de:b0:df:c7:a8:31:e2:89:ca:67:e3:cd:e0:b0:ff:24:
e4:2b:94:36:27:94:90:e9:fc:b5:a2:ca:97:e8:a6:30:b4:23:
e3:29:12:37:64:61:05:04:27:0a:3c:cd:d5:27:2d:60:41:5a:
fb:32:db:5b:17:44:06:ae:86:b6:f7:61:b2:22:75:84:72:30:
16:8a:ab:0d:53:c1:38:b9:78:1c:91:b7:80:31:f9:54:d7:cc:
02:29:3f:c2:e6:ad:ed:56:44:11:f4:5f:81:72:e7:be:e8:9b:
e7:7a:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:30 2024 by rpki-client on console-ams.rpki-client.org