Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/YAto7ja9hbvlyhfOJSNL-jzDCnc.roa
File: YAto7ja9hbvlyhfOJSNL-jzDCnc.roa (raw, json)
Hash identifier: OzzoIMaokkppTBuIJ1KKQDaKkh5pVkrmuQq1S4vujq8=
Subject key identifier: 60:0B:68:EE:36:BD:85:BB:E5:CA:17:CE:25:23:4B:FA:3C:C3:0A:77
Certificate issuer: /CN=94b21640a951055dfe9c09e345739cb820054dd4
Certificate serial: 01845CE862146852E087557A4612003408AA
Authority key identifier: 94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/YAto7ja9hbvlyhfOJSNL-jzDCnc.roa
Signing time: Wed 09 Nov 2022 15:00:43 +0000
ROA not before: Wed 09 Nov 2022 15:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 62.3.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:e8:62:14:68:52:e0:87:55:7a:46:12:00:34:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b21640a951055dfe9c09e345739cb820054dd4
Validity
Not Before: Nov 9 15:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=600b68ee36bd85bbe5ca17ce25234bfa3cc30a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:76:a6:fe:cd:09:6c:cd:58:87:01:55:87:
f0:ae:20:60:84:89:f7:e3:9e:3b:02:46:7f:9f:e6:
e8:40:fd:95:d2:8b:cc:46:8e:a0:e7:8f:ff:e1:d4:
78:61:9b:ea:e4:b0:27:ca:96:36:f6:6a:56:a8:79:
1a:6f:8e:d3:85:72:bd:7a:32:d3:0b:a7:5b:a3:8c:
dd:9e:05:ee:56:02:91:89:ea:72:2c:30:b3:b2:bc:
43:4e:31:12:b4:e2:4d:8b:c0:ad:b8:25:dc:c0:f6:
90:7f:5a:57:f6:18:65:4c:06:af:e1:f0:61:aa:41:
1d:a0:51:cf:cf:14:6a:1b:8c:63:bc:7f:3d:9c:c4:
65:b1:a0:da:a8:a9:e4:7e:fc:cd:09:d5:b0:2a:a8:
9c:6b:f0:f0:40:31:52:c2:9c:9c:3c:eb:48:27:a5:
01:3a:9c:27:de:d9:11:86:14:35:b0:c5:4b:16:33:
06:75:f1:01:d8:8c:94:ba:32:f4:d9:c3:29:1a:05:
9e:f8:03:71:1f:8d:a1:e1:e1:62:10:22:1e:55:97:
0a:f6:9f:f4:56:34:10:e1:96:e8:ce:29:d9:2e:b2:
6a:a4:a3:0c:e6:68:aa:3b:5a:f9:d7:e6:5d:57:0e:
4a:88:38:25:fe:2e:87:24:a3:0f:af:dc:0f:32:ac:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:68:EE:36:BD:85:BB:E5:CA:17:CE:25:23:4B:FA:3C:C3:0A:77
X509v3 Authority Key Identifier:
keyid:94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/YAto7ja9hbvlyhfOJSNL-jzDCnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.62.0/24
Signature Algorithm: sha256WithRSAEncryption
17:27:d0:15:22:94:c5:24:ff:ad:c7:75:35:b8:5a:8e:2e:24:
ba:b0:4c:88:e9:f8:36:d2:80:d3:e6:e7:49:c4:6f:c6:91:82:
a2:1e:d2:16:55:b9:54:7d:4a:c2:73:63:9a:7a:da:e2:b4:2d:
99:c7:d0:88:cc:d0:b7:eb:03:f0:dd:87:9e:22:e8:e7:e0:ed:
2e:80:12:3a:61:c6:3e:21:59:a0:9e:30:40:a9:52:3a:40:e5:
e6:e0:90:9b:64:29:bd:29:5e:0e:55:20:0c:42:fe:f1:37:49:
44:32:7b:af:b1:31:a7:7d:51:07:27:d9:74:cb:37:b8:75:98:
39:78:29:dc:04:47:ab:8d:60:5e:b4:7c:ec:8e:22:bc:23:b8:
7a:ec:08:cb:e9:54:f0:cb:28:07:d2:ac:2e:7d:80:72:e5:21:
af:8d:fe:32:8a:0a:9f:e6:50:52:ab:41:a2:9a:9c:57:20:a3:
8f:04:7a:87:52:76:ce:45:34:b4:51:c6:73:a1:20:a0:5d:7e:
be:ed:d8:03:7a:e2:b5:71:99:70:e3:54:66:d6:9c:f9:a8:a3:
b2:da:e9:3d:2b:9e:f8:0b:2b:6a:e5:3b:ed:a5:44:fa:a3:3f:
5c:c7:8f:57:83:9d:b2:ae:ee:51:17:a7:c3:ff:b0:1b:86:d2:
27:fa:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:54 2024 by rpki-client on console-ams.rpki-client.org