Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/wcXTk_DCwk1VN40UMkBRMdlafxg.roa
File: wcXTk_DCwk1VN40UMkBRMdlafxg.roa (raw, json)
Hash identifier: irDUiul0lVzXUzcMRQpilKBngf+aqthmFGSYlGKSu9s=
Subject key identifier: C1:C5:D3:93:F0:C2:C2:4D:55:37:8D:14:32:40:51:31:D9:5A:7F:18
Certificate issuer: /CN=94b21640a951055dfe9c09e345739cb820054dd4
Certificate serial: 7857EF
Authority key identifier: 94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/wcXTk_DCwk1VN40UMkBRMdlafxg.roa
Signing time: Sat 01 Jan 2022 03:00:17 +0000
ROA not before: Sat 01 Jan 2022 03:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 62.3.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7886831 (0x7857ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b21640a951055dfe9c09e345739cb820054dd4
Validity
Not Before: Jan 1 03:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1c5d393f0c2c24d55378d1432405131d95a7f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:b7:ba:c5:01:88:46:89:c6:d2:7c:60:7e:
e0:fb:d1:56:13:f4:bb:dd:ce:4a:b7:73:0d:fb:d8:
34:e3:43:e1:cc:39:d0:24:7a:13:b3:e0:c7:61:0d:
46:0d:40:66:a8:42:50:c2:f4:79:33:53:51:b7:b9:
b4:50:3c:f6:9b:b1:5f:ee:50:fb:c8:e0:d1:36:9e:
74:f7:45:c1:6f:b4:b4:64:df:e4:57:66:64:44:75:
83:c3:e4:7d:93:91:44:d9:f4:a6:eb:3b:1e:c8:20:
5c:d5:89:df:bf:46:24:db:38:d8:41:b3:f1:45:cd:
85:b6:fd:ab:e7:a2:6a:34:de:1a:47:ab:52:cd:90:
53:8e:70:59:5f:4c:e4:2c:72:f0:18:85:ea:a2:22:
60:80:88:f8:42:f4:d7:0f:fa:d5:5d:27:25:ce:9f:
4b:d2:09:2b:ac:6c:f4:c6:90:fb:d6:12:94:29:03:
06:3d:e3:a0:07:c0:5c:e6:fa:6d:3e:4d:61:3f:05:
0a:ff:c9:7b:2d:c7:f3:c9:24:1f:eb:88:68:a2:88:
f7:42:2d:e1:6e:fa:ef:6d:85:ed:53:58:64:6d:72:
15:c8:e0:2a:05:f2:ef:bc:2f:4f:12:dc:ac:6a:e3:
36:2e:cb:36:14:b3:19:50:78:49:b6:dd:90:c4:52:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:D3:93:F0:C2:C2:4D:55:37:8D:14:32:40:51:31:D9:5A:7F:18
X509v3 Authority Key Identifier:
keyid:94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/wcXTk_DCwk1VN40UMkBRMdlafxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:42:66:f7:b3:7f:ea:b7:8a:de:8a:b3:15:9b:d3:fd:4a:e9:
20:f8:e4:ed:f2:10:59:42:db:39:96:9f:3e:ab:b1:d0:a6:2c:
a9:c6:aa:7d:b3:27:c8:f5:fd:02:26:f5:af:2a:38:b9:28:0d:
76:d5:e6:56:f6:db:5f:81:1e:42:01:2a:c6:63:3b:e0:a7:62:
d0:31:0e:24:fc:04:11:32:e9:bf:d2:79:8e:9b:e6:37:ca:ae:
c1:56:f2:35:ee:56:b9:24:78:89:80:6f:19:d9:88:e1:c7:47:
54:06:b3:5c:9d:e5:22:c8:e9:cf:94:46:19:ff:e4:bc:c5:ea:
5c:58:2b:b8:e1:f8:7b:f2:03:06:e4:52:5f:3d:85:e5:5f:68:
88:3b:9f:85:5d:0f:cb:11:c8:f3:a9:4e:29:29:5a:6d:27:fd:
d2:88:52:a5:c0:23:b7:a5:d0:fe:c1:81:2a:18:f4:0c:5c:7d:
6f:a5:11:8c:5f:c9:bc:9b:3c:e5:d5:49:cb:24:54:f2:6c:75:
cf:52:76:25:df:c0:b6:bb:33:78:77:04:60:15:cf:b8:35:7e:
7e:eb:d5:ef:c7:e2:19:ef:62:56:de:cb:25:a7:2d:3c:56:ad:
59:12:70:49:f1:ed:15:7a:ef:d7:f2:3a:09:df:20:74:82:19:
f3:d4:5c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:54 2024 by rpki-client on console-ams.rpki-client.org