Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/l-3PVZTdDyqCX3JBBatJ_L1v23s.roa
File: l-3PVZTdDyqCX3JBBatJ_L1v23s.roa (raw, json)
Hash identifier: OeCJ3bfF/R/nWbjYQmBiVKd6bGuyaRVRZdNupOkl5/Y=
Subject key identifier: 97:ED:CF:55:94:DD:0F:2A:82:5F:72:41:05:AB:49:FC:BD:6F:DB:7B
Certificate issuer: /CN=ac345e7c5920cc89a3ea6cada2be505283684270
Certificate serial: 0BB64C
Authority key identifier: AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/l-3PVZTdDyqCX3JBBatJ_L1v23s.roa
Signing time: Sat 30 Apr 2022 20:26:54 +0000
ROA not before: Sat 30 Apr 2022 20:26:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767564 (0xbb64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac345e7c5920cc89a3ea6cada2be505283684270
Validity
Not Before: Apr 30 20:26:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97edcf5594dd0f2a825f724105ab49fcbd6fdb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:fb:18:b4:a6:c7:58:94:67:06:2f:00:0c:
7a:2f:df:99:2f:36:2e:0c:44:51:26:f2:4f:cd:1c:
dd:68:12:bc:9e:ac:6e:69:d1:bf:8e:d2:e6:4b:f1:
cb:c4:7a:18:d4:22:67:f5:92:24:da:54:7b:51:6b:
4c:3a:01:21:0a:f9:4d:f6:f9:08:20:c7:bb:75:f1:
1b:29:4c:b4:fd:46:9c:55:6b:05:55:95:8d:f9:38:
66:43:10:29:01:95:8c:90:98:17:71:7e:3b:7d:21:
23:0a:df:53:f9:8f:05:6e:02:5e:9b:60:4d:27:e6:
1b:df:93:06:c5:ae:ab:8a:f8:ee:04:db:bc:6e:3a:
d0:80:87:f7:b7:5c:65:36:8a:ec:92:e7:50:93:be:
68:1b:db:9a:ce:e5:32:e7:de:c3:c2:99:28:63:1c:
bf:01:6f:1a:0c:17:ff:71:ad:ae:1a:8b:94:5b:fa:
5b:e5:da:96:7f:85:f3:da:68:c2:43:47:c6:24:b4:
ff:ea:20:e6:40:1c:40:4c:20:e7:ed:e1:bd:6f:45:
0f:41:87:ee:5e:5e:64:a8:cf:63:bb:ab:7e:7b:92:
6a:5c:b8:28:a9:44:33:e7:1d:31:47:7c:c5:e0:42:
03:9c:64:92:86:98:6b:a9:a1:7e:ea:9c:ea:d7:d8:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:ED:CF:55:94:DD:0F:2A:82:5F:72:41:05:AB:49:FC:BD:6F:DB:7B
X509v3 Authority Key Identifier:
keyid:AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/l-3PVZTdDyqCX3JBBatJ_L1v23s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/rDRefFkgzImj6mytor5QUoNoQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:45:de:98:5c:59:30:c1:e2:8a:99:b6:cc:44:12:06:a2:fb:
8c:07:57:2a:7a:a9:ee:2f:74:56:8a:fb:8c:b8:f7:f6:c2:21:
ff:be:a1:cc:c0:27:7d:f3:db:cc:a2:53:98:af:5d:15:9a:c4:
d6:98:31:ae:e5:9e:20:93:36:11:fa:96:5a:6e:60:13:5b:14:
08:f8:ed:fa:44:cf:9e:67:4e:87:be:65:f6:20:1a:45:86:f1:
fd:ca:f0:69:30:60:b0:a2:85:35:50:a2:58:de:d1:27:16:a9:
05:ef:c8:54:e2:c8:cc:c3:d7:ca:c4:c5:14:92:d3:87:78:ac:
a2:97:e4:63:f6:0b:5d:c2:b5:cd:22:fa:1c:6f:de:ab:33:f4:
2d:6e:cc:e5:31:54:8b:95:96:1b:68:9a:da:71:9f:c8:83:3f:
9f:a2:27:77:c0:a8:c2:71:8c:e9:b5:26:c7:d8:33:23:4d:b9:
4d:77:94:c7:59:5a:2d:3a:f5:43:1c:48:38:b4:1f:c5:65:d7:
3b:77:0a:97:9e:60:b3:f2:4a:e1:b8:5e:40:af:87:5f:d5:67:
67:54:68:6b:50:72:85:42:fb:df:16:bc:67:cd:e7:80:5e:e4:
a0:55:a3:59:25:f2:a5:7f:21:42:34:8b:df:8e:68:e1:4f:91:
bf:62:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:41 2025 by rpki-client