Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/feae62-5113-468d-b771-e6af44cd671c/1/XUrmm_rY4RJrkXTUMq8agB-mK1U.roa
File: XUrmm_rY4RJrkXTUMq8agB-mK1U.roa (raw, json)
Hash identifier: iqRsIdYHJYYdRe1Y3UWVv6LaD4qNgc80vDjaZvzdRzE=
Subject key identifier: 5D:4A:E6:9B:FA:D8:E1:12:6B:91:74:D4:32:AF:1A:80:1F:A6:2B:55
Certificate issuer: /CN=c96dd16fb94f436ca7621f0490801469fa9b9910
Certificate serial: 0185708CA93CB142FD0714575CD61BE6C05C
Authority key identifier: C9:6D:D1:6F:B9:4F:43:6C:A7:62:1F:04:90:80:14:69:FA:9B:99:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yW3Rb7lPQ2ynYh8EkIAUafqbmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/feae62-5113-468d-b771-e6af44cd671c/1/XUrmm_rY4RJrkXTUMq8agB-mK1U.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41957
IP address blocks: 62.3.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a9:3c:b1:42:fd:07:14:57:5c:d6:1b:e6:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96dd16fb94f436ca7621f0490801469fa9b9910
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d4ae69bfad8e1126b9174d432af1a801fa62b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:bd:bf:e7:ee:00:24:6b:aa:a5:ea:90:24:
30:a0:67:0c:8c:94:40:ea:fc:b9:fa:9d:ff:da:4e:
bf:48:fd:59:84:06:eb:b7:02:0f:68:e8:f7:cb:01:
b6:a7:cc:90:9d:55:eb:84:b2:fe:0b:76:7c:a6:38:
39:49:a6:5d:df:61:1d:03:d9:49:42:5e:1f:31:1f:
3f:ae:99:d0:24:b7:d3:b0:d0:7d:57:37:aa:9c:cc:
8a:34:07:a1:7a:b9:94:0e:b8:84:b7:84:f8:bb:72:
03:d5:35:7b:66:dd:fb:90:07:84:47:00:80:77:a0:
69:a9:c1:96:fc:e6:2f:82:e6:82:1f:bb:36:75:d6:
f3:7d:17:c0:3a:54:b2:34:94:d2:1a:aa:fa:5a:af:
7f:62:76:db:78:80:25:3c:1f:4d:c1:3c:3f:5c:dc:
3d:7d:83:4b:41:7a:52:37:c3:3e:0a:54:19:9c:ef:
e5:b3:c2:ed:72:16:ce:a2:fd:d0:e1:64:73:4d:d4:
55:4d:0d:dd:72:a7:51:e2:ed:22:83:d0:dd:10:2f:
1e:e7:c7:15:41:8d:26:84:4d:cc:ac:f1:91:ab:7f:
54:4b:df:ee:ee:52:9c:41:02:92:f7:8e:7b:8b:b3:
50:ec:5b:6d:81:32:82:20:9c:e9:d6:2c:15:55:c1:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4A:E6:9B:FA:D8:E1:12:6B:91:74:D4:32:AF:1A:80:1F:A6:2B:55
X509v3 Authority Key Identifier:
keyid:C9:6D:D1:6F:B9:4F:43:6C:A7:62:1F:04:90:80:14:69:FA:9B:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yW3Rb7lPQ2ynYh8EkIAUafqbmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/feae62-5113-468d-b771-e6af44cd671c/1/XUrmm_rY4RJrkXTUMq8agB-mK1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/feae62-5113-468d-b771-e6af44cd671c/1/yW3Rb7lPQ2ynYh8EkIAUafqbmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.48.0/24
Signature Algorithm: sha256WithRSAEncryption
62:40:52:17:b3:42:2b:9f:6e:e4:73:6f:5f:b0:cd:e7:d8:cd:
96:e3:3e:fc:97:c5:ff:8f:28:ee:91:fa:e0:a8:1f:3f:98:43:
b4:8a:f6:8f:32:e7:ab:ab:f6:fb:1c:11:11:4c:6c:e5:8c:35:
ed:c2:1a:ba:18:80:b7:9f:75:3b:f2:73:45:25:f9:4f:21:88:
50:1d:c4:99:2c:37:e9:0a:eb:ff:46:8d:5a:b6:b1:51:53:8f:
46:4d:e6:d4:e9:10:96:e3:5e:1c:17:84:0e:54:f1:62:dc:cc:
43:59:68:7b:c9:81:59:a9:d5:95:45:25:93:85:94:4e:aa:82:
fc:02:31:8a:81:99:ac:74:d5:e2:4c:08:ad:74:e3:1e:89:d5:
b4:64:6e:4d:0d:3f:80:d9:40:6e:1d:aa:06:fa:e4:29:1e:0e:
b3:cc:41:ad:66:b6:35:5e:2a:02:0c:fb:17:07:95:59:89:fb:
36:dc:80:8f:6a:16:0f:96:9f:ea:9d:90:b4:72:35:4d:70:0c:
90:f5:48:25:5e:d3:7c:c5:c6:95:d8:bb:7b:f1:3a:78:be:64:
29:f7:b9:22:79:88:d3:57:04:38:84:4b:24:54:fe:56:9a:7d:
5b:11:52:98:0b:59:5b:89:eb:ad:8a:8d:c6:06:76:af:5a:6f:
7c:98:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:09 2024 by rpki-client on console-fra.rpki-client.org