Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ZsFBy52i6bBtcStksQoPxDPDUe8.roa
File: ZsFBy52i6bBtcStksQoPxDPDUe8.roa (raw, json)
Hash identifier: ac9xSMuXoXA67VOK2XX1vDWjbasr/9Ctqxh/OXagctQ=
Subject key identifier: 66:C1:41:CB:9D:A2:E9:B0:6D:71:2B:64:B1:0A:0F:C4:33:C3:51:EF
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0189AF8D19D5838AB00C71B9AB1566E9429C
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ZsFBy52i6bBtcStksQoPxDPDUe8.roa
Signing time: Tue 01 Aug 2023 05:23:27 +0000
ROA not before: Tue 01 Aug 2023 05:23:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 62.112.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:8d:19:d5:83:8a:b0:0c:71:b9:ab:15:66:e9:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Aug 1 05:23:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66c141cb9da2e9b06d712b64b10a0fc433c351ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:cb:47:a4:2e:09:85:0e:e0:a7:5b:79:7c:
64:36:4f:41:b6:7e:90:81:ea:63:48:f7:16:5a:81:
a5:ab:2e:00:c3:43:21:2e:a7:10:92:13:68:01:9d:
81:3e:53:2f:fb:8c:71:db:60:47:eb:d7:39:d3:86:
67:09:74:52:34:b2:8c:b8:5c:9e:06:b8:87:f6:63:
4f:7a:ad:d6:48:01:52:71:7f:69:1e:d5:98:d2:fe:
b7:99:71:57:45:a2:f3:2e:78:aa:05:eb:fe:1a:1a:
d3:9a:c5:40:02:a0:4b:5a:c0:d1:5f:33:96:d1:44:
0d:13:01:1c:7d:29:98:30:14:49:d5:ac:36:c7:0e:
7e:e7:dc:37:c6:62:f4:d8:ba:b6:31:8a:11:a1:c8:
8d:e6:7d:c6:15:a1:73:1d:b3:7c:9e:62:37:33:4c:
34:73:3a:a7:37:40:f9:f8:da:bf:c0:a7:22:84:bc:
44:2f:a7:7e:13:39:16:8a:e1:15:5d:35:2b:84:77:
7a:f0:99:20:5b:e9:a3:1d:0e:7d:f5:06:3e:64:3b:
5a:e1:e0:78:3f:db:96:7a:db:43:8f:fa:08:63:ef:
de:c3:87:a4:72:bc:4f:ec:04:43:23:88:71:81:f4:
61:e1:b3:c5:83:26:de:b2:bb:02:d1:15:b2:0d:cf:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C1:41:CB:9D:A2:E9:B0:6D:71:2B:64:B1:0A:0F:C4:33:C3:51:EF
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ZsFBy52i6bBtcStksQoPxDPDUe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.0.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:31:09:f8:76:91:0a:9d:f0:09:10:d7:32:62:3a:f2:d5:4a:
bf:3e:66:26:48:8b:97:61:a7:01:85:26:a4:65:67:60:c8:c3:
2b:ef:ad:16:db:13:45:c1:ac:76:74:83:18:74:20:f5:6c:bd:
49:e9:9c:1a:87:b5:69:0f:d6:61:67:88:f6:4d:9b:3c:71:90:
9a:04:3a:c5:84:47:66:1d:ec:32:47:97:f8:bb:a3:91:e0:f0:
41:1d:54:ea:0c:84:25:97:86:e8:70:01:3d:aa:dd:78:17:b2:
7d:f8:96:b7:4c:8e:1e:59:c7:99:1f:73:5c:90:40:fd:21:7a:
46:2d:36:6b:65:77:1b:51:d5:62:ea:95:ee:01:ce:52:82:c1:
2f:2e:53:f1:cd:cf:4b:43:6e:5e:a8:86:0b:05:b0:c0:d5:8a:
65:c2:65:68:bb:64:cc:0c:82:09:54:b9:5c:1d:74:98:f5:1a:
a3:5f:6a:12:fb:91:0e:2c:f8:1b:4b:3c:f5:d2:39:da:3c:b5:
8e:c9:12:0a:59:46:80:58:07:05:c4:7c:b1:26:9a:80:c5:ee:
c7:47:8f:37:d2:c0:15:bb:a0:b0:8c:80:58:81:67:81:0a:20:
53:9b:71:59:da:be:a8:19:ec:56:32:74:6c:55:8c:c0:7d:c6:
17:fd:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:23 2025 by rpki-client