Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/ULzp4y1wXDrSZaanjlIwW4r0s94.roa
File: ULzp4y1wXDrSZaanjlIwW4r0s94.roa (raw, json)
Hash identifier: MgnXFyzvmr/ouo50WmyaoMBs7ZfM2bzTp+ylCShUNcc=
Subject key identifier: 50:BC:E9:E3:2D:70:5C:3A:D2:65:A6:A7:8E:52:30:5B:8A:F4:B3:DE
Certificate issuer: /CN=3877a25a531f4c87dfa48b3075f1073f56ba48d5
Certificate serial: 018805C976E892428804CA43106B57890587
Authority key identifier: 38:77:A2:5A:53:1F:4C:87:DF:A4:8B:30:75:F1:07:3F:56:BA:48:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHeiWlMfTIffpIswdfEHP1a6SNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/ULzp4y1wXDrSZaanjlIwW4r0s94.roa
Signing time: Wed 10 May 2023 13:11:09 +0000
ROA not before: Wed 10 May 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 62.3.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:c9:76:e8:92:42:88:04:ca:43:10:6b:57:89:05:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3877a25a531f4c87dfa48b3075f1073f56ba48d5
Validity
Not Before: May 10 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50bce9e32d705c3ad265a6a78e52305b8af4b3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:51:20:3b:1c:fd:81:2e:4c:51:91:65:2c:24:
e0:73:58:ae:1c:c2:fb:61:a1:d6:9e:a5:a5:3a:03:
a3:5e:30:59:80:b5:50:2e:05:8e:97:81:1f:66:c0:
1a:b2:6e:e7:e4:83:62:b3:56:7e:da:bb:f2:ad:f8:
b2:71:a4:93:b9:45:c7:13:b9:8d:bf:5f:07:fd:3e:
ae:25:5e:7c:32:b4:23:1d:86:50:9e:7e:c4:5d:db:
3a:58:d7:5f:52:19:2f:cb:86:d6:35:c2:84:7d:f5:
78:ba:70:4b:cf:9a:b4:ae:9c:05:44:37:70:a0:d3:
ab:24:6c:42:e1:72:d6:fc:22:00:90:e3:35:4a:dd:
54:45:36:50:64:9e:ca:7a:79:12:31:f1:1e:bd:a4:
6d:ff:30:dc:d5:b0:b8:77:31:da:de:2d:64:d1:45:
97:92:8d:a2:c5:7e:2b:a8:c2:71:3e:b6:51:e7:e9:
2e:61:2e:98:2b:32:b5:72:dc:80:ba:3a:a4:2d:c0:
7c:b3:18:96:2b:4f:ea:43:3b:b0:9d:c9:0e:ba:96:
fe:02:04:3f:3f:87:01:ff:6a:1b:52:c0:00:89:c7:
10:96:3b:00:e4:20:7d:a8:5e:7e:83:81:87:bc:c0:
0f:b8:25:5b:49:61:df:75:49:e9:1f:d2:db:8c:36:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:E9:E3:2D:70:5C:3A:D2:65:A6:A7:8E:52:30:5B:8A:F4:B3:DE
X509v3 Authority Key Identifier:
keyid:38:77:A2:5A:53:1F:4C:87:DF:A4:8B:30:75:F1:07:3F:56:BA:48:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHeiWlMfTIffpIswdfEHP1a6SNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/ULzp4y1wXDrSZaanjlIwW4r0s94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/OHeiWlMfTIffpIswdfEHP1a6SNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.60.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d9:56:4c:f9:50:a6:18:65:0a:99:b2:f1:13:38:ed:15:87:
9a:82:d9:26:25:ab:2f:58:a3:76:8b:17:c7:dd:df:33:07:38:
d3:92:9c:56:f7:89:29:98:8d:da:ef:b7:23:51:b4:c3:d9:3f:
12:c6:44:3d:93:7e:28:38:38:a0:3a:be:15:4f:3c:32:c3:16:
a7:7d:4e:bb:41:80:9e:4b:e4:36:5c:31:43:a5:de:db:a8:3a:
1b:31:f4:2f:bb:70:3f:25:cf:cf:44:d6:3d:3b:e0:30:d4:d6:
93:f2:c9:e3:1c:c0:91:94:4c:9c:47:9b:87:3e:58:db:2c:f5:
dc:76:42:ea:19:30:a1:9e:2e:d7:54:8c:2c:34:6d:c5:83:3a:
66:ae:4e:51:4e:33:62:a7:84:04:ac:70:50:13:50:67:2d:89:
45:68:04:c9:57:83:4d:89:e9:5c:a1:c2:4e:10:96:50:cf:71:
15:f0:66:13:cb:d0:d7:86:a8:d8:6c:55:e7:a4:d9:e2:13:52:
82:cb:c1:41:91:65:0c:5d:fe:01:b5:f7:bb:00:a1:af:3f:c0:
b0:12:84:90:06:ad:1c:21:40:69:41:d2:d2:21:3d:5f:2d:15:
43:2e:e1:ca:cb:12:08:83:23:d2:08:08:c0:a1:e8:c6:8b:11:
51:0a:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:50 2023 by rpki-client on console.sobornost.net