Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/rx13cJ5GwLoyWClivWz18Vc7ink.roa
File: rx13cJ5GwLoyWClivWz18Vc7ink.roa (raw, json)
Hash identifier: XFJmKUq9ClFmHqSpvS76Er0gp7xUL7GDeXR3Fylnn1I=
Subject key identifier: AF:1D:77:70:9E:46:C0:BA:32:58:29:62:BD:6C:F5:F1:57:3B:8A:79
Certificate issuer: /CN=3877a25a531f4c87dfa48b3075f1073f56ba48d5
Certificate serial: 011251D6
Authority key identifier: 38:77:A2:5A:53:1F:4C:87:DF:A4:8B:30:75:F1:07:3F:56:BA:48:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHeiWlMfTIffpIswdfEHP1a6SNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/rx13cJ5GwLoyWClivWz18Vc7ink.roa
Signing time: Mon 07 Mar 2022 17:38:49 +0000
ROA not before: Mon 07 Mar 2022 17:38:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 62.3.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17977814 (0x11251d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3877a25a531f4c87dfa48b3075f1073f56ba48d5
Validity
Not Before: Mar 7 17:38:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af1d77709e46c0ba32582962bd6cf5f1573b8a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:43:38:67:9b:76:0b:a9:d3:7c:ce:86:5e:b0:
3f:49:cc:9a:2d:dc:fa:5c:e2:99:9b:82:4b:fa:97:
8e:87:3b:07:b8:d9:f1:49:c3:63:7a:8c:1a:d2:29:
c6:bb:75:78:51:b7:9c:97:7d:55:58:4a:c9:e7:c7:
d4:e3:b4:8f:84:f2:a8:0c:4a:34:25:df:02:27:4d:
31:aa:b6:09:52:0b:32:dd:8c:d2:4e:6d:f0:8a:42:
95:c8:12:58:f5:fc:0f:0a:22:3d:05:dc:47:27:05:
4b:43:4f:39:d6:bc:81:80:ba:3e:3c:48:82:9a:53:
7d:c1:28:7b:54:cc:f2:e8:31:70:9c:b0:7f:5e:f8:
26:22:44:bb:de:d3:d4:0b:75:9c:7d:7c:6c:c7:a9:
71:01:f0:2f:15:e5:fd:2b:ce:54:ce:8c:c4:32:03:
a3:6d:df:82:a5:1b:5f:70:c0:82:e4:2d:95:8a:24:
e7:66:39:8c:8a:8f:0c:68:2c:8a:d4:fa:35:c9:5a:
3f:c9:dc:b1:5a:d5:a1:cf:a8:95:c7:7b:9b:03:be:
ef:de:10:7b:f6:1b:0d:ea:36:19:6b:95:7d:6b:9c:
4d:18:df:a9:14:b4:ea:86:d9:38:87:3c:ea:5a:3a:
47:62:03:bc:6c:fb:5c:a5:78:9d:7a:17:37:c1:b1:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1D:77:70:9E:46:C0:BA:32:58:29:62:BD:6C:F5:F1:57:3B:8A:79
X509v3 Authority Key Identifier:
keyid:38:77:A2:5A:53:1F:4C:87:DF:A4:8B:30:75:F1:07:3F:56:BA:48:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHeiWlMfTIffpIswdfEHP1a6SNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/rx13cJ5GwLoyWClivWz18Vc7ink.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/OHeiWlMfTIffpIswdfEHP1a6SNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.60.0/24
Signature Algorithm: sha256WithRSAEncryption
57:63:44:c9:b6:3f:cc:37:6c:d8:86:27:88:88:de:a0:c0:71:
f5:37:46:f9:b1:65:27:fb:16:b7:dc:58:3a:e4:d3:55:2b:9f:
97:15:e4:58:1d:fa:d1:9e:ad:1b:5c:49:88:62:35:ff:3e:e1:
e3:18:2c:d2:cf:f8:d8:de:2f:26:62:37:db:2e:3f:39:74:d5:
a9:67:3d:e7:fe:c9:29:59:dc:e5:7e:34:5f:97:9a:c8:bf:90:
8d:8f:8c:74:6e:51:f0:4f:df:f2:a3:5e:5a:42:c1:83:63:ef:
38:4e:64:89:25:b8:c8:67:18:dc:06:f3:ea:c5:4c:60:e4:27:
1b:6d:1f:87:86:22:b4:e3:d4:9d:a2:be:81:d7:7a:c0:2e:85:
f5:68:e2:49:62:e2:8e:9a:56:df:cb:4e:d7:33:9e:e2:7f:a9:
2a:bb:03:e8:d5:eb:5d:3e:61:3f:05:8a:dd:03:da:e0:70:7b:
7f:5a:05:c0:50:a7:46:f5:57:76:26:da:db:f7:b6:43:ed:cc:
d7:f1:15:33:28:60:be:23:62:5e:05:bd:72:58:3c:3d:73:37:
32:dd:01:63:0c:67:8b:fc:d7:a0:2e:4b:8b:17:26:94:40:a3:
4b:4d:00:1c:29:86:55:04:af:97:d8:f7:c3:b5:af:7a:39:41:
3f:7a:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:50 2023 by rpki-client on console.sobornost.net