Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/9wzwE2Iozg9i6ePP2PtoeTrn1LE.roa
File: 9wzwE2Iozg9i6ePP2PtoeTrn1LE.roa (raw, json)
Hash identifier: KrS5kMRgjKNLYeGspZnIxKhpu5Jw5edgF5efXW+wv08=
Subject key identifier: F7:0C:F0:13:62:28:CE:0F:62:E9:E3:CF:D8:FB:68:79:3A:E7:D4:B1
Certificate issuer: /CN=a669dd121b8b5deb5129f3fdbaeba7ce3d6325ca
Certificate serial: F191F2
Authority key identifier: A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmndEhuLXetRKfP9uuunzj1jJco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/9wzwE2Iozg9i6ePP2PtoeTrn1LE.roa
Signing time: Wed 23 Feb 2022 20:19:50 +0000
ROA not before: Wed 23 Feb 2022 20:19:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 62.3.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15831538 (0xf191f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669dd121b8b5deb5129f3fdbaeba7ce3d6325ca
Validity
Not Before: Feb 23 20:19:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f70cf0136228ce0f62e9e3cfd8fb68793ae7d4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:1a:b7:4d:c7:a7:cd:1a:48:06:25:0a:9e:
79:fb:82:e2:6b:15:12:d6:91:f5:a8:4c:55:41:c6:
ab:d6:d4:25:72:e4:d4:af:a0:46:b5:66:1f:41:50:
1c:ca:29:ef:9b:0f:f0:16:c9:d9:e5:f6:de:8c:47:
96:fd:f4:7b:c1:8f:17:69:e3:76:ed:05:e9:01:f2:
f6:e7:2e:9b:e7:79:4d:7a:bc:e7:12:c4:b5:85:b0:
8b:5a:9f:5c:99:4c:77:11:bb:64:4a:88:3b:38:38:
bc:72:4b:39:91:9f:92:b6:2e:10:af:60:f5:6c:39:
54:d7:51:29:82:c5:38:b1:01:e4:ec:88:4d:b4:46:
3c:c8:9b:66:e3:d1:70:89:97:96:ae:ed:73:dc:a2:
de:14:90:15:2b:a6:42:bb:61:6b:09:33:42:e9:2d:
d5:92:fc:24:23:18:d8:38:16:e5:fd:e2:22:1a:34:
7c:9f:ce:cc:f8:67:d3:79:f6:6c:cb:ef:d8:58:b6:
c9:a0:f6:d9:64:ba:f7:22:a9:64:85:46:2a:45:3b:
0a:2c:3a:2f:c9:82:18:4c:7e:c3:53:09:ab:78:17:
8b:59:b0:95:1a:2a:ca:59:bb:3c:1b:da:6d:b7:d4:
76:27:6a:55:61:fb:da:7a:83:ad:55:d0:9d:40:05:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:F0:13:62:28:CE:0F:62:E9:E3:CF:D8:FB:68:79:3A:E7:D4:B1
X509v3 Authority Key Identifier:
keyid:A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmndEhuLXetRKfP9uuunzj1jJco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/9wzwE2Iozg9i6ePP2PtoeTrn1LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/pmndEhuLXetRKfP9uuunzj1jJco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8a:df:c8:e8:a9:25:a5:f2:89:92:33:c0:b5:01:1f:33:4a:
de:2d:57:91:15:92:ac:fa:b1:58:14:73:00:b7:74:fa:70:22:
21:fa:b3:68:36:a9:75:a0:0c:90:7b:44:69:73:87:03:a8:84:
f6:67:56:8b:51:bb:23:00:72:2c:08:57:33:f7:31:44:1b:e1:
76:99:77:20:dd:f6:4c:8c:37:f7:08:43:e9:dc:15:a4:2f:33:
b6:f3:4d:b3:3d:96:f0:32:be:25:e5:9a:56:bd:dd:82:58:72:
c0:30:06:59:21:42:9b:c2:1b:ee:10:69:56:73:7d:be:83:07:
09:fd:43:34:da:11:44:bc:e4:d9:46:2b:7c:ff:d7:99:28:d8:
ff:79:0d:5c:c7:04:17:79:a0:06:e5:56:54:5d:9b:81:0c:25:
d2:3e:be:4a:a1:78:8e:6d:ef:11:b9:93:55:02:7d:c5:01:f5:
4c:80:3c:b7:cf:08:1f:eb:d5:33:46:67:ec:31:b0:7b:ed:d3:
1a:3d:ba:d2:8c:8e:c3:ef:d3:81:fd:b7:a4:6f:7e:98:62:e9:
04:28:3b:86:7b:af:91:68:8d:d4:9d:1b:06:e8:45:1e:8d:78:
43:e7:06:dc:76:58:0e:28:36:79:6f:19:cb:cf:f5:08:ae:ae:
27:03:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:09 2023 by rpki-client on console.sobornost.net