Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/Tbgav8x2GozHJnm9jcmaSdhAG2U.roa
File: Tbgav8x2GozHJnm9jcmaSdhAG2U.roa (raw, json)
Hash identifier: rxzC5DG+jmvW95K53iuaq8hJGsekLVwUFZecI/uFl/4=
Subject key identifier: 4D:B8:1A:BF:CC:76:1A:8C:C7:26:79:BD:8D:C9:9A:49:D8:40:1B:65
Certificate issuer: /CN=c423d13b2a1bda8cc07fab55caa64a341e31f403
Certificate serial: 0188916E1B2052EF78216A90C7D94E2FA2ED
Authority key identifier: C4:23:D1:3B:2A:1B:DA:8C:C0:7F:AB:55:CA:A6:4A:34:1E:31:F4:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCPROyob2ozAf6tVyqZKNB4x9AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/Tbgav8x2GozHJnm9jcmaSdhAG2U.roa
Signing time: Tue 06 Jun 2023 15:58:12 +0000
ROA not before: Tue 06 Jun 2023 15:58:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 62.204.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:6e:1b:20:52:ef:78:21:6a:90:c7:d9:4e:2f:a2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c423d13b2a1bda8cc07fab55caa64a341e31f403
Validity
Not Before: Jun 6 15:58:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4db81abfcc761a8cc72679bd8dc99a49d8401b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:3b:f3:5b:01:86:46:a8:5b:70:47:52:45:
fe:e5:10:cf:e5:ec:8b:0a:6f:48:81:a1:ad:4d:ca:
07:2f:04:c1:5a:46:6f:e8:05:cc:ee:0e:6e:59:19:
97:ac:d1:0e:72:d4:54:a6:c8:fc:4b:6b:ee:18:18:
b4:bc:1d:bc:63:c5:26:ba:df:99:b0:4d:ce:cf:f9:
a0:f2:93:7f:c8:0a:e3:f0:62:a7:b9:40:92:ad:1d:
b6:9c:81:c4:7c:a3:e3:21:ec:d9:7c:e5:44:9b:3c:
4d:b5:c2:d5:fb:0e:87:a2:52:51:64:9c:bf:a2:ca:
40:fe:0c:b2:39:1c:5f:4a:5b:ed:f2:a7:76:49:ca:
df:c4:bd:01:3f:de:2c:d6:78:30:e2:54:57:1c:5a:
0f:83:ec:f6:1e:2f:78:44:b1:f0:8e:a0:81:00:a8:
65:f1:42:2c:6c:aa:3f:f9:93:b2:86:0b:f5:f2:34:
d1:a5:bb:d8:35:4c:45:df:87:8f:45:5b:45:a5:03:
f3:a7:b0:15:8a:44:b5:09:09:dd:94:b5:41:ed:7b:
3b:b0:79:39:65:72:66:74:4a:c5:7c:04:21:b2:ba:
37:a8:a4:98:6e:24:af:6c:5c:92:40:ee:b0:ac:7f:
18:a9:a8:6f:9f:05:e2:bd:8d:98:45:78:9d:9d:5e:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B8:1A:BF:CC:76:1A:8C:C7:26:79:BD:8D:C9:9A:49:D8:40:1B:65
X509v3 Authority Key Identifier:
keyid:C4:23:D1:3B:2A:1B:DA:8C:C0:7F:AB:55:CA:A6:4A:34:1E:31:F4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCPROyob2ozAf6tVyqZKNB4x9AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/Tbgav8x2GozHJnm9jcmaSdhAG2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/26f604-7f39-4c95-90b7-1f5f98402ffb/1/xCPROyob2ozAf6tVyqZKNB4x9AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.49.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3d:28:c9:18:24:4d:30:8c:68:4a:0c:d0:a1:a7:e5:41:ed:
a6:40:f6:c3:b7:b6:51:6a:cc:eb:2a:17:c2:de:f9:e5:3a:e7:
1b:86:cb:44:bd:fb:3f:31:85:71:76:35:6b:f4:e2:17:46:59:
4d:7d:2f:8e:e0:54:42:71:a7:77:c2:3e:c7:9c:44:c4:0c:c7:
32:60:7a:e7:1c:82:1d:45:ad:58:d5:3a:1a:6a:11:54:5b:d5:
5d:cb:55:08:d7:40:37:44:68:f0:df:62:5c:d7:72:0b:df:95:
5a:56:39:ee:ba:33:82:4b:aa:3c:9e:4a:17:27:7a:b1:c2:d3:
a5:27:1f:c3:62:98:53:9c:d6:76:bc:d2:69:03:06:81:67:d6:
1e:4d:34:2e:ae:2a:8e:9f:64:07:3d:b3:aa:99:38:29:0f:3a:
cf:4d:78:ee:42:86:1e:cc:f4:c2:6a:0b:01:12:33:7e:c4:b8:
62:b4:c7:23:ef:39:a7:f3:28:66:04:6b:d3:02:d3:f5:43:3c:
0c:6b:8d:18:70:dc:d4:f1:26:d1:33:ff:ce:25:2f:de:ad:bd:
fb:75:78:d3:d8:a8:42:8b:83:e9:26:80:10:64:df:8e:b8:b2:
0c:cd:63:ea:20:9e:10:9d:66:0f:ed:64:86:a4:bd:8d:a9:ba:
04:31:09:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net