Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/uaPhUtshKACcptD65OzBlPpgRsA.roa
File: uaPhUtshKACcptD65OzBlPpgRsA.roa (raw, json)
Hash identifier: lx4lGanxJ7U8/h8gVhOtkg01cNZBg+dMmOQcfD3BWtw=
Subject key identifier: B9:A3:E1:52:DB:21:28:00:9C:A6:D0:FA:E4:EC:C1:94:FA:60:46:C0
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 0193773A4D783038F8040B9494CF8166FD3F
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/uaPhUtshKACcptD65OzBlPpgRsA.roa
Signing time: Fri 29 Nov 2024 09:22:09 +0000
ROA not before: Fri 29 Nov 2024 09:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 62.113.36.0/23 maxlen: 24
62.113.41.0/24 maxlen: 24
62.113.42.0/23 maxlen: 24
62.113.44.0/24 maxlen: 24
185.171.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:3a:4d:78:30:38:f8:04:0b:94:94:cf:81:66:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Nov 29 09:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9a3e152db2128009ca6d0fae4ecc194fa6046c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:02:a4:11:98:5b:58:e0:53:68:be:96:04:
33:e2:36:7d:70:05:ca:22:77:cd:5f:5d:8c:6a:0b:
00:e0:91:09:ac:72:2a:b9:d7:87:b2:08:37:f8:e6:
de:0d:59:c2:4e:3d:3b:62:f2:1e:f2:d1:92:87:d3:
b1:67:c0:01:b3:7a:e2:92:a7:9a:79:bf:de:3d:4a:
78:b6:5d:84:29:9b:e5:9f:9f:35:94:a5:5d:34:30:
be:60:2a:d0:ae:de:97:5c:c9:ec:fc:4d:3b:38:87:
eb:e7:a4:0d:3b:27:60:3f:23:a5:13:c8:f5:05:2e:
e2:92:03:0b:2f:f0:a2:d7:78:6f:17:e2:f3:a2:3b:
e9:5c:86:20:c9:3c:ae:68:3e:2f:0c:f2:88:78:68:
99:8c:1f:5a:84:93:97:27:8d:91:43:e5:da:16:35:
c3:56:0d:8a:57:fd:7b:24:43:29:7b:e6:44:3f:a8:
15:f1:da:ef:c1:d6:45:05:20:f8:0b:0e:d9:bc:45:
76:ea:15:e7:a2:c1:88:0b:b8:03:e9:52:e9:e7:64:
06:57:a1:df:fb:99:f5:9f:03:d8:9a:19:58:43:bd:
ce:ee:7a:fc:9a:14:8c:0c:3c:b0:41:48:83:e0:5f:
c9:25:3b:cb:71:25:c5:34:8a:14:59:1b:b6:c4:f8:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:E1:52:DB:21:28:00:9C:A6:D0:FA:E4:EC:C1:94:FA:60:46:C0
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/uaPhUtshKACcptD65OzBlPpgRsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.36.0/23
62.113.41.0-62.113.44.255
185.171.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:44:48:0b:5a:64:fe:a6:42:5b:97:ca:07:d3:a0:74:58:69:
36:55:ab:54:8d:0a:4f:5b:6b:b7:50:0a:d9:10:46:3b:63:6f:
6a:37:16:7b:58:01:57:5e:61:58:a1:f1:24:91:6b:e2:4d:30:
dd:97:0e:d2:44:1c:bc:8c:1f:6a:84:af:58:0a:17:9b:15:eb:
0b:7e:46:51:e5:bc:93:7b:ee:da:8f:a5:6a:5a:ee:34:fe:41:
a3:31:49:c4:f1:47:80:98:53:65:3f:da:0f:04:7d:c3:17:1c:
c8:f5:c5:b4:25:83:f9:07:2b:e3:1b:49:87:85:cb:e3:26:82:
ce:20:da:5c:4e:e5:22:21:6b:24:1a:aa:9c:ff:d8:68:eb:27:
52:b1:af:d9:6b:60:6f:e9:d8:fc:2f:e3:7c:fc:17:eb:3d:13:
1c:2e:cb:79:13:50:43:44:fd:da:6f:a8:d2:b3:2b:f8:4e:1b:
53:46:59:99:b5:44:b8:4f:21:f2:26:b5:e9:86:cd:89:32:a5:
5f:a2:8d:9d:65:51:8d:a0:ac:8e:eb:2b:ef:6b:79:8c:e9:f3:
83:bd:b9:03:df:e3:00:6a:aa:1b:6c:97:61:52:3e:b2:1f:61:
58:06:56:cb:c0:58:ec:4f:b3:5c:03:0a:1d:19:87:eb:69:6a:
46:e7:ac:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:12 2024 by rpki-client on console.sobornost.net