Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/QQ6BdGDnmOvjoKW4WY5u19BCgfM.roa
File: QQ6BdGDnmOvjoKW4WY5u19BCgfM.roa (raw, json)
Hash identifier: aO55BSzLnhl4OCbrnR6U3r6qvIZmAPZL+vT5Kx4soHc=
Subject key identifier: 41:0E:81:74:60:E7:98:EB:E3:A0:A5:B8:59:8E:6E:D7:D0:42:81:F3
Certificate issuer: /CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Certificate serial: 018CC9BCB079F1FE9C69DAD6E6DE0D75C2A1
Authority key identifier: FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/QQ6BdGDnmOvjoKW4WY5u19BCgfM.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 62.68.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b0:79:f1:fe:9c:69:da:d6:e6:de:0d:75:c2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=410e817460e798ebe3a0a5b8598e6ed7d04281f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:22:d5:9c:5b:34:03:d6:42:07:0d:ae:05:
9a:5c:b8:3d:2a:ad:58:1c:fa:15:0e:d9:c7:7b:c2:
d2:66:50:05:be:50:96:b3:ce:1f:c3:97:bf:a5:ff:
2c:45:8a:dd:c5:98:02:42:12:ed:75:6c:26:80:d3:
5e:05:c8:68:07:ad:a6:71:56:74:88:d5:d2:d9:b0:
e1:ec:30:dc:29:00:0e:5b:f1:3a:22:64:4c:90:a5:
cd:80:d4:12:e1:04:49:f2:75:bc:c5:03:4d:09:7b:
48:cf:7e:76:2a:0f:1c:58:f5:23:a9:ad:b0:8f:a0:
fd:2f:fc:78:f7:4f:cd:24:23:71:82:df:e0:cc:32:
ca:0e:56:6a:b5:85:c9:90:6c:97:20:f0:38:e0:26:
45:e3:fd:9e:50:ff:c3:11:d2:42:0c:06:84:8c:1f:
13:28:82:fc:a7:06:83:a7:be:8b:13:4e:e1:a1:c3:
4c:fa:1e:8b:fb:2d:f3:de:01:a0:90:ff:0c:2a:75:
83:0f:16:00:64:26:80:e5:b0:f1:a0:29:ca:eb:61:
a5:98:31:c0:26:bb:c5:39:20:eb:e7:e4:f7:5b:96:
fb:6b:bf:fc:6c:aa:a3:72:df:25:fd:ae:00:3b:b6:
b4:ba:96:d5:4a:f8:68:07:31:36:90:c7:64:e9:61:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:81:74:60:E7:98:EB:E3:A0:A5:B8:59:8E:6E:D7:D0:42:81:F3
X509v3 Authority Key Identifier:
keyid:FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/QQ6BdGDnmOvjoKW4WY5u19BCgfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.80.0/24
Signature Algorithm: sha256WithRSAEncryption
43:da:61:a2:1c:95:d4:e2:93:ef:11:5d:a6:5f:b2:2e:37:d6:
ad:f9:b0:dc:b4:17:ee:b7:d2:a8:2b:89:f0:bc:38:19:d1:d4:
8e:8a:2b:9d:0a:05:ea:c3:62:5f:ee:28:8c:0c:3e:ec:28:dd:
d6:ab:60:50:e8:aa:2d:92:a4:6b:68:3e:9e:1b:4a:66:45:a0:
70:b4:d2:27:00:4c:38:10:05:3f:4d:f0:fd:7d:1a:1e:b7:6a:
d1:6a:e0:e7:6e:e3:93:9f:14:f0:b5:15:ab:cc:66:19:05:bd:
eb:7b:75:b0:1f:3d:23:bf:80:ad:b4:a3:3a:ab:74:26:f7:70:
02:2f:74:f0:ff:05:06:b5:28:20:5a:a6:83:95:dd:73:2a:78:
a6:a9:ef:b3:77:cc:47:07:09:99:69:25:6a:3a:cf:ea:a4:5a:
a3:e0:18:a9:05:1c:c8:e4:e9:ad:86:cc:fd:65:26:7b:37:7f:
e2:0b:b8:08:58:f9:00:59:36:63:05:09:5a:6c:89:70:a0:82:
8a:fe:63:e5:83:ef:43:c4:ce:46:3a:f9:a9:92:5c:1f:6a:fe:
b7:d3:e5:6a:5c:e4:49:4b:c9:64:1c:4c:9f:48:7d:04:e9:b0:
09:c5:c7:c0:7f:58:34:c9:ac:d3:ee:b1:58:bb:a5:44:37:9a:
0f:3b:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:40:17 2024 by rpki-client on console-ams.rpki-client.org