Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/qiUoDOutvg-CRul5OaV3f1OSXw0.roa
File: qiUoDOutvg-CRul5OaV3f1OSXw0.roa (raw, json)
Hash identifier: BmQ1BFNvREezMzxkz6rBoOtIWGN9wlC2yzlZzyUUefY=
Subject key identifier: AA:25:28:0C:EB:AD:BE:0F:82:46:E9:79:39:A5:77:7F:53:92:5F:0D
Certificate issuer: /CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
Certificate serial: 01856CB857BFDDD11CF22C7F3BE154DA158F
Authority key identifier: D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/qiUoDOutvg-CRul5OaV3f1OSXw0.roa
Signing time: Sun 01 Jan 2023 09:44:58 +0000
ROA not before: Sun 01 Jan 2023 09:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 62.204.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:57:bf:dd:d1:1c:f2:2c:7f:3b:e1:54:da:15:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
Validity
Not Before: Jan 1 09:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa25280cebadbe0f8246e97939a5777f53925f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:8c:3a:ad:b3:02:25:ed:16:b8:d1:c3:2f:
e8:52:ac:f5:6c:4e:42:5c:96:29:e9:17:98:f1:1a:
68:c5:08:ea:d1:d0:37:f5:dc:3e:9c:13:a3:7b:8b:
05:fb:2e:9f:1a:51:81:3a:70:cb:4c:21:cd:a6:29:
b8:4c:b3:02:25:58:bf:a4:88:0f:93:b0:f1:78:df:
07:ff:06:07:c4:61:3b:62:48:24:04:41:91:21:7c:
58:11:c1:9a:1d:31:52:6b:9e:d2:ba:da:83:4f:a5:
1f:81:22:f6:8c:3f:44:6e:cb:2e:13:94:71:7d:bb:
9d:f2:e0:7d:c4:a9:1d:c8:f6:8f:c7:20:ba:a3:9f:
08:00:83:1f:31:53:73:7b:31:d7:e1:14:9c:1b:38:
69:01:60:cb:44:47:9e:59:78:18:02:71:0e:f1:76:
05:f6:79:6c:d0:c2:36:18:89:a8:40:44:0e:af:34:
f6:bb:1d:9a:01:7d:38:b4:7e:d8:f8:d8:1d:f7:22:
77:8c:7e:bc:77:83:5f:50:a3:ad:e1:10:e3:e3:b5:
5e:c6:95:f8:cc:3d:a0:72:48:50:8a:46:a4:06:69:
93:3c:28:9e:88:3d:ff:22:52:45:df:45:17:50:87:
e8:cb:32:c6:81:79:45:92:e4:39:0d:e3:b8:2c:e1:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:25:28:0C:EB:AD:BE:0F:82:46:E9:79:39:A5:77:7F:53:92:5F:0D
X509v3 Authority Key Identifier:
keyid:D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/qiUoDOutvg-CRul5OaV3f1OSXw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/0mrk6biw_ZlNLMS-bG85zIua3Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:97:4b:02:be:82:5a:75:89:7b:d4:5b:bc:21:45:cc:aa:70:
db:a1:df:45:7b:40:37:97:ba:26:28:03:26:e2:ac:8f:f6:5a:
9b:e2:f5:3e:98:50:30:30:83:e3:30:62:54:ce:41:0f:fe:2f:
37:a7:41:f8:e7:1f:47:f5:de:e8:71:9b:3c:81:5f:81:bf:2c:
1e:dc:48:6f:bd:9c:fe:e6:0a:0d:c7:1e:ff:0c:96:d4:d1:7b:
7f:58:06:d0:85:1f:0c:4f:3f:8e:45:07:5a:02:21:bd:ea:9b:
1b:be:c4:b2:a7:33:86:5a:bf:49:e4:ae:a9:32:ac:ee:61:11:
7f:1a:43:8d:9b:b1:d2:f5:01:61:0c:e6:d4:e5:ca:33:5f:e9:
fa:61:1b:21:d4:7e:b4:a4:04:68:82:df:15:f1:1c:e4:d8:71:
9e:e8:45:21:2c:34:b4:7b:58:15:5c:45:e6:8a:84:c0:7b:79:
2e:14:c2:a7:2d:50:a6:b7:fd:76:0f:11:d2:02:5c:19:2f:4e:
aa:3a:3d:9f:4e:ef:88:7f:83:f7:80:36:a5:0e:7e:d3:25:ba:
23:82:b1:92:d1:96:ef:42:a4:3a:2a:01:a8:a2:ac:20:71:d1:
8b:e8:4a:ae:54:6e:f7:47:07:1f:c4:e6:b3:d9:3a:cb:8a:e7:
c1:ad:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org