Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/FnzdKKjxPmamPX_NCy-vbob58nw.roa
File: FnzdKKjxPmamPX_NCy-vbob58nw.roa (raw, json)
Hash identifier: Q30v8nsJ4ObCB3ns+iA9aMDNpBnY0cHntaS9XogqXsQ=
Subject key identifier: 16:7C:DD:28:A8:F1:3E:66:A6:3D:7F:CD:0B:2F:AF:6E:86:F9:F2:7C
Certificate issuer: /CN=b66de49fecb37d78018b6501cc287795b8c45564
Certificate serial: 01856DB87EA6183B96BDFAED31FD797A0B77
Authority key identifier: B6:6D:E4:9F:EC:B3:7D:78:01:8B:65:01:CC:28:77:95:B8:C4:55:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/FnzdKKjxPmamPX_NCy-vbob58nw.roa
Signing time: Sun 01 Jan 2023 14:24:45 +0000
ROA not before: Sun 01 Jan 2023 14:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61173
IP address blocks: 62.3.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:7e:a6:18:3b:96:bd:fa:ed:31:fd:79:7a:0b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66de49fecb37d78018b6501cc287795b8c45564
Validity
Not Before: Jan 1 14:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=167cdd28a8f13e66a63d7fcd0b2faf6e86f9f27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:6d:d7:31:ed:f5:ca:7e:79:00:28:e4:2a:
39:f0:4c:ae:5b:c4:1f:c2:94:cf:3d:f4:e7:3a:c0:
4d:fc:7d:c6:60:7f:b2:df:ad:06:c1:fd:4b:35:86:
f2:8e:39:1e:cc:93:d3:eb:6b:27:1b:7c:e2:25:08:
a4:dd:92:7f:9b:6a:37:ac:79:ec:6a:82:e6:64:9d:
be:2d:ef:58:37:0d:bb:a0:e7:70:c7:50:b6:ea:97:
5c:ee:d0:fd:4a:e1:0c:6b:bf:1c:14:e9:03:5e:4c:
20:16:d0:e0:48:d2:55:b1:86:3e:f2:03:5a:f5:e5:
8d:1e:33:ff:96:15:c7:09:22:1e:c4:b0:8c:b0:68:
bf:e2:49:cf:99:38:eb:af:ec:26:5f:49:75:dc:0f:
5c:cc:32:b6:41:4d:37:7a:ae:d8:b6:c8:2c:d0:9c:
a7:f7:0b:6f:6f:64:a4:54:3d:eb:74:48:0c:91:3e:
02:e7:09:f4:2d:e9:0d:97:ec:c2:9c:20:3c:e0:2a:
3f:21:9b:68:f5:6c:93:8e:c5:ab:a1:f9:1c:1c:16:
ca:10:fa:da:fe:2b:c6:aa:e5:a6:2b:63:78:f8:4a:
7b:f7:68:46:6b:29:1d:d1:84:df:6b:22:31:da:8f:
3f:04:47:0b:f8:0c:c7:d4:d4:27:3a:46:65:03:ec:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:DD:28:A8:F1:3E:66:A6:3D:7F:CD:0B:2F:AF:6E:86:F9:F2:7C
X509v3 Authority Key Identifier:
keyid:B6:6D:E4:9F:EC:B3:7D:78:01:8B:65:01:CC:28:77:95:B8:C4:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/FnzdKKjxPmamPX_NCy-vbob58nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e8:92:9c:fc:49:97:96:75:17:e8:75:f4:04:46:3a:47:ae:
30:45:ac:08:7c:ac:1c:bc:fa:0b:24:6b:85:89:ea:e2:07:58:
2b:79:a6:79:49:37:15:b8:6f:1e:f2:f9:9e:8c:85:9b:9a:5c:
c4:c1:8f:65:25:54:e1:7f:7d:a1:66:6b:c4:49:8b:f8:23:64:
02:41:69:b4:65:3e:7d:91:6a:f1:c1:c1:6f:71:39:31:e6:cf:
59:4e:51:66:8c:80:b0:3c:88:75:af:54:3f:9e:e5:df:00:6a:
cb:b8:3d:6b:a6:67:d0:37:5c:e6:06:62:a4:4d:34:c3:43:94:
13:dd:3b:7d:d7:2a:bb:25:de:0c:c8:e6:6b:8e:a2:3e:90:d0:
48:60:0f:4e:f2:de:62:0f:64:5f:53:ba:24:48:b4:2d:ce:40:
2a:8a:07:eb:1c:64:26:79:a3:b3:58:3d:24:dd:1c:25:2a:9a:
01:10:68:cf:a8:9a:a8:7a:09:6a:8d:7c:42:a2:67:ec:c6:a1:
ae:73:9a:35:1f:d6:23:5b:16:82:cb:85:35:62:dc:a7:7f:80:
b7:78:bb:f7:4c:ea:5f:6c:65:b7:48:6a:62:41:6a:35:09:34:
45:3e:6e:d9:19:50:40:2b:1b:cc:10:42:68:f8:96:49:81:ae:
2b:db:57:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org