Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/fixl6aWfbisd9gtgdi6dYN4x69A.roa
File: fixl6aWfbisd9gtgdi6dYN4x69A.roa (raw, json)
Hash identifier: PiBKX3OWXG/6k/P5r+Le2BQXeapaVVZYtrDuqzn9c6c=
Subject key identifier: 7E:2C:65:E9:A5:9F:6E:2B:1D:F6:0B:60:76:2E:9D:60:DE:31:EB:D0
Certificate issuer: /CN=47e01c89d68f7fdedc2ddfb2553459cc8cbdbce8
Certificate serial: 3864E2
Authority key identifier: 47:E0:1C:89:D6:8F:7F:DE:DC:2D:DF:B2:55:34:59:CC:8C:BD:BC:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-AcidaPf97cLd-yVTRZzIy9vOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/fixl6aWfbisd9gtgdi6dYN4x69A.roa
Signing time: Sat 01 Jan 2022 01:03:07 +0000
ROA not before: Sat 01 Jan 2022 01:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210506
IP address blocks: 62.3.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3695842 (0x3864e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e01c89d68f7fdedc2ddfb2553459cc8cbdbce8
Validity
Not Before: Jan 1 01:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e2c65e9a59f6e2b1df60b60762e9d60de31ebd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:1b:88:01:b6:a3:ee:31:7e:fe:8f:9a:f4:
77:51:74:d3:72:33:28:1c:b7:fd:8f:c9:46:43:c5:
b0:40:11:dd:04:d8:e1:5c:11:3a:a2:c1:b5:c0:45:
9d:5d:fc:55:de:43:b3:aa:3d:96:ed:5e:bf:2e:4a:
dc:aa:89:75:cb:11:1d:bc:70:34:ca:10:4a:4a:21:
a2:48:1f:03:ad:23:9c:4d:06:91:fd:15:eb:99:05:
b1:45:05:5f:be:35:65:47:6b:70:a8:ab:9a:c8:5f:
d0:64:74:8c:52:3a:1d:a8:4b:53:93:b1:ce:ef:be:
a3:c1:f1:c3:de:e6:54:ad:6f:a0:c3:b6:fa:4d:17:
94:13:c4:55:7c:c3:c7:e5:0c:0e:13:a8:72:f9:ba:
9a:d5:71:56:01:c2:f0:e5:39:49:39:f2:24:e4:31:
b1:fa:f4:a5:2e:0c:23:28:c6:92:ad:d2:77:b3:c5:
46:a1:49:80:1e:ac:6b:24:18:24:de:5b:86:be:2d:
74:92:15:cf:1c:bc:13:d5:66:58:af:68:df:3f:0e:
5c:92:da:c2:51:f3:79:3b:5a:71:1a:ca:d2:47:66:
ab:f7:71:1e:e6:9f:d3:5a:ad:ed:2c:4b:fc:db:04:
31:68:51:03:b8:17:99:5f:d6:a9:d5:96:80:d6:d0:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:65:E9:A5:9F:6E:2B:1D:F6:0B:60:76:2E:9D:60:DE:31:EB:D0
X509v3 Authority Key Identifier:
keyid:47:E0:1C:89:D6:8F:7F:DE:DC:2D:DF:B2:55:34:59:CC:8C:BD:BC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-AcidaPf97cLd-yVTRZzIy9vOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/fixl6aWfbisd9gtgdi6dYN4x69A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/R-AcidaPf97cLd-yVTRZzIy9vOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.38.0/24
Signature Algorithm: sha256WithRSAEncryption
45:db:f3:85:9a:c2:3c:65:37:83:c9:0f:9d:d4:6c:aa:36:a6:
83:90:23:77:fb:cb:6c:a1:64:a8:58:e1:93:bd:a0:6f:2a:25:
31:83:66:7d:4f:42:79:a5:e5:6d:1a:37:2e:32:cd:60:48:51:
5e:4d:32:cb:55:07:09:79:da:b6:86:8d:30:5e:d4:42:91:d9:
81:d8:0d:39:c6:b7:f1:07:4f:5c:f3:75:b3:eb:dd:99:d2:cf:
6e:e4:53:41:ec:04:3a:e8:84:32:67:fa:0a:72:db:09:a6:54:
f9:d8:0a:8c:31:26:87:4a:75:68:3b:6f:1e:d1:bd:5a:02:fb:
fc:91:a2:b2:e8:0d:cd:ea:b0:c1:ce:2d:05:fe:c9:43:95:7a:
67:c3:57:70:cf:81:28:5b:5a:17:73:87:d8:41:da:9d:53:4e:
a8:3b:d3:03:c5:53:6e:d5:1f:04:ca:2c:ee:44:5b:9a:11:93:
cc:da:a0:dc:ee:64:f7:33:4e:40:dd:a2:9b:ef:86:eb:d6:5a:
1b:80:f2:f8:e2:58:87:ab:d8:b6:2d:6b:25:72:e5:51:3a:bf:
11:1e:d8:15:b1:28:fc:7f:16:ab:ec:e7:ee:2c:bc:12:d8:98:
7a:87:57:0c:89:c5:5f:fd:20:73:80:7a:d9:e5:87:03:a3:d4:
2e:ce:7b:f7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDOGTiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
ZTAxYzg5ZDY4ZjdmZGVkYzJkZGZiMjU1MzQ1OWNjOGNiZGJjZTgwHhcNMjIwMTAx
MDEwMzA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ZTJjNjVlOWE1OWY2
ZTJiMWRmNjBiNjA3NjJlOWQ2MGRlMzFlYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0J0biAG2o+4xfv6PmvR3UXTTcjMoHLf9j8lGQ8WwQBHdBNjh
XBE6osG1wEWdXfxV3kOzqj2W7V6/Lkrcqol1yxEdvHA0yhBKSiGiSB8DrSOcTQaR
/RXrmQWxRQVfvjVlR2twqKuayF/QZHSMUjodqEtTk7HO776jwfHD3uZUrW+gw7b6
TReUE8RVfMPH5QwOE6hy+bqa1XFWAcLw5TlJOfIk5DGx+vSlLgwjKMaSrdJ3s8VG
oUmAHqxrJBgk3luGvi10khXPHLwT1WZYr2jfPw5cktrCUfN5O1pxGsrSR2ar93Ee
5p/TWq3tLEv82wQxaFEDuBeZX9ap1ZaA1tBhjQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFH4sZemln24rHfYLYHYunWDeMevQMB8GA1UdIwQYMBaAFEfgHInWj3/e3C3f
slU0WcyMvbzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Ui1BY2lkYVBmOTdjTGQteVZUUlp6SXk5dk9nLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yNC85Yzc4ODgtZTcxMy00OTNjLWFkODMtNDgwZDQ1MDJmNTAxLzEv
Zml4bDZhV2ZiaXNkOWd0Z2RpNmRZTjR4NjlBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85
Yzc4ODgtZTcxMy00OTNjLWFkODMtNDgwZDQ1MDJmNTAxLzEvUi1BY2lkYVBmOTdj
TGQteVZUUlp6SXk5dk9nLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMmMA0GCSqGSIb3DQEBCwUAA4IB
AQBF2/OFmsI8ZTeDyQ+d1GyqNqaDkCN3+8tsoWSoWOGTvaBvKiUxg2Z9T0J5peVt
GjcuMs1gSFFeTTLLVQcJedq2ho0wXtRCkdmB2A05xrfxB09c83Wz692Z0s9u5FNB
7AQ66IQyZ/oKctsJplT52AqMMSaHSnVoO28e0b1aAvv8kaKy6A3N6rDBzi0F/slD
lXpnw1dwz4EoW1oXc4fYQdqdU06oO9MDxVNu1R8EyizuRFuaEZPM2qDc7mT3M05A
3aKb74br1lobgPL44liHq9i2LWslcuVROr8RHtgVsSj8fxar7OfuLLwS2Jh6h1cM
icVf/SBzgHrZ5YcDo9Quznv3
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:27 2024 by rpki-client on console-ams.rpki-client.org