Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/1-QLCRCLjyoW1ebaJFPKfm9TskrQ.roa
File: 1-QLCRCLjyoW1ebaJFPKfm9TskrQ.roa (raw, json)
Hash identifier: 4ZoLaHuNZo44SHomPkU8kMIGGfvgWrT3cpnvSfQvxMo=
Subject key identifier: F9:02:C2:44:22:E3:CA:85:B5:79:B6:89:14:F2:9F:9B:D4:EC:92:B4
Certificate issuer: /CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Certificate serial: 77226D
Authority key identifier: 51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/1-QLCRCLjyoW1ebaJFPKfm9TskrQ.roa
Signing time: Sat 01 Jan 2022 03:53:43 +0000
ROA not before: Sat 01 Jan 2022 03:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 62.3.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7807597 (0x77226d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Validity
Not Before: Jan 1 03:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f902c24422e3ca85b579b68914f29f9bd4ec92b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:54:cb:51:2b:3e:5d:97:b2:89:e9:bf:78:
ce:a4:a1:a6:cd:b7:61:e6:d1:19:5c:95:5e:f9:dd:
ac:ed:10:bb:14:7e:1c:38:a4:86:05:87:b3:91:d1:
15:2b:e9:c4:98:08:e4:76:fd:b0:64:22:2c:79:62:
53:53:6b:62:ae:af:ca:8d:13:dd:dc:11:86:67:cc:
6d:d5:2d:aa:2a:1c:51:e8:b3:81:84:8e:b3:0e:a7:
8b:b0:de:5c:ac:de:a9:60:bc:5d:63:ad:05:04:c6:
04:2b:18:bd:8b:48:84:3d:3e:e2:27:3a:12:51:9d:
ca:d9:fb:74:2b:07:f4:b6:00:90:df:2d:e3:09:97:
24:32:4c:bf:e8:30:8c:fe:6c:ff:84:21:5d:72:80:
5c:23:71:ac:47:a9:6c:64:86:3e:d1:80:0b:c1:95:
5b:1c:5b:f0:35:65:24:49:2e:68:b7:f1:46:7e:c8:
17:9f:48:03:ff:f4:a0:17:05:64:bb:d9:2b:28:14:
04:f0:62:05:c1:3b:40:cf:e1:50:8a:23:04:ac:fd:
6b:16:07:d3:91:08:dc:9c:4a:79:f0:cf:4f:a7:7a:
44:39:b1:e5:7e:56:d1:38:2d:83:53:fc:d1:82:36:
f1:1e:e2:66:21:41:89:c5:75:e1:66:86:a5:71:4c:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:02:C2:44:22:E3:CA:85:B5:79:B6:89:14:F2:9F:9B:D4:EC:92:B4
X509v3 Authority Key Identifier:
keyid:51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/1-QLCRCLjyoW1ebaJFPKfm9TskrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.11.0/24
Signature Algorithm: sha256WithRSAEncryption
91:65:32:96:ee:f3:45:93:dc:42:9e:4c:ae:ce:0e:46:16:c3:
0e:a1:7e:55:1b:2a:3f:d7:fd:01:24:73:90:52:3f:41:52:41:
7e:0e:54:d3:b0:b0:ec:2e:5d:b4:7e:be:dc:31:f9:e0:2e:4c:
1c:86:10:e8:a0:0a:06:21:89:62:cb:29:43:58:e7:59:b2:2c:
a1:3d:e1:e9:4b:95:e8:99:b7:d6:a4:4f:67:37:c1:b8:99:7c:
12:30:05:cc:c4:90:e8:13:97:9a:63:61:d8:38:f8:2f:09:d6:
25:3d:65:43:d8:5e:63:a7:fd:63:9e:cf:32:6a:c7:26:c2:63:
d3:d6:c6:db:9d:26:be:d7:09:f7:65:2d:05:e0:f7:d1:cf:48:
8a:a3:d0:cf:23:99:67:63:b9:62:43:a0:69:1f:63:43:e9:54:
98:f7:24:1c:6d:57:87:11:5d:4e:7f:ac:79:45:75:34:47:65:
0c:17:19:8c:db:ab:cd:01:9d:24:3c:41:58:36:fa:1c:3f:58:
e9:ea:f0:d4:1d:85:73:ff:7d:b5:61:be:e3:ec:a8:a2:6c:95:
4f:8d:a2:0d:aa:b4:b1:41:c5:7a:b4:79:cc:ac:be:87:79:d0:
3e:ec:51:60:77:cb:58:86:e4:ba:31:48:bf:d1:de:67:7f:6b:
b5:df:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:23 2025 by rpki-client