Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/FqnDvKouzkwFhewOKbnx5cAnjt0.roa
File: FqnDvKouzkwFhewOKbnx5cAnjt0.roa (raw, json)
Hash identifier: 29DGo/zQi+/7QxNBopXm3bEe4IBwPIYL7jdzAKR/u3I=
Subject key identifier: 16:A9:C3:BC:AA:2E:CE:4C:05:85:EC:0E:29:B9:F1:E5:C0:27:8E:DD
Certificate issuer: /CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Certificate serial: 7762AA
Authority key identifier: 51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/FqnDvKouzkwFhewOKbnx5cAnjt0.roa
Signing time: Sat 01 Jan 2022 03:53:44 +0000
ROA not before: Sat 01 Jan 2022 03:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 62.3.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7824042 (0x7762aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Validity
Not Before: Jan 1 03:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16a9c3bcaa2ece4c0585ec0e29b9f1e5c0278edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:5f:b1:dc:7a:89:b7:44:5a:4d:bf:01:fc:
ec:ef:42:c0:a4:61:5e:b4:1c:8d:9f:93:c8:14:04:
a0:6d:6a:34:8d:cb:30:5c:d7:e4:f7:3e:ec:d4:df:
7c:2b:37:23:23:88:df:96:71:45:26:48:b3:df:ef:
0b:c8:b6:49:f5:23:79:c1:a0:f1:a2:46:e3:57:19:
a4:57:6f:72:08:e6:6d:11:d3:dd:1d:49:56:f3:ec:
72:d7:3a:da:c5:8e:e4:06:c9:f9:49:b1:55:f6:15:
74:52:f5:fa:cb:36:b5:99:b3:90:90:61:45:e6:5a:
83:a7:c8:fb:2c:f9:f7:8e:0d:e9:b2:1f:8f:09:2d:
e3:33:6e:87:fb:07:5f:6a:78:b3:fb:d5:97:b4:08:
e9:bc:83:c9:2a:2c:02:af:39:12:ea:0f:73:22:85:
ca:06:cc:af:57:89:83:84:29:e8:6b:1c:2e:36:9b:
45:87:47:df:d3:6d:3c:a1:f0:70:f4:2b:4d:d6:90:
f7:11:aa:93:1a:ac:26:43:ba:da:ca:75:71:23:d2:
60:44:6b:79:ba:eb:5f:c3:15:40:15:78:ac:bd:6e:
88:83:7d:03:5e:94:f6:0f:b9:c6:e9:b9:4a:11:8c:
3a:e7:87:1c:f9:10:80:d6:79:8a:7a:12:b4:9a:51:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A9:C3:BC:AA:2E:CE:4C:05:85:EC:0E:29:B9:F1:E5:C0:27:8E:DD
X509v3 Authority Key Identifier:
keyid:51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/FqnDvKouzkwFhewOKbnx5cAnjt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.11.0/24
Signature Algorithm: sha256WithRSAEncryption
05:62:5b:f7:a3:40:43:da:34:9e:1d:9d:44:50:31:05:b9:0c:
cd:cb:12:09:51:eb:c5:d3:c1:94:2e:1a:77:30:8a:06:5d:62:
5c:9f:89:d0:de:ea:26:5b:b3:87:cf:82:68:26:15:6b:21:d5:
ed:8d:78:56:e1:6c:db:e1:bf:ab:86:ff:e8:59:cb:b2:51:62:
63:ea:0e:be:33:bc:e4:e2:fd:6f:fc:69:d0:48:fb:22:25:f3:
6e:bf:8a:e1:79:c0:47:95:5a:da:71:6f:56:10:54:b7:00:65:
50:42:d0:7c:e1:bf:5d:e3:04:d1:7e:a2:da:7f:99:35:67:04:
69:e6:38:ae:4e:07:48:a6:62:a7:2c:9f:6e:a9:bb:92:4d:7c:
cd:ec:23:91:0a:9a:0b:2f:71:12:ac:aa:68:34:91:87:49:d0:
22:53:1b:b7:8c:f0:b3:49:7b:a2:50:6d:1a:b0:2d:ff:61:31:
fd:82:ae:d5:be:b3:29:ce:85:7a:72:cc:5c:53:98:4f:78:83:
6e:7a:16:a6:39:dd:5c:23:dc:6c:38:44:50:09:12:11:1a:9d:
7e:61:f5:05:6e:07:32:d6:03:d1:74:ad:26:02:ce:e1:d3:59:
01:86:8d:7a:e8:7f:0e:a3:e9:5b:2b:10:19:95:28:03:a8:5d:
71:13:d9:18
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDd2KqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
YjNiYTFjNGIxMTZlYzdjZjE5M2MwYjJmNjU1MTEzOTgzN2ZhZDIwHhcNMjIwMTAx
MDM1MzQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxNmE5YzNiY2FhMmVj
ZTRjMDU4NWVjMGUyOWI5ZjFlNWMwMjc4ZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwK5fsdx6ibdEWk2/Afzs70LApGFetByNn5PIFASgbWo0jcsw
XNfk9z7s1N98KzcjI4jflnFFJkiz3+8LyLZJ9SN5waDxokbjVxmkV29yCOZtEdPd
HUlW8+xy1zraxY7kBsn5SbFV9hV0UvX6yza1mbOQkGFF5lqDp8j7LPn3jg3psh+P
CS3jM26H+wdfaniz+9WXtAjpvIPJKiwCrzkS6g9zIoXKBsyvV4mDhCnoaxwuNptF
h0ff0208ofBw9CtN1pD3EaqTGqwmQ7raynVxI9JgRGt5uutfwxVAFXisvW6Ig30D
XpT2D7nG6blKEYw654cc+RCA1nmKehK0mlH16wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFBapw7yqLs5MBYXsDim58eXAJ47dMB8GA1UdIwQYMBaAFFGzuhxLEW7Hzxk8
Cy9lUROYN/rSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VWJPNkhFc1Jic2ZQR1R3TEwyVlJFNWczLXRJLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zNS85YmM1MmUtYzZmNi00YTY3LTgyNGEtMjRkOWM1ZmUzZmE0LzEv
RnFuRHZLb3V6a3dGaGV3T0tibng1Y0FuanQwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85
YmM1MmUtYzZmNi00YTY3LTgyNGEtMjRkOWM1ZmUzZmE0LzEvVWJPNkhFc1Jic2ZQ
R1R3TEwyVlJFNWczLXRJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMLMA0GCSqGSIb3DQEBCwUAA4IB
AQAFYlv3o0BD2jSeHZ1EUDEFuQzNyxIJUevF08GULhp3MIoGXWJcn4nQ3uomW7OH
z4JoJhVrIdXtjXhW4Wzb4b+rhv/oWcuyUWJj6g6+M7zk4v1v/GnQSPsiJfNuv4rh
ecBHlVracW9WEFS3AGVQQtB84b9d4wTRfqLaf5k1ZwRp5jiuTgdIpmKnLJ9uqbuS
TXzN7CORCpoLL3ESrKpoNJGHSdAiUxu3jPCzSXuiUG0asC3/YTH9gq7VvrMpzoV6
csxcU5hPeINuehamOd1cI9xsOERQCRIRGp1+YfUFbgcy1gPRdK0mAs7h01kBho16
6H8Oo+lbKxAZlSgDqF1xE9kY
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:54 2025 by rpki-client