Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/kq3_sk-tVKpLAbA9pGIiFOisIvg.roa
File: kq3_sk-tVKpLAbA9pGIiFOisIvg.roa (raw, json)
Hash identifier: 36azHWPYAQ1qa0xUFqT7VwZ3JF/+wLICyS+j8RRJMBo=
Subject key identifier: 92:AD:FF:B2:4F:AD:54:AA:4B:01:B0:3D:A4:62:22:14:E8:AC:22:F8
Certificate issuer: /CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Certificate serial: 018572E80CD76B1FB1C238B99C09AA7B9E00
Authority key identifier: 51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/kq3_sk-tVKpLAbA9pGIiFOisIvg.roa
Signing time: Mon 02 Jan 2023 14:34:48 +0000
ROA not before: Mon 02 Jan 2023 14:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 62.3.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:0c:d7:6b:1f:b1:c2:38:b9:9c:09:aa:7b:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Validity
Not Before: Jan 2 14:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92adffb24fad54aa4b01b03da4622214e8ac22f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7b:4e:e5:6a:ae:c3:58:01:99:1b:eb:21:25:
af:b4:b1:5b:33:0f:ac:95:ca:29:21:41:6a:f2:22:
bf:c9:72:51:82:01:84:32:b1:1b:dd:42:1b:08:4b:
21:ff:fa:bc:cd:92:30:6d:65:50:a0:34:f8:50:88:
f3:fb:0d:23:12:28:23:1c:b6:35:cc:ed:4f:e3:c7:
64:f3:ac:e3:7d:7e:fa:31:e1:12:b0:cd:6c:5e:33:
5f:5e:00:ea:ed:97:95:82:84:39:dd:1e:d4:9c:66:
ef:92:e4:42:52:12:71:9d:15:7d:34:88:79:bc:0a:
53:e1:4b:29:99:c3:cf:e7:99:14:89:d1:12:81:a7:
e3:f1:bf:41:10:4d:98:3e:24:7b:1f:a0:8d:11:cb:
f7:c6:12:44:d2:2d:25:40:d4:bb:e0:b5:fb:98:7b:
a9:4f:60:89:8f:36:31:e4:4a:38:20:37:ae:9b:33:
de:93:e8:64:64:c2:cc:f3:b2:ca:e4:0e:43:9c:0d:
87:67:e3:64:81:b7:d8:b1:d4:8e:91:db:5e:77:4a:
c6:a8:e4:d9:43:0f:aa:2d:bf:06:45:dc:ad:96:16:
5a:de:9b:33:c0:84:aa:c5:71:07:19:5a:54:b6:72:
ad:73:73:b9:e1:b2:d3:5b:48:4b:64:35:3f:4e:6d:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:FF:B2:4F:AD:54:AA:4B:01:B0:3D:A4:62:22:14:E8:AC:22:F8
X509v3 Authority Key Identifier:
keyid:51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/kq3_sk-tVKpLAbA9pGIiFOisIvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b8:4f:f2:67:06:34:23:7a:5b:b5:9e:e8:47:7b:e9:af:fa:
ec:85:ba:c0:41:81:10:64:3b:bb:a7:78:c8:82:e6:25:9f:5a:
dc:32:fb:b3:bf:60:ab:aa:c9:fc:56:40:74:ca:0f:31:ca:47:
d2:89:bc:bb:1d:18:96:16:f3:fa:90:eb:93:b0:b1:91:17:7b:
81:d8:57:71:28:a3:92:2a:ad:3e:ae:b4:9f:6a:bd:19:e1:80:
92:ab:90:5c:a7:6b:54:dc:0f:67:f3:f5:c9:3a:fa:88:12:de:
c9:15:22:6e:d6:30:d2:04:10:bd:a9:bb:17:e0:77:d2:8d:4d:
42:18:b2:35:c5:12:86:bb:3f:83:3b:11:14:71:86:65:be:ae:
ef:ab:89:f2:99:77:e8:33:f1:52:1e:15:b2:90:96:7d:d1:26:
29:ee:47:10:31:6e:68:4b:99:5d:82:3c:2a:6f:e4:84:22:f4:
ec:72:21:76:78:c7:67:34:40:49:98:7b:17:9b:37:68:c1:93:
98:ed:29:ce:f8:a7:5a:fb:75:fb:53:8b:d3:a7:50:08:de:92:
a7:bb:ce:51:9b:ef:c3:95:e1:29:4d:73:c8:ea:79:54:b8:c8:
aa:08:77:a9:73:8f:00:4e:f1:12:0d:40:3a:d1:e7:68:28:cd:
a5:a6:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:12 2024 by rpki-client on console-fra.rpki-client.org