Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/QsNMkQK3CrW4TqGCXwGqNiwqiSk.roa
File: QsNMkQK3CrW4TqGCXwGqNiwqiSk.roa (raw, json)
Hash identifier: 17N/ynGDJ68XbTYaiFydIDIxLvuO8fFTDTSX1ZKAZlM=
Subject key identifier: 42:C3:4C:91:02:B7:0A:B5:B8:4E:A1:82:5F:01:AA:36:2C:2A:89:29
Certificate issuer: /CN=0a7091134470f04ede2bcfb1af0f58ac2b5f12f3
Certificate serial: 018571553F1C0424D49CAE1C1F2A13110F36
Authority key identifier: 0A:70:91:13:44:70:F0:4E:DE:2B:CF:B1:AF:0F:58:AC:2B:5F:12:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/QsNMkQK3CrW4TqGCXwGqNiwqiSk.roa
Signing time: Mon 02 Jan 2023 07:14:50 +0000
ROA not before: Mon 02 Jan 2023 07:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 62.106.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:3f:1c:04:24:d4:9c:ae:1c:1f:2a:13:11:0f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7091134470f04ede2bcfb1af0f58ac2b5f12f3
Validity
Not Before: Jan 2 07:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42c34c9102b70ab5b84ea1825f01aa362c2a8929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:39:48:ab:46:31:9e:34:ee:3c:80:35:cb:
e9:13:8c:aa:37:6a:1c:74:e4:44:aa:a2:df:e4:77:
f4:49:37:fb:35:e7:86:73:6d:63:5e:18:d4:a0:22:
fd:a1:56:1f:61:04:be:c1:0b:9b:25:88:56:2b:ad:
19:3a:f8:70:e9:3f:21:ca:48:d6:3e:40:d1:2b:e7:
64:1b:c8:8f:ea:5f:10:6e:c2:72:ea:c0:14:79:31:
3f:ee:32:dd:95:c5:18:af:97:fd:d5:06:60:a2:c4:
92:ff:6a:93:ac:6b:e7:65:1f:39:05:ed:01:34:96:
e4:71:12:cf:c8:f5:e7:2e:2f:8e:ee:6a:95:ff:20:
a5:4c:a2:6b:76:84:8f:ba:be:f6:8a:53:08:ab:d9:
f7:57:09:ef:8e:02:ea:1b:b7:92:13:cc:2f:3a:37:
4e:20:2a:f2:bc:9d:00:71:42:24:62:59:a8:e8:29:
23:80:08:ff:fc:c4:18:9a:00:e2:23:24:33:ff:19:
df:a1:74:d5:c3:57:10:de:97:7e:7e:ac:04:e8:d4:
2e:62:b8:e5:c7:2f:b0:f7:55:82:12:de:f4:07:ae:
44:04:89:29:3f:27:bd:ff:f7:ec:1c:8a:60:6f:c1:
9d:fe:cb:1c:65:d4:37:0c:43:13:2f:17:98:d0:03:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C3:4C:91:02:B7:0A:B5:B8:4E:A1:82:5F:01:AA:36:2C:2A:89:29
X509v3 Authority Key Identifier:
keyid:0A:70:91:13:44:70:F0:4E:DE:2B:CF:B1:AF:0F:58:AC:2B:5F:12:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/QsNMkQK3CrW4TqGCXwGqNiwqiSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.94.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a3:4e:9c:83:c8:c1:67:b1:8e:a4:30:1d:46:8d:9f:15:2a:
45:e4:06:f8:d5:0a:7b:f5:ca:b1:de:4f:6b:3d:86:da:2b:27:
39:bc:3c:bf:c7:a8:14:a8:21:cc:60:f9:d5:31:12:86:85:25:
25:d0:28:f9:64:06:ef:74:c5:e0:3f:c4:83:ff:2d:00:fb:ce:
94:0c:46:67:7a:3b:f3:c4:3e:a0:c2:01:89:85:81:22:37:64:
e9:d6:26:07:b8:6b:81:9c:0e:b7:a1:90:de:bc:4e:94:e9:00:
50:6a:2a:18:2e:6e:bf:35:4c:54:47:01:23:f4:2f:51:87:12:
cc:28:e0:29:39:6d:8b:56:d4:95:61:08:dc:50:e3:33:47:ba:
33:b7:5b:d2:8d:07:ae:b1:27:e2:cc:37:26:03:b7:f8:fd:ad:
a7:01:37:3b:47:b4:d9:ca:d4:d2:7d:1f:e9:5f:24:49:62:9c:
23:6b:f9:36:65:f6:61:77:92:68:69:da:bd:52:c5:53:1d:a2:
52:31:ac:e0:b2:38:7f:36:bb:ce:f4:7d:d2:5c:61:c2:f2:51:
24:0d:e9:f1:8e:86:97:03:6a:a2:e2:03:65:ae:19:63:e2:94:
22:76:4e:a6:34:82:39:06:4d:71:41:df:c0:d8:0f:1e:c7:e0:
e3:33:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 09:01:49 2023 by rpki-client on console-fra.rpki-client.org