Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/qj01YBBY-qtD8RazAmd7ec7ce9U.roa
File: qj01YBBY-qtD8RazAmd7ec7ce9U.roa (raw, json)
Hash identifier: aMsf9fDhC3slH/Lsfv4u2/jqz36oJD8YosKYVW2Drj4=
Subject key identifier: AA:3D:35:60:10:58:FA:AB:43:F1:16:B3:02:67:7B:79:CE:DC:7B:D5
Certificate issuer: /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial: 8932EB
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/qj01YBBY-qtD8RazAmd7ec7ce9U.roa
Signing time: Sat 01 Jan 2022 02:53:36 +0000
ROA not before: Sat 01 Jan 2022 02:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 62.3.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8991467 (0x8932eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
Validity
Not Before: Jan 1 02:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa3d35601058faab43f116b302677b79cedc7bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:b0:e8:67:81:65:e5:e0:5f:de:f3:76:2d:
21:94:e2:0f:e8:f5:06:b1:69:18:aa:f0:84:c2:98:
e9:38:5a:34:c6:4a:bf:20:f4:b6:b9:2d:68:c7:c5:
ab:26:ac:4b:b5:d2:30:8b:17:f4:25:c8:7b:2c:d4:
99:ec:4d:65:d4:ee:68:72:ca:5a:8b:2c:16:77:ea:
75:32:d5:23:d5:18:ba:19:2e:31:65:77:b0:8a:6f:
35:c4:27:ef:7f:57:d7:b8:d2:b4:45:3c:0b:c8:f5:
54:08:10:44:97:a2:d9:d0:08:59:90:47:b6:15:95:
6f:a8:0b:86:13:d4:56:be:3a:b3:0b:b0:a2:3d:cd:
46:27:bf:35:e6:cc:3c:bd:61:4c:af:64:c3:4d:5b:
a7:92:ee:73:f5:93:75:ed:ad:82:a1:78:46:b4:8f:
a0:47:6e:24:39:d1:04:17:71:91:c9:c3:53:02:bf:
2c:4a:c7:98:1a:a9:0d:af:99:68:37:3f:c4:fd:97:
60:72:fd:38:cb:7e:20:a7:cc:0d:f4:45:e4:80:21:
71:e3:fe:ff:9b:fc:65:3f:de:64:81:a6:90:c6:54:
9d:b8:82:00:66:e6:2d:b8:d0:bb:42:f9:1f:01:29:
a3:df:18:c9:4d:45:58:fd:24:02:96:fc:6d:a3:5f:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:35:60:10:58:FA:AB:43:F1:16:B3:02:67:7B:79:CE:DC:7B:D5
X509v3 Authority Key Identifier:
keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/qj01YBBY-qtD8RazAmd7ec7ce9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.26.0/24
Signature Algorithm: sha256WithRSAEncryption
83:06:26:1f:05:51:03:58:a5:ee:2e:4f:c2:a0:7e:43:ce:c4:
29:85:f0:72:61:96:21:9b:fd:8d:d4:9c:27:2e:eb:2d:0e:75:
fc:ab:20:a3:3a:d9:6f:94:f7:ef:38:2c:8e:e6:e8:b0:75:d4:
2d:21:a3:a7:b7:ec:18:b8:60:9e:1e:87:09:d9:5a:3d:a7:72:
76:d2:c2:27:2b:13:4b:0f:ce:65:df:25:05:1b:a1:d9:7a:dd:
1c:1a:7b:68:7f:c0:23:5f:94:89:e6:c3:85:c7:7b:e9:8e:07:
6e:9e:af:e0:4c:97:77:9c:7f:39:f4:5f:a7:35:3c:10:35:7d:
5a:43:98:b8:92:62:58:f7:37:36:27:ce:18:63:40:18:a0:6f:
eb:70:f9:62:b5:4f:c0:a4:0b:9a:97:2a:c9:13:db:ee:fe:59:
0c:c9:b1:b5:1e:d9:d6:10:c6:a1:5f:7f:f9:27:68:45:54:94:
c3:86:c6:21:73:e1:b6:eb:a4:f5:58:ee:a8:d7:59:01:c4:8e:
5d:dd:1f:5c:16:37:8e:c8:25:fa:de:d8:47:36:3d:34:f3:09:
e0:95:14:a3:5c:8e:f3:e5:75:a9:03:f6:77:da:b4:bc:48:d1:
93:74:7b:8e:d5:e6:2c:ce:fe:6c:3c:cc:bc:c6:ee:62:37:cf:
34:f7:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:30 2025 by rpki-client