Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/qrIW3fRHyOVmrkFm_R1gwAezBAk.roa
File: qrIW3fRHyOVmrkFm_R1gwAezBAk.roa (raw, json)
Hash identifier: QB8ppKRB0bDu4zkgg86hAzA0y9rz5bS0rVINdw/+Nz0=
Subject key identifier: AA:B2:16:DD:F4:47:C8:E5:66:AE:41:66:FD:1D:60:C0:07:B3:04:09
Certificate issuer: /CN=c546dc2639c6766d33e769293cf9a1d790efb97a
Certificate serial: 01857139E2D1EB7E54ACAB8F921A18424815
Authority key identifier: C5:46:DC:26:39:C6:76:6D:33:E7:69:29:3C:F9:A1:D7:90:EF:B9:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbcJjnGdm0z52kpPPmh15DvuXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/qrIW3fRHyOVmrkFm_R1gwAezBAk.roa
Signing time: Mon 02 Jan 2023 06:44:57 +0000
ROA not before: Mon 02 Jan 2023 06:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 62.3.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e2:d1:eb:7e:54:ac:ab:8f:92:1a:18:42:48:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546dc2639c6766d33e769293cf9a1d790efb97a
Validity
Not Before: Jan 2 06:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aab216ddf447c8e566ae4166fd1d60c007b30409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:50:3d:8d:c6:5e:99:b1:1e:6d:45:d0:f3:
13:3e:a6:61:c9:9d:bb:0a:aa:68:18:a6:14:59:91:
0e:96:c2:90:d5:1f:8d:b5:92:87:25:c3:40:a2:f1:
4e:88:f1:fc:27:79:44:54:d7:55:81:8d:03:5b:c6:
eb:c3:af:e1:66:f2:53:b2:29:25:b0:f7:c1:94:60:
a6:7e:05:33:f5:75:5b:44:aa:c1:63:3f:e0:bc:cd:
d8:09:78:d7:77:24:b2:54:c5:69:8e:39:b2:72:dd:
b0:ac:4d:f6:82:13:35:f0:aa:0f:7e:1e:28:a0:41:
34:d5:35:c7:9f:44:08:94:d2:97:f5:ba:fc:cf:59:
01:00:0d:e6:ae:4e:3a:23:81:0f:8f:35:d4:75:ca:
44:6b:e2:6a:4a:df:33:97:45:2a:62:66:35:91:3b:
ce:a9:3f:37:21:f9:71:28:55:9d:fd:99:22:ff:b0:
a0:99:39:c9:1c:de:17:d0:bc:77:e9:6d:38:bb:82:
e3:36:5f:db:83:3f:1a:03:cf:d5:72:bd:ec:07:88:
8c:28:b5:db:e8:99:46:95:69:e9:27:d7:c2:c5:3d:
37:d7:d5:85:d1:55:14:b5:45:34:d7:b7:53:fe:a6:
fb:92:5f:f2:99:1b:8f:92:9f:81:24:fd:9a:1c:50:
e0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:16:DD:F4:47:C8:E5:66:AE:41:66:FD:1D:60:C0:07:B3:04:09
X509v3 Authority Key Identifier:
keyid:C5:46:DC:26:39:C6:76:6D:33:E7:69:29:3C:F9:A1:D7:90:EF:B9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbcJjnGdm0z52kpPPmh15DvuXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/qrIW3fRHyOVmrkFm_R1gwAezBAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/xUbcJjnGdm0z52kpPPmh15DvuXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f4:13:86:74:d6:0e:8e:aa:93:98:8a:18:f0:a7:b2:c5:71:
65:09:6c:62:42:ba:eb:14:36:bb:bf:85:19:21:e0:82:3a:28:
5d:88:fc:76:60:82:9a:c7:1c:6d:3d:55:4c:7b:3a:34:0a:ee:
54:b2:93:9d:11:e2:fe:67:c1:91:14:33:79:f2:7c:e5:fd:f2:
8c:58:3a:d6:18:4e:b1:0c:d3:67:f7:df:00:3a:3d:82:fd:77:
cd:63:c8:90:65:67:89:52:56:ba:87:6f:df:24:01:64:bd:44:
78:96:8f:56:f3:b0:dc:f2:2d:6a:a1:03:20:80:35:00:8e:3e:
fc:3a:f7:43:b5:0f:0a:25:94:d5:79:49:41:7c:5d:b0:c8:90:
74:cf:e6:4b:b7:aa:f0:6d:f7:59:f5:7b:59:0a:ab:8f:51:50:
b1:7e:34:da:65:e7:4e:df:02:de:06:aa:ce:be:cf:72:3f:78:
dc:76:97:0e:c3:e9:76:55:fe:ae:57:51:95:c8:f8:4d:3d:4e:
d7:b9:d8:20:d9:47:d0:05:71:31:e2:02:bc:93:42:6d:34:6f:
94:98:37:1a:ad:2b:93:3e:80:78:fe:dd:13:58:c9:58:f5:f0:
5d:5a:9a:c5:45:17:84:b4:1d:0e:55:8b:bc:25:36:f9:d9:0c:
33:9f:5c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:32:17 2025 by rpki-client