Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/nKUbhEAZtk6dnsMFSD1S3HpnSGk.roa
File: nKUbhEAZtk6dnsMFSD1S3HpnSGk.roa (raw, json)
Hash identifier: koW9+5UKKmt1dEJnFkpCgRZOAdz4RxuqnRA7Q7hrdH8=
Subject key identifier: 9C:A5:1B:84:40:19:B6:4E:9D:9E:C3:05:48:3D:52:DC:7A:67:48:69
Certificate issuer: /CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Certificate serial: C3E49C
Authority key identifier: 35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/nKUbhEAZtk6dnsMFSD1S3HpnSGk.roa
Signing time: Wed 02 Feb 2022 12:07:14 +0000
ROA not before: Wed 02 Feb 2022 12:07:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12838044 (0xc3e49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Validity
Not Before: Feb 2 12:07:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ca51b844019b64e9d9ec305483d52dc7a674869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:a9:cc:4a:69:62:bc:5e:bf:c7:49:c2:c3:
29:14:cb:4d:e8:bc:f9:ec:c4:86:00:fe:75:6a:c6:
af:f3:fb:3e:2f:ab:20:ba:28:e0:f9:92:b2:f6:94:
2d:ae:c6:3c:7f:a5:21:39:db:65:e5:a6:93:b0:6f:
4a:af:ef:f6:5f:d0:e5:b7:81:a3:49:9e:1f:9c:c5:
02:61:dc:46:c5:99:ab:99:de:ee:e6:d3:97:c6:e2:
35:3d:70:73:5f:23:4a:ab:42:70:44:83:98:0b:42:
23:22:92:c4:ac:04:dc:0c:10:f5:30:97:47:65:22:
7f:9d:59:fc:59:b3:b2:66:49:42:f3:8c:a0:f1:87:
16:a7:98:42:4b:ac:eb:c1:75:d7:ab:0c:9f:1d:94:
01:b7:3a:57:b7:b6:ea:30:38:8e:b3:99:bd:ce:5c:
fa:30:52:1c:52:0a:d5:39:41:d6:88:34:99:ee:e3:
6d:91:9f:18:3c:41:92:a8:4b:0e:c5:a1:1b:57:7c:
b1:e6:6d:d2:48:e8:c7:44:bf:15:eb:31:be:a7:db:
b1:51:92:1a:4a:dd:99:70:a9:ba:ac:40:93:a4:ce:
0f:53:b0:cc:fa:87:07:ec:e6:69:0a:9d:a8:41:1d:
59:fc:9e:6b:26:7d:f3:f6:cb:2b:fe:2c:b3:a8:35:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A5:1B:84:40:19:B6:4E:9D:9E:C3:05:48:3D:52:DC:7A:67:48:69
X509v3 Authority Key Identifier:
keyid:35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/nKUbhEAZtk6dnsMFSD1S3HpnSGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:43:d1:a9:09:a6:78:2e:20:a5:ed:3f:4e:57:a7:a9:92:bd:
e0:db:3d:26:99:82:9a:3d:0c:91:52:9c:c3:c7:5d:6a:b6:27:
33:e0:1c:6c:30:d8:53:f8:62:f7:81:71:ca:a2:88:aa:6e:c9:
e3:0f:b0:b0:3d:77:80:7f:4b:d7:32:8d:82:ce:bf:d5:ec:20:
0d:4f:38:b5:ad:8b:27:d2:9a:69:bc:7d:47:94:e1:fc:6b:59:
5c:e3:bb:c7:cb:cc:81:b3:6a:ce:e8:b6:87:ce:56:63:f2:4b:
a5:d5:85:12:1f:bf:2e:b9:e2:29:c1:14:2e:f3:a5:3d:8b:8f:
34:5d:57:83:84:9b:2b:82:44:c7:bb:68:c5:5c:1a:74:4f:2c:
b7:0d:d9:9b:db:ed:67:1a:d1:81:cb:35:2c:2c:6a:c9:cd:b9:
cf:4d:08:0d:56:fa:90:e7:a3:f8:73:c2:75:ea:4a:87:dd:39:
15:f9:70:5d:aa:28:84:f6:1a:84:48:4d:80:5b:67:cf:cc:4f:
c0:83:f7:2e:0a:71:d2:a7:80:30:d7:eb:f1:81:9d:1a:2e:eb:
73:52:00:58:3d:9c:f6:f2:66:46:c5:f0:8f:aa:43:99:2d:3a:
e0:2a:a1:24:16:1e:0c:95:06:78:ec:bc:67:4c:d5:a5:a8:5b:
2d:1c:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:37 2023 by rpki-client on console-fra.rpki-client.org