Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/qKA24etLACs3yUgcJKqjlmMSnL8.roa
File: qKA24etLACs3yUgcJKqjlmMSnL8.roa (raw, json)
Hash identifier: pevynXVHvqjQL7dLzNdC4fCWBcSHTLNstYf5MHFc67M=
Subject key identifier: A8:A0:36:E1:EB:4B:00:2B:37:C9:48:1C:24:AA:A3:96:63:12:9C:BF
Certificate issuer: /CN=a76e0453e24186ac489641124630e37517aa22e4
Certificate serial: 79D6B6
Authority key identifier: A7:6E:04:53:E2:41:86:AC:48:96:41:12:46:30:E3:75:17:AA:22:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p24EU-JBhqxIlkESRjDjdReqIuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/qKA24etLACs3yUgcJKqjlmMSnL8.roa
Signing time: Sat 01 Jan 2022 01:55:18 +0000
ROA not before: Sat 01 Jan 2022 01:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 62.3.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7984822 (0x79d6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76e0453e24186ac489641124630e37517aa22e4
Validity
Not Before: Jan 1 01:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8a036e1eb4b002b37c9481c24aaa39663129cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:b3:72:ab:a9:70:2e:43:85:13:52:a9:b8:
ef:88:47:57:fa:90:e9:d0:0b:8e:59:7c:c1:7a:e1:
b5:d7:13:c8:4e:89:9f:58:73:af:a3:3d:1b:fd:33:
38:b2:3a:d7:7b:34:5e:c5:ab:5f:7f:73:42:ed:7a:
6b:f7:b0:58:a3:e5:66:fb:01:fd:c8:a3:24:f1:d1:
7c:cb:45:d0:c5:e2:ed:2f:08:8e:00:14:72:fe:1d:
a9:8f:91:c2:a7:c9:e5:ad:51:24:37:78:56:77:55:
d3:f4:27:6a:a1:9b:3c:87:7b:ae:5e:52:39:a3:95:
bb:0b:df:14:a4:e0:a4:91:c9:b6:26:93:67:47:4b:
64:f5:59:0b:45:2d:98:1d:e3:ca:0d:cc:f2:24:60:
7f:eb:c5:5f:9a:12:c6:fe:da:dc:be:e9:74:f9:8d:
ed:05:6b:64:9e:80:05:69:8d:64:3c:5c:f2:a9:f0:
60:a7:2a:8b:0b:b8:2f:fd:4b:fd:12:4e:04:fd:c6:
26:f6:0f:a2:c6:9c:19:5f:38:ac:28:62:06:e7:22:
bc:a9:ba:f9:ca:8a:1a:71:75:fe:1a:b4:b4:79:4c:
b5:3a:e4:4d:18:46:cb:43:16:a2:cd:8f:89:0a:cf:
f6:65:69:f3:6a:cd:d2:a3:33:92:5c:e2:44:34:dd:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:36:E1:EB:4B:00:2B:37:C9:48:1C:24:AA:A3:96:63:12:9C:BF
X509v3 Authority Key Identifier:
keyid:A7:6E:04:53:E2:41:86:AC:48:96:41:12:46:30:E3:75:17:AA:22:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p24EU-JBhqxIlkESRjDjdReqIuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/qKA24etLACs3yUgcJKqjlmMSnL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/p24EU-JBhqxIlkESRjDjdReqIuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.12.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0f:2c:b4:65:67:c0:56:b0:e4:b1:cc:cb:a4:fc:36:39:98:
31:36:86:8b:8e:76:25:3f:a9:9d:7d:fd:c4:df:df:ed:13:1e:
9e:68:98:a0:a0:65:96:ce:1a:93:e5:32:c8:11:f0:f6:c8:92:
00:68:d0:f5:b4:7e:a4:2d:76:a6:e3:5f:f2:15:20:83:1f:6d:
c3:fb:3e:3e:d6:3e:8d:40:20:7f:1c:1e:d5:30:ad:de:b3:1f:
09:33:55:85:47:e8:b8:1c:71:bd:55:77:19:f8:01:57:09:21:
4b:16:bd:b8:99:fe:57:84:9c:91:f6:df:a1:38:c0:63:54:2e:
6f:35:2b:d2:0c:7d:71:f9:37:8f:7d:58:ec:4a:e1:a9:4b:66:
5b:7e:1b:fe:a7:14:fc:f8:67:d6:6b:de:fe:6d:d5:7f:d7:c1:
61:87:85:df:b0:46:46:5c:62:16:4c:06:7d:57:02:49:9a:bf:
cd:30:b4:b2:00:9b:da:ca:0b:a0:62:b3:fc:14:ca:f2:4a:d9:
59:21:39:31:57:24:e8:d9:72:26:df:ea:72:de:0e:27:2c:df:
cd:37:13:8f:cd:30:de:2c:3b:76:43:2a:85:b1:56:9f:0a:0c:
b3:3c:65:af:67:97:a9:af:47:e8:2e:8e:ee:b6:b0:12:60:41:
a6:f3:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:16 2024 by rpki-client on console-fra.rpki-client.org