Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/sQR7ApaOPLsGpP3eW9N3fHByr8M.roa
File: sQR7ApaOPLsGpP3eW9N3fHByr8M.roa (raw, json)
Hash identifier: bT+zbEFTzcxaHIAyAV5lhu45keQZGC9ukk2eCgCc1qE=
Subject key identifier: B1:04:7B:02:96:8E:3C:BB:06:A4:FD:DE:5B:D3:77:7C:70:72:AF:C3
Certificate issuer: /CN=a669dd121b8b5deb5129f3fdbaeba7ce3d6325ca
Certificate serial: 018571D794D763D2E14C5510E3F8EE1FF3D6
Authority key identifier: A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmndEhuLXetRKfP9uuunzj1jJco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/sQR7ApaOPLsGpP3eW9N3fHByr8M.roa
Signing time: Mon 02 Jan 2023 09:37:11 +0000
ROA not before: Mon 02 Jan 2023 09:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 62.3.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:94:d7:63:d2:e1:4c:55:10:e3:f8:ee:1f:f3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669dd121b8b5deb5129f3fdbaeba7ce3d6325ca
Validity
Not Before: Jan 2 09:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1047b02968e3cbb06a4fdde5bd3777c7072afc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:8f:74:c1:6d:d7:f6:7a:9d:56:0b:b2:af:
a8:89:c1:46:ec:aa:04:17:2b:64:72:47:ca:c2:be:
7a:ad:5b:77:cd:a0:3c:73:14:8c:56:5b:b4:8a:3e:
46:28:f8:6d:26:86:1e:ca:a7:4c:03:c3:b3:bf:24:
86:c7:d6:73:f5:67:5f:c5:85:d5:c1:cf:e2:e8:83:
86:8e:c0:85:38:e8:e3:22:4b:71:c7:37:c8:87:ff:
d4:9e:4f:eb:57:bd:c8:33:08:77:a3:18:4d:24:a8:
d2:09:8c:30:6b:5c:df:19:23:2f:65:ab:32:8d:0f:
6c:c3:25:0d:91:b6:67:da:18:17:0d:d2:95:e5:c3:
46:b4:f4:88:d0:00:f4:92:5b:72:f9:b9:ae:e8:c5:
0e:0c:12:5d:f8:25:23:37:d6:39:54:93:0d:2f:fd:
e0:6f:3c:7d:0c:07:0c:80:d7:c8:15:e6:b6:e4:26:
a4:41:c4:48:f0:c4:38:05:f3:89:6a:4d:69:6d:55:
be:e1:69:c6:a9:ec:29:9b:d7:4b:25:32:4b:c7:79:
0e:b3:63:f2:32:5d:bc:bf:37:56:7a:00:6e:69:5a:
d6:00:69:ec:dd:a4:be:b4:a7:c6:5a:42:bc:cb:26:
25:f0:e9:0f:3f:69:e1:81:a0:e5:ce:98:07:16:c2:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:7B:02:96:8E:3C:BB:06:A4:FD:DE:5B:D3:77:7C:70:72:AF:C3
X509v3 Authority Key Identifier:
keyid:A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmndEhuLXetRKfP9uuunzj1jJco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/sQR7ApaOPLsGpP3eW9N3fHByr8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/pmndEhuLXetRKfP9uuunzj1jJco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.2.0/24
Signature Algorithm: sha256WithRSAEncryption
90:da:8c:d0:9f:38:72:3b:dd:46:b7:be:96:8f:d2:65:e0:ec:
3f:a5:61:81:19:cf:6c:57:80:cb:14:82:72:95:59:fe:86:ec:
eb:26:11:07:80:e2:8e:7b:b7:75:b5:18:b0:22:da:31:1e:48:
f7:a2:dc:bf:67:55:d7:3c:93:35:0e:84:9d:5f:97:9d:99:47:
47:54:a7:8f:cd:9a:62:ad:35:90:74:86:7f:d3:c4:5e:b2:74:
41:37:3d:88:cd:b2:34:ce:d8:0c:52:09:85:0b:97:66:96:96:
fd:e4:a3:b6:46:3a:4c:e3:c2:22:1e:ce:f2:12:31:f9:d1:e0:
de:1b:d1:c3:2a:ed:65:a4:fc:91:74:da:da:24:38:ff:99:b3:
b8:9b:09:3f:47:2b:1b:f1:d3:61:3a:ac:a2:4a:ef:bd:f4:7a:
a4:73:ec:4f:42:6f:41:f0:d5:32:e3:75:e3:20:81:fb:10:c6:
17:e2:5e:a6:89:c4:c2:2c:e0:25:6b:cf:d1:f6:76:87:89:8b:
cd:73:1f:ef:94:48:93:85:07:50:01:7b:87:47:44:04:c0:7f:
49:65:3a:e5:ef:2f:92:17:83:aa:d9:58:fc:23:22:bc:50:01:
4b:a2:2c:d1:d7:d6:10:42:0e:2f:ae:b9:53:8b:a8:17:34:1e:
9a:71:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:49 2024 by rpki-client on console-fra.rpki-client.org