Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/QoRrYbYF0D6hGfRQKRdaV74JUQ0.roa
File: QoRrYbYF0D6hGfRQKRdaV74JUQ0.roa (raw, json)
Hash identifier: xWKhLkxPZZFX8XMIJAOHSENtQYljBcyk1hWpzDruDy8=
Subject key identifier: 42:84:6B:61:B6:05:D0:3E:A1:19:F4:50:29:17:5A:57:BE:09:51:0D
Certificate issuer: /CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Certificate serial: 018B1F4FF596A550B47EBB3A18997D398FCC
Authority key identifier: 16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/QoRrYbYF0D6hGfRQKRdaV74JUQ0.roa
Signing time: Wed 11 Oct 2023 15:16:55 +0000
ROA not before: Wed 11 Oct 2023 15:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44620
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:4f:f5:96:a5:50:b4:7e:bb:3a:18:99:7d:39:8f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Validity
Not Before: Oct 11 15:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42846b61b605d03ea119f45029175a57be09510d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:e4:b4:45:d0:1c:53:ed:9c:e9:3b:04:5b:
87:a3:b8:db:d6:1d:25:0d:0b:e3:9a:cb:ee:d2:1d:
1a:83:32:7c:bf:77:78:e8:7d:b4:e3:06:e2:4b:fc:
a1:44:ee:99:e4:e3:d8:08:c4:4c:99:3b:2b:a8:82:
bc:f3:6b:aa:04:f1:2c:07:45:4a:eb:44:b2:09:c7:
96:11:cb:f8:eb:ab:14:7c:06:04:18:3b:18:47:21:
8d:76:ac:0a:21:b3:9f:72:0d:8c:93:d9:b0:06:be:
13:c9:f8:ee:60:34:4e:b7:f6:6d:bb:f2:e5:7d:89:
57:ce:9a:0c:e1:95:54:cb:97:21:4a:7b:68:61:91:
62:ad:47:cf:80:ab:25:3a:b4:d5:29:b8:7f:9e:e2:
eb:35:34:c9:fd:48:5a:fa:d5:85:0f:2a:a7:04:65:
88:26:0d:28:d2:cf:b2:90:12:c8:25:c1:f9:c5:25:
ff:f4:ab:f2:6d:e1:2b:ac:30:87:21:95:01:a8:f7:
b8:bf:d8:f0:fe:a3:77:39:7b:fe:b7:33:d5:e6:b4:
4a:84:38:3c:ac:37:6f:fb:80:28:b6:32:76:98:a6:
04:fa:b3:1b:f8:4d:ad:1a:3c:0f:7a:1d:35:64:5f:
3d:08:63:83:8a:18:10:1e:e6:d7:e0:9f:cc:d1:9f:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:6B:61:B6:05:D0:3E:A1:19:F4:50:29:17:5A:57:BE:09:51:0D
X509v3 Authority Key Identifier:
keyid:16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/QoRrYbYF0D6hGfRQKRdaV74JUQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/FnulbNyMl2YsG1fZAaH4ZYit8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ae:6b:0d:bc:be:86:ac:4f:82:cf:92:be:eb:e7:12:b3:a0:
ca:5e:5a:2e:f6:b1:e3:57:21:3d:f6:dc:44:4b:49:11:4f:cc:
5c:92:a0:f8:b1:55:ef:39:97:c8:8c:9d:fd:62:fa:30:97:72:
f1:cb:c4:d8:dc:af:f7:3b:e7:62:fa:c4:c1:e0:31:d8:04:0f:
fc:a0:11:a1:9b:e2:53:e4:bf:05:c1:a9:f9:1c:85:60:78:2f:
9a:82:31:81:da:4e:79:0c:3d:27:fd:ad:4b:52:a9:67:f2:82:
32:16:86:81:07:2e:a8:d0:01:d1:e1:12:58:98:45:a1:15:00:
41:e7:4c:22:19:da:08:9c:f6:11:22:f7:f4:be:40:51:30:30:
2f:53:1c:62:7d:39:f2:12:e0:92:f4:c5:d1:01:58:8c:3a:e2:
58:d5:4e:df:11:0a:0a:32:aa:bf:73:e1:8a:bc:4c:ba:ac:b5:
19:42:33:76:a7:ce:f3:96:ec:4f:3f:8a:b1:43:c3:d7:60:56:
14:2f:a9:d6:05:75:1c:6d:f7:d9:f7:25:1a:0e:28:35:2e:5b:
30:e5:ee:a5:9e:97:fc:d4:16:fb:b2:a9:2c:b7:fa:07:14:e3:
f2:02:c0:79:f9:2e:0c:58:ac:c3:63:61:16:b3:d4:fd:18:29:
93:a6:a5:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsfT/WWpVC0frs6GJl9OY/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2N2JhNTZjZGM4Yzk3NjYyYzFiNTdkOTAxYTFmODY1ODhh
ZGYyYWUwHhcNMjMxMDExMTUxNjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjg0NmI2MWI2MDVkMDNlYTExOWY0NTAyOTE3NWE1N2JlMDk1MTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyPktEXQHFPtnOk7BFuHo7jb1h0l
DQvjmsvu0h0agzJ8v3d46H204wbiS/yhRO6Z5OPYCMRMmTsrqIK882uqBPEsB0VK
60SyCceWEcv466sUfAYEGDsYRyGNdqwKIbOfcg2Mk9mwBr4TyfjuYDROt/Ztu/Ll
fYlXzpoM4ZVUy5chSntoYZFirUfPgKslOrTVKbh/nuLrNTTJ/Uha+tWFDyqnBGWI
Jg0o0s+ykBLIJcH5xSX/9KvybeErrDCHIZUBqPe4v9jw/qN3OXv+tzPV5rRKhDg8
rDdv+4AotjJ2mKYE+rMb+E2tGjwPeh01ZF89CGODihgQHubX4J/M0Z/yaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEKEa2G2BdA+oRn0UCkXWle+CVENMB8GA1UdIwQY
MBaAFBZ7pWzcjJdmLBtX2QGh+GWIrfKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm51bGJOeU1sMllzRzFmWkFhSDRaWWl0OHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81YTEyOTItZDBhZS00YTRiLTg3YmQt
ZTRiYjYzNjM2Y2JhLzEvUW9SclliWUYwRDZoR2ZSUUtSZGFWNzRKVVEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi81YTEyOTItZDBhZS00YTRiLTg3YmQtZTRiYjYzNjM2Y2Jh
LzEvRm51bGJOeU1sMllzRzFmWkFhSDRaWWl0OHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMAMA0G
CSqGSIb3DQEBCwUAA4IBAQBTrmsNvL6GrE+Cz5K+6+cSs6DKXlou9rHjVyE99txE
S0kRT8xckqD4sVXvOZfIjJ39Yvowl3Lxy8TY3K/3O+di+sTB4DHYBA/8oBGhm+JT
5L8Fwan5HIVgeC+agjGB2k55DD0n/a1LUqln8oIyFoaBBy6o0AHR4RJYmEWhFQBB
50wiGdoInPYRIvf0vkBRMDAvUxxifTnyEuCS9MXRAViMOuJY1U7fEQoKMqq/c+GK
vEy6rLUZQjN2p87zluxPP4qxQ8PXYFYUL6nWBXUcbffZ9yUaDig1Llsw5e6lnpf8
1Bb7sqkst/oHFOPyAsB5+S4MWKzDY2EWs9T9GCmTpqXR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:41 2024 by rpki-client on console-fra.rpki-client.org