Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/cOmvEG7PuYuwByoeSLbyieR7YHg.roa
File: cOmvEG7PuYuwByoeSLbyieR7YHg.roa (raw, json)
Hash identifier: HEFOQWN0UDdmfd3xIciXkcTYL/AKVCBT6696axC+El8=
Subject key identifier: 70:E9:AF:10:6E:CF:B9:8B:B0:07:2A:1E:48:B6:F2:89:E4:7B:60:78
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424455ED09DE3C251E9893767AE56E31A
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/cOmvEG7PuYuwByoeSLbyieR7YHg.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61418
IP address blocks: 62.244.224.0/24 maxlen: 24
195.87.95.0/24 maxlen: 24
195.87.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5e:d0:9d:e3:c2:51:e9:89:37:67:ae:56:e3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70e9af106ecfb98bb0072a1e48b6f289e47b6078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:fc:fb:f8:62:65:f8:92:9e:fc:77:ec:4d:
08:e8:1b:90:d0:50:cc:63:42:19:1f:25:75:dd:fd:
c2:a4:b0:b0:07:49:d6:03:8e:01:66:ab:ea:1a:39:
8a:e0:59:47:00:a2:ac:da:9f:4f:4d:56:46:2e:11:
ae:76:a0:a7:24:88:c5:5d:00:17:17:4c:ce:2a:da:
15:45:f6:63:69:25:8e:5b:f3:21:ef:d2:80:fd:3f:
c5:81:7a:73:46:83:c2:df:eb:88:fd:8d:db:4a:ae:
4b:0f:07:3a:8b:99:50:1c:68:3c:1c:22:a8:d9:7e:
fe:dd:8d:59:63:fa:c5:09:cd:95:55:d0:a6:3a:32:
6e:39:96:6d:b5:7e:79:3c:1a:22:c5:9e:11:db:5d:
e1:13:fd:a3:72:9f:3b:2a:a3:9d:ef:3a:ac:dd:83:
69:7b:61:c6:9b:44:7a:3f:04:b5:28:dd:81:e1:15:
ca:ec:55:bb:c8:0a:77:6d:57:c8:4b:cb:03:6a:b0:
4a:12:c3:fd:81:3b:9a:42:63:17:cb:51:e6:e9:eb:
95:a6:e9:35:36:6e:78:1d:06:23:cb:f5:0e:1f:5c:
a4:35:e3:98:17:b5:72:61:9f:78:c0:20:72:38:df:
59:3c:19:80:1e:c2:6b:47:3b:47:65:83:94:7b:05:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E9:AF:10:6E:CF:B9:8B:B0:07:2A:1E:48:B6:F2:89:E4:7B:60:78
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/cOmvEG7PuYuwByoeSLbyieR7YHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.224.0/24
195.87.95.0/24
195.87.125.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6e:f8:f0:51:f2:89:87:57:c4:0a:47:a8:e1:44:e8:13:e6:
22:85:30:ef:96:e2:c6:79:53:67:3b:9a:f9:53:1c:5a:ab:2c:
70:af:0d:72:31:b3:9a:4c:18:f5:45:af:65:3d:17:0b:87:b2:
22:9a:ca:ef:e9:3e:29:61:65:c3:e6:80:61:14:7b:13:96:a7:
f3:dd:6a:e4:eb:53:46:e2:3c:78:51:c3:5a:60:e3:33:44:52:
79:93:6b:42:42:25:21:f5:4f:7e:7e:20:00:7e:9a:d9:09:5a:
5a:73:fd:d8:f4:b3:da:7d:a3:07:fd:4b:65:a2:67:9b:85:76:
e4:92:3c:38:a6:d3:fc:25:a6:62:1c:76:b1:df:48:89:3c:6e:
8b:bc:8e:1e:38:ea:79:f8:b9:a7:df:84:c6:4d:32:6f:f3:c5:
41:ec:64:ca:11:df:14:3f:18:93:a0:1c:d9:f7:41:ec:ed:ac:
bb:98:06:9c:59:6c:7d:d1:8f:c8:a9:6b:4b:21:d3:75:6e:be:
ca:52:10:f3:77:ab:c5:57:27:31:5b:85:89:6d:b7:67:8a:04:
1f:31:82:67:fc:33:40:b4:3f:de:70:77:88:67:81:8d:8a:46:
17:81:a3:3d:21:d8:96:a0:56:6f:c4:e1:f8:cf:1a:3c:37:fd:
60:69:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:05 2025 by rpki-client