Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/eMH6m6XUK6vkYmGRwXg0yjvpN84.roa
File: eMH6m6XUK6vkYmGRwXg0yjvpN84.roa (raw, json)
Hash identifier: bW1HU8dnlDE8px80oIrQP6atTebTqY3gMIb4TSDVkT0=
Subject key identifier: 78:C1:FA:9B:A5:D4:2B:AB:E4:62:61:91:C1:78:34:CA:3B:E9:37:CE
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424455EFEB6838E02C98016F315BC7AF0
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/eMH6m6XUK6vkYmGRwXg0yjvpN84.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62077
IP address blocks: 62.244.233.0/24 maxlen: 24
62.244.246.0/24 maxlen: 24
62.244.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5e:fe:b6:83:8e:02:c9:80:16:f3:15:bc:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78c1fa9ba5d42babe4626191c17834ca3be937ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:bb:e4:a5:8f:ad:90:d3:7f:dc:ad:15:08:
66:b7:33:22:b6:db:11:a8:51:b3:c4:6f:00:eb:99:
1b:0f:47:03:2b:b8:e1:ad:6d:49:6f:1a:68:89:06:
c5:37:2c:aa:87:dd:05:48:66:8b:2a:c0:1b:10:e0:
fe:a1:2f:e3:66:1e:df:22:a5:70:1e:19:7b:8b:e5:
93:6c:d4:cf:5e:e7:9a:13:fd:47:49:74:69:ad:6c:
16:15:8b:06:5e:02:05:5f:a7:13:13:d3:ab:86:95:
81:60:31:a4:73:b2:29:dc:31:73:79:af:08:0f:ff:
a5:1a:21:3a:f8:c4:bf:7c:26:2c:08:97:08:8a:17:
56:17:d6:28:f1:4f:75:cc:f4:af:6c:39:75:95:83:
37:d0:8c:c8:39:82:f3:2b:00:05:0d:61:c9:fa:25:
ef:24:f0:67:a5:dc:6c:51:71:8a:c4:2e:5b:0a:91:
b3:10:5a:1c:9f:b3:bb:27:da:f5:c6:a6:e3:39:2c:
5d:f8:a5:51:88:54:b2:a3:a6:d3:2c:7b:59:e5:14:
f4:81:e9:35:38:b6:06:39:c7:87:08:df:48:b2:54:
b1:98:50:15:d9:f3:70:32:7c:75:87:cc:d8:59:aa:
a6:72:f3:49:86:6a:ff:09:d8:24:ba:c1:07:a0:07:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C1:FA:9B:A5:D4:2B:AB:E4:62:61:91:C1:78:34:CA:3B:E9:37:CE
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/eMH6m6XUK6vkYmGRwXg0yjvpN84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.233.0/24
62.244.246.0/24
62.244.249.0/24
Signature Algorithm: sha256WithRSAEncryption
00:04:d9:6e:3f:a3:e7:16:53:65:96:9e:97:41:ae:fc:ba:3f:
0b:54:83:6d:2b:08:ba:5a:4b:30:8b:f2:77:99:6a:34:4e:2e:
ea:90:2e:41:1c:a9:98:85:91:9d:8c:05:13:56:38:04:f0:5e:
7c:2c:30:4b:b5:e9:55:ff:40:11:55:95:de:73:3d:51:f6:cf:
81:d6:78:32:d9:91:83:d0:8d:42:87:05:bc:d1:ec:02:90:57:
14:d6:21:c1:69:0e:eb:dc:61:74:85:f3:c8:b3:c2:9e:39:39:
ed:2b:f2:5f:46:ff:ca:c6:78:e5:e6:e1:23:61:0a:a9:b1:3f:
75:ba:43:5c:b8:24:b4:93:11:91:c1:90:3d:f5:a9:d5:4c:46:
28:9f:d2:00:4c:95:52:47:0b:e6:bd:a7:c9:df:2f:49:bb:7f:
45:24:2b:2c:d9:a1:5a:72:17:5c:05:a5:40:0c:b2:8e:af:c9:
b7:b9:38:bb:4b:b7:d8:e0:83:36:bd:17:84:14:4a:ae:df:83:
3e:12:16:03:18:a2:5e:c9:d4:77:71:2a:71:bb:93:07:c7:b2:
1b:ce:01:48:07:64:ae:82:77:53:6e:63:91:c4:a9:4d:3d:6b:
ad:14:53:f5:28:fc:1b:6f:75:6e:94:95:68:a5:19:3a:ca:dc:
3a:26:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:01 2025 by rpki-client