Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/zx5ZcprsDJCzFXiQa1PXGNrl7dw.roa
File: zx5ZcprsDJCzFXiQa1PXGNrl7dw.roa (raw, json)
Hash identifier: V86wda9mpMAc2Rmv/1Cmnj8+RhHjXsEsrS9auS3g0EM=
Subject key identifier: CF:1E:59:72:9A:EC:0C:90:B3:15:78:90:6B:53:D7:18:DA:E5:ED:DC
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 0194236A425B2C816F108D02892A4A09ADBE
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/zx5ZcprsDJCzFXiQa1PXGNrl7dw.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216468
IP address blocks: 62.108.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:42:5b:2c:81:6f:10:8d:02:89:2a:4a:09:ad:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf1e59729aec0c90b31578906b53d718dae5eddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:f2:39:0c:7d:54:37:af:1d:ae:2e:16:f1:
13:1b:27:ce:0d:96:bf:a4:eb:43:d1:d7:af:56:df:
bc:93:b9:d5:14:6c:3a:62:66:84:8c:99:25:71:94:
da:74:b9:85:ba:e4:37:b4:a8:f7:83:31:3a:66:a0:
a4:61:c5:a6:d3:f7:f0:ab:25:f8:06:f7:87:3e:f8:
58:47:6b:31:fe:b1:ad:18:56:77:2c:c8:43:db:0b:
cd:62:2c:d3:83:09:d3:97:8b:ba:e0:9c:17:70:a0:
e0:20:cf:66:0f:69:41:a3:18:c8:98:7d:79:1b:0f:
e3:77:82:5c:03:36:f2:94:97:34:86:cf:da:78:38:
35:85:60:60:0e:02:81:39:60:27:9d:3d:55:4a:bd:
36:ee:52:68:d6:c8:a8:fe:02:7c:c6:7d:5e:94:e8:
87:f8:3a:8c:d5:a9:a8:48:5d:da:9c:ea:00:e2:ef:
6d:9a:a9:8a:81:0b:fb:32:f9:1d:73:99:5f:f4:72:
38:b6:86:5c:48:55:2b:1a:22:8a:92:01:d8:66:55:
9c:55:2b:7c:7c:df:63:f6:5c:e8:cf:57:8a:d1:c3:
7e:91:57:90:7f:db:fc:f3:02:73:22:e8:ec:42:5b:
a7:d0:54:d0:47:8f:24:95:41:67:f0:14:40:b3:75:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:59:72:9A:EC:0C:90:B3:15:78:90:6B:53:D7:18:DA:E5:ED:DC
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/zx5ZcprsDJCzFXiQa1PXGNrl7dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.104.0/23
Signature Algorithm: sha256WithRSAEncryption
83:68:b0:97:ca:ad:42:92:92:dd:b8:21:18:5a:c9:a2:1b:cd:
5f:ff:fe:13:b1:53:e1:8c:01:55:d6:88:ca:1e:59:38:32:77:
f4:e9:d4:88:6a:a0:cf:ac:86:91:dc:b1:36:15:6b:1c:49:79:
3d:83:78:8b:43:cf:e6:5a:30:08:bd:52:7c:b6:cc:bf:94:e0:
5a:da:80:ac:69:63:7f:16:64:e0:5e:30:48:c4:fd:f5:0c:3f:
90:c2:c0:d9:ce:a6:df:59:71:09:a3:11:3f:6c:47:c1:45:15:
ad:19:6b:95:6c:de:f8:e1:31:26:ca:dc:1c:c6:af:3b:d0:77:
4f:bd:f0:1c:9a:43:ed:31:54:93:8a:f8:07:d4:8b:e2:ce:43:
b7:f3:e0:f7:02:4e:48:87:30:00:12:5c:52:58:a9:45:77:a3:
7b:77:bc:50:02:a4:fa:a9:22:ca:c5:61:5d:5b:51:26:fb:7f:
3a:95:46:86:22:5c:24:2d:60:f3:9f:ff:ef:00:e3:55:db:d8:
ee:b4:23:d0:55:bd:42:fa:80:37:a3:f0:f9:20:03:e3:ba:95:
ef:3d:28:24:ee:3e:87:ac:bd:32:41:72:40:2c:e4:6a:57:44:
b4:7f:08:b6:bc:02:92:19:3f:74:ce:f4:f1:8c:ab:22:5b:3c:
c5:98:ec:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:24 2025 by rpki-client