Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/ItPmNdTjNgHqBxANMhUVH1DC5UU.roa
File: ItPmNdTjNgHqBxANMhUVH1DC5UU.roa (raw, json)
Hash identifier: QPQB5rA9kwVStlIhdq0li1+Di1amgsoq6BbyBsFXRrc=
Subject key identifier: 22:D3:E6:35:D4:E3:36:01:EA:07:10:0D:32:15:15:1F:50:C2:E5:45
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 019424B3D7DDC5837F9A39090E4C20B752DB
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/ItPmNdTjNgHqBxANMhUVH1DC5UU.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214247
IP address blocks: 62.108.88.0/22 maxlen: 24
62.108.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d7:dd:c5:83:7f:9a:39:09:0e:4c:20:b7:52:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22d3e635d4e33601ea07100d3215151f50c2e545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:fe:27:ed:2a:af:aa:db:34:cc:50:e8:91:
b0:b1:45:bf:3c:31:30:2c:a0:c8:b3:46:a6:64:3d:
26:4a:0f:9e:06:e6:dd:d2:6d:13:9c:d6:59:18:71:
5e:78:ee:42:23:77:9f:3d:cb:e9:89:72:02:9d:bf:
36:e1:57:80:f9:9d:8b:f4:6d:69:c0:3c:5b:a2:14:
e7:a4:98:22:5b:2a:84:4b:75:83:c7:42:7e:b4:07:
dc:f5:12:12:a6:79:90:28:de:89:98:b4:38:7f:6f:
6c:01:2f:1f:2f:2a:47:3b:c8:a8:7c:38:f0:6a:56:
73:8d:0e:a2:bd:f4:a9:6b:53:53:db:10:0d:27:9d:
15:8a:2b:8c:dd:3d:1d:fb:94:7e:d8:2f:36:cf:39:
d6:fc:83:24:08:99:d7:46:70:c2:8d:75:b9:59:07:
1f:3f:ab:ea:df:f9:34:cd:5f:fe:54:f1:dd:dd:fe:
9b:88:44:20:5d:fb:87:9f:ad:77:f0:a8:48:15:e7:
bd:02:19:6a:1c:6f:87:2d:41:d3:58:ff:5e:2f:a3:
90:e3:36:42:88:24:5f:ca:0e:1e:62:75:00:b4:0f:
64:b1:ac:27:3f:b3:03:b1:f2:d4:93:dc:9b:75:b8:
2b:1a:ef:35:94:f9:a7:f9:70:07:8b:95:ed:c4:c7:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D3:E6:35:D4:E3:36:01:EA:07:10:0D:32:15:15:1F:50:C2:E5:45
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/ItPmNdTjNgHqBxANMhUVH1DC5UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
99:5b:e0:21:b1:9b:7e:e3:f2:6a:36:56:f0:8d:16:06:4a:a2:
c6:4f:83:47:98:98:53:e1:d0:ac:52:25:94:0e:4f:d6:b9:10:
13:36:14:ab:c8:9a:99:76:4e:12:44:14:7d:01:3f:e7:62:24:
9a:25:dd:24:c1:98:25:6f:04:83:29:51:61:c3:df:62:5b:70:
a8:7a:8e:cd:59:1d:74:c0:a8:02:83:b1:cc:4b:f8:2f:f8:4c:
37:2d:c3:b5:08:d1:53:2f:4d:53:fd:0d:a5:66:13:29:2f:30:
af:f1:82:d4:4e:d8:6c:73:67:b0:95:e4:8e:10:62:b4:eb:f5:
6a:35:e1:1e:4b:f8:e9:be:a4:29:f8:1e:2e:25:74:db:33:84:
e5:18:ec:05:94:58:46:48:f6:ec:8e:ca:57:03:1c:2c:0b:82:
7f:4f:2e:1f:0c:ec:b5:01:f7:6f:18:90:22:4e:de:70:66:df:
4e:49:66:28:f1:dc:af:ae:ca:65:45:60:d3:c0:33:7d:68:3e:
96:d9:2e:73:1f:3b:7e:08:8a:2d:aa:d1:36:e6:22:30:ef:d2:
0e:c9:9f:b2:f6:09:f9:e0:c2:c8:e9:86:f6:bf:58:8b:8c:5b:
d5:8f:40:1e:50:0d:b1:ae:e0:4e:cf:af:b2:d6:59:1b:16:f0:
f0:5b:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:31:30 2025 by rpki-client