Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Dm-tx1KBK2hPz-JpOmoTYmDiQ_w.roa
File: Dm-tx1KBK2hPz-JpOmoTYmDiQ_w.roa (raw, json)
Hash identifier: oAPfeztmjvfCNwoYwDPS59r8YNnL93mIV0O5bBj2Pg4=
Subject key identifier: 0E:6F:AD:C7:52:81:2B:68:4F:CF:E2:69:3A:6A:13:62:60:E2:43:FC
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C2C10E1992305EC0E2BF7D26EE82A
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Dm-tx1KBK2hPz-JpOmoTYmDiQ_w.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398395
IP address blocks: 62.204.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2c:10:e1:99:23:05:ec:0e:2b:f7:d2:6e:e8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e6fadc752812b684fcfe2693a6a136260e243fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:c8:f7:43:ab:1a:ff:cf:20:0a:64:81:61:
69:6b:ae:86:14:8b:09:7d:c9:9d:f1:54:1a:cd:73:
5c:0c:2e:92:82:ee:80:cf:45:e2:4d:88:00:c0:1a:
dd:ab:50:6a:e4:6f:08:63:5f:15:4e:87:3f:c2:ce:
31:3a:1c:38:8b:89:29:8b:91:71:af:f0:59:2a:b9:
b5:df:7f:4a:7f:26:95:65:c5:73:57:9a:da:0c:a0:
17:7c:fe:02:da:16:55:38:05:1d:2e:a7:c4:5c:04:
70:79:4f:b9:aa:7b:0b:dd:80:c0:ff:a6:46:41:91:
be:22:16:81:01:46:0e:65:64:73:4c:47:0c:b6:eb:
b6:bf:f4:be:e4:97:2f:ec:30:6e:d0:04:cb:e5:5d:
ca:cc:61:bc:03:df:9d:a9:19:19:9b:44:37:a3:6a:
8e:b6:a6:76:63:55:1e:a4:bf:0e:b0:af:e6:7b:18:
2b:a2:cf:1b:8b:7a:c6:28:e6:d4:1a:8d:e8:59:77:
28:87:df:f7:36:2a:ef:b1:43:c3:f9:67:f7:c0:4b:
26:14:91:d5:1c:11:ac:60:e6:08:63:a3:47:9c:53:
25:b9:c2:80:5b:30:f6:23:44:a7:1b:ef:7c:bc:c9:
e0:81:81:d9:07:97:2b:e6:47:e5:69:8e:18:c7:71:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:AD:C7:52:81:2B:68:4F:CF:E2:69:3A:6A:13:62:60:E2:43:FC
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Dm-tx1KBK2hPz-JpOmoTYmDiQ_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:12:d5:f9:fa:c8:8e:e4:7f:f6:d1:1a:b5:c9:10:49:0c:66:
ac:35:03:24:9a:1c:bb:7c:39:f6:89:bb:52:b1:d4:88:9f:68:
57:94:b4:c2:f3:94:80:09:39:ef:b0:29:0d:ee:f6:83:8d:60:
d9:fb:e7:9d:41:95:af:52:65:2f:ff:01:47:02:3d:2a:ef:9c:
1f:e2:18:b3:c1:ee:b4:c2:da:c8:8f:17:88:1c:fc:69:8f:af:
96:36:3b:7f:bb:19:8a:a6:b1:7c:0a:58:18:25:4b:11:3f:b4:
37:de:bb:a5:7f:45:d2:b9:0f:bc:3b:b4:d1:79:cd:72:d8:a8:
5c:a3:d1:b5:9b:c8:26:6c:0e:7a:94:24:06:1e:13:d0:b7:3d:
44:ac:3f:78:5d:62:06:07:56:02:49:d7:73:c6:42:5d:ef:d2:
d9:2b:45:d6:33:09:d5:3e:72:70:80:02:31:a2:9a:78:0f:61:
6a:48:2c:fa:58:28:71:f5:7f:65:47:7c:4e:43:35:79:ed:8a:
e5:35:50:00:39:2d:c8:6c:40:d9:89:65:98:78:5b:e9:18:9d:
0f:72:17:48:8d:5a:02:eb:df:c2:58:c6:9f:cd:65:50:e5:4b:
84:e6:6a:bb:db:0d:8f:74:43:91:42:39:2c:24:81:12:e9:7c:
44:10:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:27 2025 by rpki-client