Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mv1h37MzImfXhXtotGH2l6nUD-c.roa
File: mv1h37MzImfXhXtotGH2l6nUD-c.roa (raw, json)
Hash identifier: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=
Subject key identifier: 9A:FD:61:DF:B3:33:22:67:D7:85:7B:68:B4:61:F6:97:A9:D4:0F:E7
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019426D9C58F7C216E1412E740F9D85C3CCA
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mv1h37MzImfXhXtotGH2l6nUD-c.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16158
IP address blocks: 62.219.102.0/24 maxlen: 24
62.219.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c5:8f:7c:21:6e:14:12:e7:40:f9:d8:5c:3c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9afd61dfb3332267d7857b68b461f697a9d40fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:85:b9:ea:92:a9:e4:77:9f:85:8f:4d:5e:6e:
66:ca:64:f1:bd:9a:3a:1d:fc:f0:e8:60:c2:d3:05:
96:38:74:f9:ec:fb:72:76:be:30:40:22:53:af:dc:
67:5e:3b:4c:64:2b:ea:48:3a:17:62:ea:f8:e0:21:
dd:76:6c:8b:2f:b1:fd:00:1b:e7:f1:95:f4:59:b7:
6f:37:04:26:27:d9:b5:56:d5:98:d6:18:a9:4d:e1:
9b:38:37:00:27:8d:eb:84:df:b9:1f:7b:5c:98:e4:
b7:8f:76:d4:4a:a8:e8:b0:c3:2c:7f:63:ed:12:c8:
fe:6f:b2:3b:08:ce:ad:a5:be:68:3a:d7:3e:67:0d:
bb:62:15:d8:a2:8f:c4:ee:b6:95:a5:ed:f4:5b:0a:
da:f1:cf:66:9b:fc:a9:e8:5d:35:94:ef:0e:06:a2:
d2:d0:23:7f:4a:83:51:b2:5c:8e:60:58:4b:70:b4:
0a:25:2b:b0:9d:4b:80:cf:e7:99:01:9c:26:2a:dd:
6d:e8:e4:a2:d6:67:3f:6f:c9:71:9b:07:6d:d4:ab:
46:50:b0:c1:26:3f:ca:c7:e3:44:84:cc:28:e2:d1:
c8:13:a8:0b:39:ff:37:81:bc:70:f2:64:ea:e9:4a:
d5:80:fe:16:eb:97:dd:88:28:46:4d:e2:d9:59:a8:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FD:61:DF:B3:33:22:67:D7:85:7B:68:B4:61:F6:97:A9:D4:0F:E7
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mv1h37MzImfXhXtotGH2l6nUD-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.219.102.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:0a:70:38:d1:86:5d:9c:81:b1:45:28:2a:3d:e8:f8:f8:b0:
bf:43:5c:0c:b9:1b:21:1a:fc:5c:f7:c6:16:4b:8d:38:6b:42:
b6:65:eb:bc:4f:4f:7d:49:47:fd:8e:44:7b:b7:73:d6:05:82:
1d:d3:ac:e3:ad:a1:5a:a4:5e:c5:7e:ed:a3:bf:d7:84:4d:10:
a1:b2:2b:5e:60:5a:8f:92:fb:2a:4f:3a:b8:b3:a6:90:ea:40:
60:c2:c2:8b:fa:18:72:4e:67:64:51:43:d8:bf:2f:5e:c5:75:
54:5c:24:81:89:6c:90:0a:d7:7d:ee:0e:2d:57:60:96:52:85:
cf:f4:0e:d5:cf:a8:23:07:83:6d:72:3b:52:83:21:65:d0:10:
d9:54:6f:e2:56:f9:b9:1b:79:d7:d7:dd:ab:01:e3:9b:dc:aa:
2b:e3:71:7b:2b:9a:23:d9:88:73:ac:3a:89:c0:29:cf:84:cf:
73:8d:cb:c1:08:19:42:b4:f6:a9:53:aa:49:a3:4e:1a:b2:b1:
92:59:24:4f:7b:c5:c3:3d:42:63:72:52:c3:8b:69:98:90:39:
29:ab:21:38:0f:82:e6:27:11:f3:28:3a:4a:9a:b0:06:34:25:
49:e8:35:0e:1c:93:cb:f5:92:4f:7a:12:fb:8d:c5:04:8d:a5:
40:e9:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:03 2025 by rpki-client