Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/0vZUeITqxhjYTZ09-IZPJQyJrFs.roa
File: 0vZUeITqxhjYTZ09-IZPJQyJrFs.roa (raw, json)
Hash identifier: XWy8JIsvHPb13TWVq0G62lkPYB9FumkdweR7BRskWwI=
Subject key identifier: D2:F6:54:78:84:EA:C6:18:D8:4D:9D:3D:F8:86:4F:25:0C:89:AC:5B
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 019424B3C807F959475E51196B7ED32661CF
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/0vZUeITqxhjYTZ09-IZPJQyJrFs.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57067
IP address blocks: 176.62.144.0/21 maxlen: 21
176.62.144.0/24 maxlen: 24
176.62.145.0/24 maxlen: 24
176.62.146.0/24 maxlen: 24
176.62.147.0/24 maxlen: 24
176.62.148.0/24 maxlen: 24
176.62.149.0/24 maxlen: 24
176.62.150.0/24 maxlen: 24
176.62.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c8:07:f9:59:47:5e:51:19:6b:7e:d3:26:61:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f6547884eac618d84d9d3df8864f250c89ac5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:5d:31:81:91:bf:f0:77:a4:6e:ab:e3:31:
16:52:31:55:c6:18:2a:c2:b5:00:0d:a4:d4:b1:91:
59:7c:46:c6:05:b2:07:fa:27:55:19:49:15:9c:11:
a8:12:36:51:72:89:0a:f2:0a:49:c2:dd:24:7f:dd:
c9:2f:a0:7d:b3:54:77:eb:4a:ce:f3:a8:a5:4c:b0:
a7:15:d2:50:45:2d:8c:34:02:72:35:43:e1:4c:4f:
de:4d:71:a6:12:56:a8:ce:5e:d7:2b:73:26:64:5b:
96:39:b3:7a:d5:0e:71:04:42:1a:27:71:cf:f5:8c:
09:be:16:ce:bc:00:43:9c:a5:90:b0:53:71:e7:0e:
3d:8a:32:ee:4d:d0:e0:56:10:f9:e6:7a:bd:20:49:
85:58:86:3c:16:a2:74:04:51:08:5e:88:72:97:73:
6c:a3:d9:b8:3a:2c:dd:8b:7a:c4:96:68:48:bd:f0:
c7:a0:46:5f:a6:b1:ab:a0:0a:70:49:2b:7f:77:20:
89:4c:cf:bc:05:f6:a8:0b:fb:b3:ac:56:0e:fa:43:
86:dd:6e:50:33:cb:78:27:70:d5:09:03:32:85:24:
c1:ab:88:35:78:d7:b0:52:06:3d:d5:dc:51:5a:63:
2e:4f:1f:23:32:8f:e5:aa:3c:7e:9e:d4:a7:f5:56:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:54:78:84:EA:C6:18:D8:4D:9D:3D:F8:86:4F:25:0C:89:AC:5B
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/0vZUeITqxhjYTZ09-IZPJQyJrFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.62.144.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:58:9b:63:14:51:86:d8:2e:72:3d:e6:a2:a1:68:e9:29:ee:
3c:22:58:34:e5:41:b7:41:99:27:e4:df:59:69:62:bf:db:70:
aa:f9:0e:0a:0a:49:42:8c:9d:3c:a9:b4:66:98:05:06:0e:70:
29:04:08:80:80:cb:05:e8:f0:d2:38:1f:74:f6:9d:19:65:c2:
76:9c:59:93:75:63:60:fb:a7:ec:d9:8d:ff:b4:93:74:53:67:
5c:1b:0f:51:52:bc:35:6c:7c:51:e7:a9:2b:dd:95:56:02:5b:
7b:75:69:61:d5:61:85:36:01:f5:cf:c6:68:e1:a3:91:c4:32:
a6:c5:10:00:af:94:a5:c5:a1:c3:e1:1c:0c:95:61:43:83:1c:
e5:3c:a5:b7:c9:d1:54:49:cd:cb:90:39:63:da:08:79:dc:19:
48:ef:8e:f8:1d:c2:7b:8d:fd:5d:57:a1:fa:05:c8:37:52:2b:
47:7a:d6:33:d6:8d:8d:ac:7b:51:16:63:d2:96:bc:ab:7c:74:
a4:38:df:73:1b:e4:63:2f:07:d6:41:cc:01:05:81:ad:67:f5:
ec:92:6b:e0:46:69:d1:83:ff:40:53:a6:69:26:45:de:4e:ca:
78:86:a3:8d:81:fd:65:38:fb:b3:01:a3:fe:9f:66:9d:67:aa:
9c:a3:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:21 2025 by rpki-client