Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/j3zO5OguCGwVjS4_cTve-Ba-iMs.roa
File: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (raw, json)
Hash identifier: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=
Subject key identifier: 8F:7C:CE:E4:E8:2E:08:6C:15:8D:2E:3F:71:3B:DE:F8:16:BE:88:CB
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 019420D6270403B4C854E1E0AB2CDD7A6363
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/j3zO5OguCGwVjS4_cTve-Ba-iMs.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34917
IP address blocks: 62.182.112.0/21 maxlen: 21
83.143.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:27:04:03:b4:c8:54:e1:e0:ab:2c:dd:7a:63:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f7ccee4e82e086c158d2e3f713bdef816be88cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bb:c2:72:cf:3b:c9:db:1f:d5:a3:93:b6:48:
24:3f:7d:19:23:7e:71:6a:81:80:d9:8d:d7:54:01:
fa:ec:67:7f:f8:3c:39:97:b5:bb:19:d5:23:e3:fd:
30:92:89:bc:15:a7:30:89:f4:21:da:bc:be:74:7c:
f7:48:18:ae:6e:57:b9:6e:bc:b4:32:b2:78:11:e8:
b9:a0:ef:7a:61:32:87:cd:7e:9a:a9:27:4f:9f:e8:
fa:3d:6c:e9:69:a5:3c:53:2e:ce:17:c9:e9:f6:13:
ff:ad:5d:8b:d2:98:a8:26:f6:49:83:e4:54:b5:48:
93:89:aa:af:98:21:6b:3e:dc:53:46:e6:7e:dd:78:
30:3d:0f:0d:78:64:d2:cd:02:ed:4d:e6:6c:46:d4:
32:bd:1a:70:43:cb:61:76:32:88:11:30:25:1c:f9:
14:18:c6:24:61:32:92:30:2a:af:8b:eb:ac:4b:05:
62:8f:9b:5b:1d:8f:5b:02:dc:6b:37:53:87:5f:70:
36:67:7a:28:e3:fe:15:cc:86:fc:67:2e:eb:97:05:
9b:64:ed:23:64:d1:03:fd:ff:aa:44:cb:be:2c:9a:
1a:cd:ba:b9:56:d9:96:0f:96:e2:f9:a4:c4:e5:36:
ff:c8:2d:ff:7b:ed:7c:2e:6a:5e:0a:57:a9:b5:d5:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7C:CE:E4:E8:2E:08:6C:15:8D:2E:3F:71:3B:DE:F8:16:BE:88:CB
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/j3zO5OguCGwVjS4_cTve-Ba-iMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.112.0/21
83.143.144.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:e7:ad:2c:0f:1c:38:6c:93:23:4c:09:b9:01:ab:bc:e6:5b:
e2:75:e1:9d:47:11:f3:02:d9:d2:3a:74:86:ce:59:57:dd:01:
62:27:2e:4d:a1:7b:18:a8:be:5c:48:db:e4:19:75:72:5c:66:
45:6d:9e:14:52:5c:ae:f1:4f:3e:62:d2:b7:05:cc:b6:ba:24:
41:4a:80:22:1f:a6:0b:a9:e1:b5:af:48:94:7e:88:ad:05:75:
22:8c:69:2f:38:31:28:0a:4a:f6:5a:47:ff:d4:f5:a7:8a:e3:
c3:ec:00:d9:ea:12:fd:47:23:be:3f:a4:3a:31:99:07:ba:93:
c7:ff:ac:ba:c5:b0:2a:9d:2a:af:3f:ae:91:01:1c:94:dc:fe:
cb:a6:00:9d:72:2c:b1:eb:d4:51:af:d8:b6:11:86:3f:7b:ee:
eb:ee:05:ac:fb:02:85:01:05:4d:ce:38:b6:12:bb:9f:2d:3c:
97:14:3d:81:97:a3:ea:c5:8a:a6:4e:4a:26:ff:6b:f0:ef:50:
ec:9a:3e:cd:f4:6e:b7:54:1d:3e:1f:90:f2:36:9d:43:b3:2e:
99:e4:fd:29:c1:e7:26:3b:21:21:60:a2:4b:80:6b:e8:ef:e2:
23:2c:db:87:6a:51:ca:61:dd:e8:dd:a2:6d:20:58:ce:d2:05:
4f:55:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:47 2025 by rpki-client