Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa
File: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (raw, json)
Hash identifier: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=
Subject key identifier: E0:5E:7E:53:E2:32:78:1B:FB:8E:01:BE:B7:8A:3D:86:58:51:8D:37
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 0194252227C167B6B709030C3D7DE0831948
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 62.193.24.0/22 maxlen: 22
62.193.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:27:c1:67:b6:b7:09:03:0c:3d:7d:e0:83:19:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e05e7e53e232781bfb8e01beb78a3d8658518d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:02:41:ba:45:81:45:b4:36:a9:3c:db:50:
38:23:9d:53:84:a3:07:f9:49:13:dd:ae:7e:c2:b3:
f6:52:db:dd:e4:f2:f7:61:fc:76:10:f0:b0:7f:cd:
93:ec:74:99:e9:55:e3:02:84:42:1a:0c:6b:d6:33:
a3:19:74:a5:66:f5:21:2c:74:54:40:29:e4:ba:d4:
9e:d9:a9:20:ad:bc:57:31:fa:29:cb:cf:fa:59:bb:
d9:53:e8:0b:9a:c1:5e:a2:c3:5d:ce:31:18:cb:7f:
73:92:28:cd:5a:ec:1e:45:f7:ce:1f:1d:46:8c:ac:
bf:b5:8f:bf:2e:60:d5:0a:19:0d:94:b6:db:56:4e:
fe:d4:5d:48:09:72:a1:55:de:84:f3:e4:e8:5b:ef:
d9:35:f3:9a:90:1e:02:de:8a:16:b4:17:e9:66:74:
20:51:36:27:1e:23:c3:57:19:12:10:21:29:e7:f0:
d2:4a:20:b0:d3:be:1d:db:75:fc:fb:c9:9b:f7:aa:
48:7a:00:f3:ce:f7:0d:54:cb:ef:51:7a:18:81:64:
24:de:37:a6:44:7d:b9:9f:73:4d:0d:4e:2c:ff:19:
f9:90:7e:df:cb:eb:e3:99:0b:a0:ef:88:45:f5:34:
7f:44:fb:2d:eb:76:87:f1:01:12:77:14:77:b8:85:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:7E:53:E2:32:78:1B:FB:8E:01:BE:B7:8A:3D:86:58:51:8D:37
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.24.0/21
Signature Algorithm: sha256WithRSAEncryption
04:f9:73:80:02:01:e6:38:f5:a3:f8:0b:88:60:2a:5e:ac:41:
e8:6d:22:28:a5:92:80:67:6e:62:7d:ed:35:95:1e:48:f8:90:
c4:c2:38:98:2b:ce:9e:3d:f3:4d:cc:55:5c:c9:f7:d6:c6:1c:
0c:14:d6:ce:52:5c:e7:f8:f5:90:19:3b:e3:40:9e:30:d8:ac:
d6:69:1c:b4:54:9a:62:6a:b8:93:47:fd:91:bd:b8:b4:af:e8:
66:24:59:5f:1c:bf:16:5c:14:cb:a1:f9:ce:4f:7b:1f:ac:fb:
67:ff:d7:83:f8:a0:b5:2f:5c:4a:19:20:b5:61:4b:6e:c8:06:
62:99:84:1a:11:57:2a:1f:6e:63:b7:14:c6:f8:6c:ad:4f:70:
44:e8:95:10:d4:6f:06:d5:53:0a:70:8d:4e:58:a7:fd:b1:c5:
d7:ca:bb:09:65:47:a0:75:bd:e4:9b:9e:79:73:42:85:ab:c9:
b1:d9:73:eb:51:d8:b6:a7:ab:b0:c5:4e:6e:ab:cf:08:4b:6f:
d6:19:82:ec:8a:d0:8e:61:61:01:44:15:16:0d:47:79:18:71:
f9:30:8f:bc:c3:fb:47:c6:d8:28:45:b7:b7:b5:9c:22:ce:4a:
ac:4e:b6:cb:db:04:3b:44:aa:01:c5:37:e2:53:0d:18:da:95:
7b:f7:ed:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:59 2025 by rpki-client