Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/uzKXKwwaxv9ZwxlwOddK0wuAjk0.roa
File: uzKXKwwaxv9ZwxlwOddK0wuAjk0.roa (raw, json)
Hash identifier: LTwXOrA7s8AT8kiK31u64jYBKrFuiT/zV7vy/MG1J4A=
Subject key identifier: BB:32:97:2B:0C:1A:C6:FF:59:C3:19:70:39:D7:4A:D3:0B:80:8E:4D
Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial: 019425223231630F465A989CDF5B4A423EED
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/uzKXKwwaxv9ZwxlwOddK0wuAjk0.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44756
IP address blocks: 62.100.128.0/19 maxlen: 24
188.130.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:32:31:63:0f:46:5a:98:9c:df:5b:4a:42:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb32972b0c1ac6ff59c3197039d74ad30b808e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:32:d2:ff:2e:9f:d5:88:cb:88:14:8f:1d:
46:85:0e:b2:29:45:eb:34:9c:1c:50:da:ee:df:7e:
8b:19:9e:5a:2e:6b:d2:21:a6:1b:1e:2d:e3:48:fb:
04:f6:9e:b7:7b:bd:e4:fb:b3:67:a8:13:cf:78:80:
24:cb:fe:31:a3:f9:43:ed:2b:9f:b7:26:be:10:30:
45:fe:b3:08:ed:9a:64:66:ea:65:6b:2e:2a:d1:cd:
df:0a:6e:6f:63:2b:18:7b:fc:c4:14:ea:8f:a4:7c:
19:fa:1f:03:f9:1a:92:70:27:24:58:5c:17:f5:31:
27:25:e7:cf:2b:a3:c8:7b:74:7a:c3:40:97:db:0d:
d1:0e:39:47:6b:5a:0d:ef:bf:4e:c4:42:fa:fb:ba:
55:99:a3:b9:5c:ea:af:85:ac:78:c2:f6:51:1c:3e:
42:8b:61:c6:fa:60:53:be:86:36:6b:08:b5:9b:bb:
08:92:2e:77:8e:bd:dd:3e:28:c8:39:6e:a7:a9:53:
73:65:0e:8d:d3:2a:86:f7:82:02:58:8a:d1:43:60:
5e:d4:4b:c0:75:f9:27:52:9c:a0:07:03:9b:2a:5d:
00:35:32:9a:03:30:93:76:a3:b4:4e:5b:2a:20:f0:
44:1b:18:8f:e7:11:45:04:9e:08:bd:71:99:b5:2a:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:97:2B:0C:1A:C6:FF:59:C3:19:70:39:D7:4A:D3:0B:80:8E:4D
X509v3 Authority Key Identifier:
keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/uzKXKwwaxv9ZwxlwOddK0wuAjk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.128.0/19
188.130.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4d:6d:28:c9:3e:d6:0d:28:b3:18:4a:81:21:bd:12:7e:e1:6b:
00:7c:d5:31:c4:e1:c4:c8:ac:d4:bb:a7:02:59:e2:78:33:3c:
70:bc:8d:53:76:c9:fe:79:2e:76:9d:41:68:f1:a0:30:c4:ad:
6e:38:67:33:96:11:5d:0d:c6:70:dd:6f:e1:c7:cb:76:5a:39:
62:05:6f:c6:05:30:3b:56:c8:2f:07:b1:43:54:13:c5:b8:cd:
d9:e8:f6:a1:04:78:7e:0b:20:f5:65:37:e0:db:54:59:35:ba:
92:32:a8:90:3c:62:f0:94:15:fa:c0:b1:c2:22:af:b0:12:df:
fb:cf:ce:01:07:da:9f:31:32:48:f6:01:f0:63:27:3f:54:24:
13:0f:74:33:79:c9:5e:f0:4b:4c:b9:8a:79:84:88:dd:09:f7:
31:2d:62:25:7d:9c:6f:1c:30:ac:6a:90:8e:1d:82:ef:81:37:
43:6e:7a:4b:5b:ce:ce:c0:e0:3c:78:2d:62:70:15:e1:ae:ad:
3f:a6:14:18:8b:d2:86:90:5b:06:82:6d:4a:a4:ab:de:19:b1:
98:fd:a2:72:a4:1f:43:d0:d6:ca:64:b6:da:05:fc:08:ac:10:
f0:e5:0a:61:90:64:3e:5e:dd:1b:8e:42:a1:51:2e:50:38:ad:
7c:90:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:09 2025 by rpki-client