Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa
File: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (raw, json)
Hash identifier: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=
Subject key identifier: AF:FC:77:16:6E:6A:3E:92:ED:EA:D2:20:8E:A3:E8:0C:7E:8D:48:E5
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 019428231D1AC2D02266EECC6A0C6BFF5C33
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa
Signing time: Thu 02 Jan 2025 17:49:37 +0000
ROA not before: Thu 02 Jan 2025 17:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197333
IP address blocks: 62.33.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:1d:1a:c2:d0:22:66:ee:cc:6a:0c:6b:ff:5c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 17:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=affc77166e6a3e92edead2208ea3e80c7e8d48e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:b0:fb:44:93:26:1e:e7:8b:6c:a0:92:c4:
6f:63:ce:2b:17:2c:c8:e2:43:85:53:bc:4d:9a:94:
01:14:df:9f:81:c7:cd:5c:3c:c9:9b:df:2a:f9:67:
95:d4:42:f4:ad:0c:e2:2d:e1:23:4b:02:e1:bc:6a:
df:d0:97:b5:55:ec:92:6d:d9:a8:49:05:51:09:88:
03:cb:37:6d:bb:4a:90:34:d4:c0:74:57:d4:33:6d:
f7:ed:59:8d:43:8e:63:15:f5:1e:9e:29:ac:f0:95:
9a:59:b3:27:68:20:79:bf:e5:b2:09:1f:10:8c:f2:
f0:0d:54:b9:56:67:79:44:44:a0:15:0d:66:9a:0b:
3d:f6:64:8c:94:6d:3a:c9:f2:5c:70:7e:fa:d2:67:
77:c5:cc:c4:6e:c9:2d:fe:0e:f2:98:cd:d7:3a:59:
85:82:ea:ca:ee:b6:24:c0:7e:ca:1e:00:5b:70:c7:
3c:bc:78:96:bb:18:01:03:ff:20:b7:b1:2b:81:87:
af:12:4e:94:95:d9:0d:18:c6:5a:98:25:27:e2:5f:
fe:56:49:fe:c2:4d:4e:0a:86:aa:63:0f:d5:52:7d:
ca:ac:8b:bc:85:be:66:76:72:48:0b:b6:9b:41:49:
b8:50:e5:e0:d2:e7:92:c5:00:f8:05:5a:1f:19:48:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FC:77:16:6E:6A:3E:92:ED:EA:D2:20:8E:A3:E8:0C:7E:8D:48:E5
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.33.24.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4a:fd:05:b3:20:23:7a:e9:55:3c:a1:b9:cf:e5:5d:c8:4d:
8a:e6:da:46:b7:d6:6f:42:fd:cb:c9:5f:71:7a:3a:54:a9:43:
b3:b7:9d:f7:08:7c:77:e3:c0:03:a8:43:45:8f:37:91:c6:26:
83:4f:7c:c3:b3:fc:61:2e:e2:4b:a1:bb:65:48:f2:2d:b5:85:
2f:7b:2d:84:f3:2f:08:b1:1c:3d:f7:69:52:b2:12:63:36:14:
c6:00:e7:e8:3e:8a:aa:4a:f7:be:de:5b:d6:ae:09:3d:4d:05:
da:49:03:7a:ef:5c:18:f1:bf:ad:6f:86:7d:d4:6a:a2:77:c7:
c4:f3:6d:b8:4d:3a:98:52:51:03:69:22:cc:a5:ad:2c:50:95:
02:e2:91:cb:31:0c:2f:a0:ee:47:8e:69:c5:d4:4d:a4:33:e5:
68:cf:ea:0d:f7:6b:d9:1f:fa:04:29:c7:0b:b0:76:69:6c:04:
32:f9:c6:38:bc:f0:0c:93:aa:93:be:f4:ab:5e:24:1d:6f:c4:
b4:70:44:b9:35:8e:ce:74:a9:99:a4:03:fe:87:9c:48:cb:cb:
1f:0f:c0:56:76:88:ed:5f:e1:6d:88:d9:e4:96:81:f9:c2:31:
ea:47:30:eb:9a:02:bb:d3:de:7f:ec:2f:0c:bf:37:65:4d:eb:
20:b0:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:44:34 2025 by rpki-client