Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/clDd21QzHwOlwdLoUbCFlA9N4Bc.roa
File: clDd21QzHwOlwdLoUbCFlA9N4Bc.roa (raw, json)
Hash identifier: b4fVPg9ViPXbDXBeIAFrk3g5qdFMK0V6puBPZsjXHfs=
Subject key identifier: 72:50:DD:DB:54:33:1F:03:A5:C1:D2:E8:51:B0:85:94:0F:4D:E0:17
Certificate issuer: /CN=cd3bbc195cda7e58245a61cb30b96fe572fd7811
Certificate serial: 019423D6FB0C8274FCE6289DAD96D7FD323F
Authority key identifier: CD:3B:BC:19:5C:DA:7E:58:24:5A:61:CB:30:B9:6F:E5:72:FD:78:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTu8GVzaflgkWmHLMLlv5XL9eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/clDd21QzHwOlwdLoUbCFlA9N4Bc.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210692
IP address blocks: 62.106.88.0/24 maxlen: 24
94.154.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fb:0c:82:74:fc:e6:28:9d:ad:96:d7:fd:32:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3bbc195cda7e58245a61cb30b96fe572fd7811
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7250dddb54331f03a5c1d2e851b085940f4de017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:fb:b5:82:f1:42:a3:82:e3:77:71:20:31:
c6:55:0d:57:15:76:b5:16:5b:c9:0c:73:5f:29:7f:
42:cf:d8:48:2f:b5:54:95:f1:b6:6b:47:bd:6f:15:
ca:de:81:5c:4a:a7:06:06:2e:4b:53:f4:92:d8:e8:
08:98:30:dc:10:8d:94:c5:26:62:29:44:76:37:08:
94:d7:b8:d6:0d:2b:52:09:e9:c4:aa:25:f5:1d:13:
33:18:7c:5e:32:0f:9a:5c:a2:f2:bc:b7:cb:73:e6:
3b:7d:ac:33:c5:3c:e3:d0:1e:b6:ca:00:a7:65:d6:
f5:d6:ab:b6:21:6d:fd:06:6c:06:63:4d:b2:6d:8b:
3c:cc:a0:2d:bf:b4:17:06:bd:5a:b3:14:e1:9c:3d:
37:6b:a6:fa:86:08:a2:28:c6:58:f7:6f:f7:55:a6:
1f:db:39:00:31:cf:6e:de:6f:4a:ce:56:01:c1:1d:
0a:28:58:bc:c3:26:fd:58:f7:8c:c9:c4:87:9f:28:
4b:8b:99:d6:00:d5:79:b8:a6:03:2e:c5:6d:ef:9c:
36:e7:78:07:6b:d5:92:9f:42:a4:15:52:1c:5f:3c:
91:21:e7:ab:23:7e:df:67:51:2c:d4:a6:bd:39:ba:
73:79:5c:9c:5a:01:91:42:8a:a9:78:ce:54:77:5c:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:50:DD:DB:54:33:1F:03:A5:C1:D2:E8:51:B0:85:94:0F:4D:E0:17
X509v3 Authority Key Identifier:
keyid:CD:3B:BC:19:5C:DA:7E:58:24:5A:61:CB:30:B9:6F:E5:72:FD:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTu8GVzaflgkWmHLMLlv5XL9eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/clDd21QzHwOlwdLoUbCFlA9N4Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5af7a5-b67c-459a-9893-c6fadeb285ba/1/zTu8GVzaflgkWmHLMLlv5XL9eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.88.0/24
94.154.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fa:c7:d2:4e:c1:3b:fe:49:38:1a:43:9b:75:df:04:ee:be:
2c:3f:40:fd:78:d1:4e:02:75:0d:62:a1:26:8c:fc:31:76:f8:
df:51:c1:2e:51:7f:93:f4:1c:ca:04:b3:79:a9:af:52:66:c4:
6a:4a:77:48:4f:ce:9e:9b:46:ce:48:62:f5:d4:51:e0:e7:c0:
4d:46:4e:81:d6:2d:bb:eb:0f:52:38:26:b6:79:0f:f6:8d:f7:
d6:ed:cc:3e:42:a1:3e:ef:92:b7:6f:7b:5f:f9:2c:ee:db:1a:
2c:09:b1:7e:e5:74:c4:5b:b6:c3:6b:b9:59:68:dd:e0:b3:71:
d1:e2:88:bf:8f:20:c5:74:d4:c5:3e:d9:e0:91:ef:e6:c4:37:
24:58:4e:f9:e1:65:13:b7:d3:08:b1:73:5e:35:53:e5:67:89:
41:73:41:39:66:39:42:2d:19:92:9d:05:b6:2f:5d:26:63:1b:
1c:19:05:43:d8:c0:2f:66:1d:de:2b:90:c0:75:77:87:d6:36:
94:59:10:b8:dd:6b:0f:02:f3:db:1e:4c:a5:5e:0f:65:0c:6d:
e7:87:d1:a6:a8:68:09:a1:c9:28:8a:7a:19:7e:7d:e1:35:62:
d2:f3:69:80:bd:5c:b6:7b:8a:c7:51:70:5f:74:4f:0a:5d:54:
e0:e4:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:07:16 2025 by rpki-client