Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa
File: LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa (raw, json)
Hash identifier: MaL24Dedevc8MXN5LlmhfVbJ0dnqBAZxBiWzlel5CFg=
Subject key identifier: 2E:8C:2A:17:A8:CD:41:C3:F9:81:4B:94:64:FC:DD:CD:24:D1:43:F1
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 019426D9D2113D1F0351E3331B7F3365A618
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47366
IP address blocks: 185.62.9.0/24 maxlen: 24
185.62.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d2:11:3d:1f:03:51:e3:33:1b:7f:33:65:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e8c2a17a8cd41c3f9814b9464fcddcd24d143f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:97:9f:84:90:9e:85:af:ed:2c:99:29:e6:
8e:a0:b2:1d:0b:f4:2d:5a:f1:c7:ea:15:c9:26:61:
6d:48:c0:68:b2:b9:99:eb:dc:9c:8c:0f:8e:77:31:
52:95:f4:7b:14:41:49:d1:9d:70:e4:1a:a0:24:10:
c8:51:27:19:ab:d7:8a:f0:7e:ff:77:f9:93:69:59:
35:78:dd:40:2f:75:7e:17:dd:c6:28:31:61:65:57:
fc:c1:3d:ef:52:1e:cf:06:4e:81:28:c1:8b:fa:76:
0b:7c:54:e3:26:96:71:08:49:24:b9:a2:0f:f0:79:
b9:64:f5:0e:16:95:42:2f:61:f3:a6:47:d1:4b:c2:
4d:af:06:86:2e:55:88:90:bb:00:fe:aa:2f:e8:de:
48:95:f6:f6:4b:ed:cc:7f:97:76:9b:8a:17:83:8a:
99:d1:1f:b7:32:a8:47:8b:ab:82:a2:30:92:1b:87:
8d:09:74:50:ac:a7:e9:43:bd:bd:36:c1:7a:12:f3:
69:78:ed:4d:30:94:9d:81:ba:59:f9:82:24:f2:10:
e8:19:5b:e0:03:c0:74:37:e9:f8:46:d9:c8:4d:5d:
eb:87:ed:8e:85:ee:15:36:7f:17:bf:8e:bf:d3:16:
17:1c:97:3e:f7:bb:d0:f7:62:f4:ea:03:e4:54:a4:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8C:2A:17:A8:CD:41:C3:F9:81:4B:94:64:FC:DD:CD:24:D1:43:F1
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.9.0-185.62.10.255
Signature Algorithm: sha256WithRSAEncryption
30:93:24:6a:e1:e8:26:3b:63:54:a0:56:ab:bd:16:15:18:12:
f2:11:dd:d2:3e:89:81:82:61:1b:81:48:24:60:17:01:09:bc:
c9:14:2b:33:42:8d:52:e8:7b:aa:0f:96:fc:9a:fa:cb:28:c1:
08:0e:9f:4c:96:5e:a1:e4:77:4f:9a:ce:ad:2e:78:d4:de:98:
fc:6e:9b:bc:b2:7e:09:4b:96:bb:ae:d1:21:f4:a0:b7:31:eb:
e2:1b:68:87:5e:19:7c:16:e1:9f:b4:ed:47:91:85:04:00:b5:
64:31:f9:c7:a5:c5:e6:1f:00:2c:c7:12:c6:69:5a:b4:5e:cc:
70:a2:fc:a5:a6:11:e3:a6:b5:4b:d0:bb:7c:21:7b:eb:4d:52:
cd:02:22:22:bd:43:a2:7f:1b:aa:19:93:c8:82:8c:b5:2a:ba:
7c:51:e3:73:20:6d:9f:b0:a6:e5:45:f5:54:ca:21:4f:5b:1b:
0f:39:06:81:e7:95:27:f2:5f:98:b1:b1:39:77:c8:a2:84:ba:
09:69:0a:33:76:aa:c2:88:45:d4:d7:27:f6:fe:6c:98:7c:86:
65:a6:df:62:72:e4:04:6e:1d:b9:2f:7c:f0:f2:89:17:6a:c6:
98:c0:d3:cf:a3:b1:81:3e:4e:e6:a9:ef:c6:98:bc:95:34:c7:
f6:12:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:20 2025 by rpki-client