Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/h12Z5dF3_yD0GpmhspUB2KfjtGk.roa
File: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (raw, json)
Hash identifier: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=
Subject key identifier: 87:5D:99:E5:D1:77:FF:20:F4:1A:99:A1:B2:95:01:D8:A7:E3:B4:69
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019423D6AB60585C5E101AEFE6B331F5FE19
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/h12Z5dF3_yD0GpmhspUB2KfjtGk.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205569
IP address blocks: 62.181.62.0/23 maxlen: 23
62.181.62.0/24 maxlen: 24
62.181.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ab:60:58:5c:5e:10:1a:ef:e6:b3:31:f5:fe:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=875d99e5d177ff20f41a99a1b29501d8a7e3b469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:99:4e:1f:07:a0:9d:06:3a:eb:21:de:f0:
7c:1f:a6:db:54:49:df:61:fc:ad:64:17:7c:46:b4:
31:f8:e6:e7:65:c2:3e:ad:49:af:a9:fb:21:73:6c:
e8:fc:f3:d1:19:ca:70:9b:ea:6b:9b:7a:44:b7:66:
e9:72:6c:27:4d:a1:ba:bb:46:bd:47:b4:40:f3:ac:
8a:f0:e5:8c:1e:29:93:e0:d3:97:0d:c8:4d:36:e2:
ac:be:35:9a:63:88:4c:99:dd:22:28:3e:77:1e:dd:
3c:84:28:15:5e:eb:9a:ab:b1:5d:15:41:12:f6:7b:
45:d2:7f:50:04:13:ba:95:0f:5b:ce:44:c7:68:6f:
0b:ba:04:37:79:59:86:38:7a:b6:6a:81:0f:45:8a:
a6:d9:20:83:0b:93:3f:62:13:5f:e2:da:8d:73:61:
32:5f:36:1a:65:82:0e:c4:54:c9:7a:31:97:13:77:
c2:9f:9d:ae:a1:ed:79:a0:be:6b:d9:29:6f:f3:e9:
21:de:d9:cc:44:e9:b8:bf:6e:6b:c3:86:6c:7f:f2:
81:87:e4:c1:7c:17:5e:b4:91:07:e3:76:24:2b:96:
52:ae:b0:6e:9a:32:95:04:ca:3c:1b:4b:66:40:21:
7e:2b:bf:41:92:71:c2:b5:f4:c9:41:ff:a8:9f:99:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:99:E5:D1:77:FF:20:F4:1A:99:A1:B2:95:01:D8:A7:E3:B4:69
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/h12Z5dF3_yD0GpmhspUB2KfjtGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.62.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:10:2b:9f:11:a4:1f:b1:bb:e2:bf:76:a6:67:46:f8:c5:25:
5c:ed:6f:0d:c5:19:0a:66:e7:61:2b:f3:b6:a2:24:68:d8:59:
d1:c3:df:a0:2f:35:f3:93:07:e2:f5:74:fa:d4:ad:fc:2a:48:
a6:75:bc:30:a2:1f:e5:18:cd:96:00:17:0d:a2:59:33:ea:78:
44:30:07:ec:00:a2:6c:d6:10:b7:ee:14:74:27:f0:c0:16:39:
b9:55:6e:28:24:1b:e9:b0:1b:60:e0:7f:76:2b:5a:83:ad:7e:
ac:5c:ec:6b:b5:c9:48:27:8c:80:8e:35:c6:52:db:c6:75:06:
18:db:39:b1:30:c4:0a:b3:aa:c2:95:43:1a:d0:9d:cf:5e:fe:
e7:8d:34:38:f3:17:95:0c:1f:90:27:a2:1f:89:47:76:b2:d6:
b3:32:41:10:b7:cb:c5:20:12:6e:84:6a:ef:09:8b:48:3f:f5:
cf:78:a8:2b:7b:22:4c:3c:79:85:34:b4:36:2b:a1:5e:d2:53:
f6:5a:0a:36:b0:82:55:b5:39:ef:b8:cc:15:a8:74:83:a5:dd:
02:f4:99:d1:a9:9d:64:47:9d:2e:1d:df:55:2f:1a:da:44:3f:
8c:df:8a:b0:a4:0f:a1:4b:7f:84:41:9b:1b:d7:44:ff:73:9e:
49:90:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:18:40 2025 by rpki-client