Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/rcmSq9DZPLvqbl5OqBJVS4tbD6U.roa
File: rcmSq9DZPLvqbl5OqBJVS4tbD6U.roa (raw, json)
Hash identifier: t3i5pl3lYtDrXFcxINhCtvbAMQgOYOPG5gPXpJwNGZw=
Subject key identifier: AD:C9:92:AB:D0:D9:3C:BB:EA:6E:5E:4E:A8:12:55:4B:8B:5B:0F:A5
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77EB8CFA322E2A6673B50DEB63BF5
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/rcmSq9DZPLvqbl5OqBJVS4tbD6U.roa
Signing time: Wed 01 Jan 2025 21:48:32 +0000
ROA not before: Wed 01 Jan 2025 21:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35182
IP address blocks: 62.63.176.0/21 maxlen: 24
62.63.184.0/22 maxlen: 24
62.63.188.0/23 maxlen: 24
80.233.245.0/24 maxlen: 24
80.233.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7e:b8:cf:a3:22:e2:a6:67:3b:50:de:b6:3b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adc992abd0d93cbbea6e5e4ea812554b8b5b0fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:32:5f:f5:e2:44:d4:06:c0:08:7d:2a:97:
86:2c:e4:c7:b0:bc:10:a8:fe:a1:40:4e:c2:37:c6:
76:f8:4f:2a:64:75:90:ad:eb:b3:d6:81:80:ab:d9:
b7:78:d2:4e:61:41:3f:65:95:bd:5a:47:31:8c:70:
f1:99:99:9e:26:df:f5:f3:d7:98:64:0f:79:83:63:
82:94:a9:05:e6:72:26:ac:e5:38:dc:a6:a1:6c:5a:
34:e6:63:76:26:a0:ec:e3:71:1b:58:53:7e:84:cc:
9d:45:a1:e0:b9:0c:ab:a4:d5:d9:8c:25:3d:aa:1d:
c3:1a:c8:56:d5:ff:ca:cb:f7:0f:13:dd:13:c4:c5:
3e:dd:b9:f3:f1:4f:25:cf:39:f9:d6:f1:da:c6:ae:
4b:0c:61:68:41:66:98:61:34:e3:89:ed:bb:1c:e1:
93:85:28:b0:4e:b4:4b:ec:42:5f:99:48:c1:7d:21:
8e:89:44:8e:e2:30:4f:09:4c:ae:67:6b:14:30:e3:
8b:23:64:bb:0c:8b:7e:c0:6f:96:f4:47:96:c5:7d:
4d:cd:45:5e:ea:7d:ba:5a:f3:57:9a:97:a9:41:85:
7b:bb:a5:d3:4a:2f:e2:11:74:ac:3b:c8:22:8d:8e:
68:81:47:b6:43:72:b6:dd:66:a6:b5:8c:2d:df:96:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C9:92:AB:D0:D9:3C:BB:EA:6E:5E:4E:A8:12:55:4B:8B:5B:0F:A5
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/rcmSq9DZPLvqbl5OqBJVS4tbD6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.176.0-62.63.189.255
80.233.245.0/24
80.233.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:6b:74:06:55:db:23:81:0f:ce:17:da:6c:0b:f7:14:46:23:
b5:3d:89:2f:05:bf:34:2e:82:99:12:84:bd:60:5c:27:41:95:
09:ec:3e:5f:48:46:17:83:ea:ae:fd:85:33:dd:4b:e1:7f:66:
7f:26:00:40:da:05:c1:84:9e:24:02:77:85:d7:da:9f:1e:0e:
4a:37:8c:a0:5d:ac:3e:87:bb:2b:da:a0:cb:23:0f:9d:e4:b7:
45:69:0b:97:a3:4b:3f:fe:1d:9c:8b:32:95:0b:55:1c:1e:e7:
b9:73:7c:b5:07:ec:57:72:5f:f4:50:56:f9:95:c6:9d:f2:96:
9d:66:91:75:60:60:7e:09:d6:6d:7d:04:0c:3b:5a:22:a6:fb:
8c:b7:43:26:9c:44:8b:78:9e:e5:25:71:d3:bb:f1:6d:67:de:
05:43:d3:7c:c3:85:14:b9:bb:0b:cb:36:e1:64:62:b0:b7:fc:
f0:39:08:d8:43:78:97:9b:1b:ee:90:3a:81:b1:35:ab:18:b8:
44:62:c9:04:64:ca:2a:bc:72:13:98:f9:31:e1:45:0b:42:db:
1a:62:cd:db:0f:84:2e:14:ee:aa:85:6c:42:b9:55:c2:a3:db:
cf:27:81:9a:cf:2d:c4:c8:e3:ea:b6:08:2e:30:ee:7a:8b:c5:
ef:3a:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:18 2025 by rpki-client