Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/mVmFEspS58t4qBmgu_qcdcUjF7o.roa
File: mVmFEspS58t4qBmgu_qcdcUjF7o.roa (raw, json)
Hash identifier: Au8uqHQV1V3ihkYvq6mYv36Z4AIS8BXt28+53WRRcaQ=
Subject key identifier: 99:59:85:12:CA:52:E7:CB:78:A8:19:A0:BB:FA:9C:75:C5:23:17:BA
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 0194228E22A8CA23B3DCFBDC3F0BBEFA3836
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/mVmFEspS58t4qBmgu_qcdcUjF7o.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 62.113.36.0/23 maxlen: 24
62.113.41.0/24 maxlen: 24
62.113.42.0/23 maxlen: 24
62.113.44.0/24 maxlen: 24
185.171.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:22:a8:ca:23:b3:dc:fb:dc:3f:0b:be:fa:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99598512ca52e7cb78a819a0bbfa9c75c52317ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:09:1c:1d:44:c7:c1:f2:87:a8:90:12:ca:
9d:dc:aa:60:ff:f6:dc:c0:32:2f:da:03:d8:e6:72:
6e:c3:9a:ec:cf:40:76:04:34:aa:4d:ff:1b:d9:94:
8c:79:80:12:81:e2:4d:c6:1a:85:30:a1:c6:37:91:
64:2e:9c:85:14:e2:55:97:d2:c0:97:3d:44:df:d9:
86:1d:4a:e2:b4:6d:70:4e:16:13:db:0f:a3:36:a5:
63:0c:40:10:0a:a8:b1:d8:7e:d5:c4:1f:48:fd:d0:
94:b8:75:de:92:61:6b:0f:db:86:9e:dc:9c:a4:0e:
7e:7e:80:74:de:cb:d7:bc:a3:dd:6d:4f:af:5c:2a:
76:3d:cf:06:4d:a8:9c:ab:24:7e:ae:e5:ec:d1:73:
8b:43:0c:e4:e6:cb:0a:da:d1:52:bd:d7:43:bf:6c:
b0:b6:c8:de:c3:fc:72:78:4f:db:e7:fd:ee:d5:a6:
05:a4:40:6f:ed:3c:27:aa:ae:82:29:d2:97:be:4c:
7a:42:57:24:d2:cb:85:ea:2b:e2:a2:0a:5d:a3:5c:
03:59:ba:8c:4e:28:fd:5d:41:b3:48:fb:12:7e:20:
ca:20:da:41:eb:e1:f5:ea:b8:83:4a:5f:35:dc:f9:
89:67:1e:e4:bc:d0:42:4e:e7:9a:21:da:07:38:fa:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:59:85:12:CA:52:E7:CB:78:A8:19:A0:BB:FA:9C:75:C5:23:17:BA
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/mVmFEspS58t4qBmgu_qcdcUjF7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.36.0/23
62.113.41.0-62.113.44.255
185.171.80.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:a6:3c:d0:99:64:e9:18:47:8b:b8:d6:ee:28:33:d7:a8:5d:
b7:3e:fc:ca:cd:a3:b2:5d:ee:a0:de:bd:2c:ba:4c:8a:1d:e3:
de:02:6f:bf:89:ea:91:01:f5:52:e7:09:8b:1f:d4:8d:32:6d:
14:c3:8c:cd:8f:de:1c:75:85:c1:24:15:11:81:a7:17:a9:21:
06:c7:54:f2:cf:8f:b8:16:61:71:b2:5c:46:f5:6b:9b:d8:61:
ab:85:cb:b4:d4:53:6c:19:60:40:a2:7a:c1:86:0f:30:2a:46:
f9:0b:7e:5b:ba:eb:3f:ee:23:7c:17:e3:05:9c:d9:af:12:1e:
fc:dd:47:95:a1:d3:07:5c:20:26:3c:9c:7e:74:a3:a3:ad:2d:
1b:db:99:21:eb:d8:e3:92:77:51:c7:cb:bc:f5:c2:82:f3:37:
58:46:1a:e7:70:42:9b:79:b0:47:70:f8:fa:15:ec:1a:12:0a:
ef:d7:04:61:2a:2d:a6:56:fd:d9:9d:95:2f:ad:75:95:2b:b3:
7e:b1:4a:13:ce:9e:1d:1e:1f:97:6b:f1:49:ce:64:95:c3:95:
c6:a9:68:2f:15:8d:55:50:6c:a9:e4:a9:21:0e:be:59:bd:bf:
dd:04:87:a3:53:d5:df:87:21:e0:e0:16:42:05:f5:42:e2:c8:
e5:bf:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:35 2025 by rpki-client