Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/vgmzsk5mJlVpOvg90oBMOrzEyD8.roa
File: vgmzsk5mJlVpOvg90oBMOrzEyD8.roa (raw, json)
Hash identifier: mlh/51JI3/xnvn2/YPy/vMvMSrdR3vTjEtNddu6PauM=
Subject key identifier: BE:09:B3:B2:4E:66:26:55:69:3A:F8:3D:D2:80:4C:3A:BC:C4:C8:3F
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 0194228E236BE24FDBEFE4D24FF8A7E90352
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/vgmzsk5mJlVpOvg90oBMOrzEyD8.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60660
IP address blocks: 62.113.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:23:6b:e2:4f:db:ef:e4:d2:4f:f8:a7:e9:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be09b3b24e662655693af83dd2804c3abcc4c83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:d2:be:d7:5d:fe:30:66:ad:cb:69:7e:4d:
c3:03:cb:6a:c6:77:c5:3f:d3:3e:bf:f9:7a:5f:71:
91:ff:58:ad:2b:8b:38:b6:1a:3f:54:23:a1:77:67:
68:33:3f:3f:54:56:56:39:4a:27:b9:57:6b:bb:cc:
1a:2f:4e:e0:5b:a6:c2:ca:58:74:56:18:9e:14:3a:
3d:6c:90:3f:b4:2c:4e:ca:68:dc:e1:3e:00:b9:af:
83:df:fa:06:e2:1e:86:0a:87:b8:81:f3:75:34:1a:
5f:24:c6:dd:07:66:5d:a9:0e:5d:97:3f:73:dd:cb:
42:3b:b0:10:b4:e7:05:d1:3e:bd:39:e1:28:ad:0a:
20:cb:2a:fe:9a:25:04:de:24:ab:9f:2f:b8:6e:e8:
0b:fe:03:bd:4b:6d:4c:b6:6f:07:b8:e3:14:c6:cb:
1e:80:8f:20:4a:99:39:7c:f2:04:db:ca:dd:4e:22:
47:ae:2b:75:a9:76:ad:86:ee:8b:36:66:72:af:3d:
65:d5:7e:d7:6d:5f:2c:3c:34:55:3b:d9:a5:2c:42:
e7:dd:be:05:a2:07:63:1a:bd:f8:2a:2a:2e:10:14:
c5:6e:ca:1e:01:af:53:1c:0d:a1:49:52:be:a2:56:
83:1d:02:ec:e1:14:b1:df:5a:26:fe:48:41:85:42:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:09:B3:B2:4E:66:26:55:69:3A:F8:3D:D2:80:4C:3A:BC:C4:C8:3F
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/vgmzsk5mJlVpOvg90oBMOrzEyD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:82:90:10:9e:88:fa:0a:25:32:3f:1d:8b:c5:f2:99:2c:6b:
71:79:f3:c1:19:4a:4d:a1:2c:f1:5b:cb:12:a5:67:d2:4a:68:
68:67:83:5c:66:e6:a0:43:5f:91:0c:58:a1:03:47:ac:05:99:
75:81:30:33:b6:0c:a3:80:a5:fa:71:64:28:4b:48:5f:11:2a:
76:33:da:fb:ff:06:84:20:a9:2b:50:0e:fd:68:77:dc:bf:04:
40:42:fb:62:15:fb:b1:1d:2b:b0:5a:bf:10:70:19:e8:68:fc:
40:f9:85:13:f7:77:b5:ef:c2:9d:84:ec:60:ff:88:a8:68:ba:
ca:45:86:9f:d9:3c:b1:9c:52:7a:ea:ae:7e:86:5c:36:fc:f9:
fe:e0:3a:d0:52:b9:97:54:9b:d6:7f:e3:d9:9a:b3:31:0f:eb:
e1:de:7e:50:41:ad:06:91:22:1e:b0:11:9b:a6:dc:74:d4:18:
fa:2a:84:80:cf:15:ee:b5:cb:51:68:70:5a:56:2f:03:63:86:
38:d2:41:be:40:56:89:79:1e:5e:b1:08:69:ba:1e:da:b4:7e:
b6:39:39:4a:3a:66:57:52:e8:69:d7:5e:1c:16:1b:be:ca:20:
f3:97:ab:3b:31:cb:1e:6e:e5:2f:6a:f1:72:3e:ab:64:cd:93:
b4:c6:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:43 2025 by rpki-client