Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/rDvgit_zW_J5sBeFSjvWxEfxGEc.roa
File: rDvgit_zW_J5sBeFSjvWxEfxGEc.roa (raw, json)
Hash identifier: Z69AN0vUaJQYCf1e5iHnzpJseConW5EmMiFzG056XPE=
Subject key identifier: AC:3B:E0:8A:DF:F3:5B:F2:79:B0:17:85:4A:3B:D6:C4:47:F1:18:47
Certificate issuer: /CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Certificate serial: 01942067EAE96580B9926B27C42F514B5BD6
Authority key identifier: 14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/rDvgit_zW_J5sBeFSjvWxEfxGEc.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34863
IP address blocks: 62.106.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ea:e9:65:80:b9:92:6b:27:c4:2f:51:4b:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac3be08adff35bf279b017854a3bd6c447f11847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:b1:ad:ca:ad:f9:ce:f6:da:49:dc:61:58:
78:6c:e5:97:72:db:99:84:03:7d:fc:f3:bc:4f:b4:
dc:a6:1e:ae:7c:7c:0e:66:f3:2f:39:16:e6:bc:e8:
7e:e3:96:a1:fa:46:a3:18:0f:20:d6:a8:33:ba:71:
41:d5:c9:38:a0:b7:13:7d:75:2c:1a:8c:c5:f5:30:
3b:07:de:df:2e:2a:bf:6d:7d:2f:79:b9:a1:b7:26:
c2:cc:bd:85:a1:83:8a:71:ae:ff:db:bc:1c:98:c6:
6c:64:65:ee:bc:fe:5f:c0:ba:a7:02:0e:fd:8d:d8:
2d:3d:35:04:3b:fb:e1:ca:5e:9c:6d:4d:ab:d8:86:
9e:26:4f:01:e4:b0:c9:93:c4:ae:45:6c:2f:d6:49:
36:2f:c8:50:99:f5:dc:eb:21:94:ba:23:77:dc:98:
1c:c2:f2:e4:58:20:26:3f:c4:64:39:3d:6f:c8:ed:
76:09:21:14:14:ba:35:aa:24:de:39:c4:5b:b7:3b:
a2:74:3e:14:cd:fa:78:4b:7b:a5:46:65:67:42:11:
ff:ae:89:c4:90:34:ff:9a:f3:dd:3d:62:30:46:c1:
f1:91:6e:20:11:97:a2:78:89:05:ef:eb:97:9e:97:
3a:f2:0e:ad:f0:2d:3f:03:f1:66:78:24:fb:47:a3:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3B:E0:8A:DF:F3:5B:F2:79:B0:17:85:4A:3B:D6:C4:47:F1:18:47
X509v3 Authority Key Identifier:
keyid:14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/rDvgit_zW_J5sBeFSjvWxEfxGEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3d:cd:1c:99:d0:60:4b:76:d3:4d:d9:a5:42:f6:e6:f0:92:
61:ad:d6:ce:fa:03:d1:e7:f6:9a:0f:72:d6:b7:53:c4:83:df:
7d:4d:08:c2:66:d4:46:92:56:54:88:bf:68:20:c7:21:cf:4e:
86:5c:ed:fd:19:a4:f1:00:57:0b:04:98:94:66:6d:9f:5c:75:
e5:26:95:96:e4:82:11:67:a6:9a:7d:a6:05:8a:5a:84:0a:2b:
e6:0a:55:d6:af:a1:09:dc:7a:31:35:1d:da:72:89:2b:73:51:
df:2c:0a:45:24:54:ec:fd:98:a4:23:79:42:e2:1a:32:fe:fb:
18:d5:6d:9d:26:5c:b3:a5:7f:b0:56:40:9c:63:ce:5d:3c:8d:
1b:05:b1:29:29:dc:bc:c5:63:aa:da:21:c6:12:17:fc:18:46:
60:57:f9:63:35:40:15:53:35:60:29:aa:6b:f6:4a:2f:ac:89:
67:18:d9:b9:af:60:18:f6:5e:3c:4d:8d:98:5e:bc:f5:02:e9:
b6:b2:a9:0a:4d:96:8b:cd:7a:fe:8e:f1:0b:96:4e:54:b4:e8:
68:24:e7:80:6d:fd:6e:0c:df:0c:05:5c:21:2f:df:07:34:15:
8f:7f:17:10:af:5b:06:9e:66:0b:43:08:8e:d9:a2:ac:60:6c:
23:56:4b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:42 2025 by rpki-client