Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/UljtGTk6FE5SFIVhbxqvXUbkWqc.roa
File: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (raw, json)
Hash identifier: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=
Subject key identifier: 52:58:ED:19:39:3A:14:4E:52:14:85:61:6F:1A:AF:5D:46:E4:5A:A7
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 01942068454D6706F7FAA362540A109FA343
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/UljtGTk6FE5SFIVhbxqvXUbkWqc.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201737
IP address blocks: 62.3.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:45:4d:67:06:f7:fa:a3:62:54:0a:10:9f:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5258ed19393a144e521485616f1aaf5d46e45aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:b4:44:d4:ab:7e:7b:3a:9a:c6:07:16:22:
6b:7a:ef:4e:48:87:6e:c9:03:23:65:d0:77:65:28:
cf:a7:68:bf:e4:30:da:7d:d6:a1:50:ef:a7:cf:fc:
75:81:02:e2:2a:49:fb:c8:a3:02:e0:1a:cf:50:95:
b3:81:d7:46:2c:80:2e:c6:8c:52:9d:a1:7a:72:7a:
57:38:d5:87:b0:1d:fb:20:31:06:47:cf:b5:1c:7b:
0f:e2:c2:03:3a:28:a1:fe:46:dd:96:97:64:ad:7e:
3f:31:37:ad:c2:0b:ce:b4:97:b4:16:2e:7b:85:a8:
dd:82:4f:44:3c:ad:93:d3:a9:50:41:2e:9a:95:cf:
42:80:42:57:62:2c:d2:90:55:45:36:e2:94:a9:8f:
39:9e:37:e5:29:11:65:12:e5:0f:b4:39:a8:af:06:
f2:f2:dc:d9:ac:c6:0c:ae:6b:7b:2a:ea:3b:b3:ae:
49:5b:02:7a:5b:9f:37:5c:fa:86:6b:3e:2b:78:75:
e6:a4:c1:2a:45:aa:a7:45:a7:45:1b:93:ca:6e:08:
6e:5d:b3:ff:60:8b:8a:49:ac:21:98:7b:2b:96:22:
fd:80:dc:37:2c:c8:d5:7f:7f:32:4c:12:06:05:d9:
dc:37:b0:9a:4d:91:98:0a:9a:1b:ff:91:34:0e:ef:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:58:ED:19:39:3A:14:4E:52:14:85:61:6F:1A:AF:5D:46:E4:5A:A7
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/UljtGTk6FE5SFIVhbxqvXUbkWqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.17.0/24
Signature Algorithm: sha256WithRSAEncryption
10:55:e1:21:3e:7e:98:d9:f0:47:27:fc:64:17:90:2c:fd:0a:
b6:0b:1a:86:48:dd:8f:6a:12:1d:02:78:c5:12:94:14:e9:fa:
d6:e9:4e:48:4e:1a:ff:89:de:0e:ea:82:9a:34:9b:9f:77:2a:
a6:40:5a:de:d2:e3:64:a3:03:a0:0d:0a:e5:24:9c:b7:48:89:
ed:cd:16:54:24:6a:a5:8a:8d:2f:0a:ac:0c:59:b9:ec:4b:e4:
75:d6:81:a3:8d:1a:c3:da:44:f0:a9:bf:ee:1f:9f:a7:20:a9:
1f:6c:c1:e3:59:2f:3f:39:2c:29:36:20:50:42:0b:20:cc:e3:
0a:43:66:33:cc:7d:6b:d4:c7:9e:d9:50:14:91:1e:de:43:17:
f8:6f:33:0d:b4:3c:c0:91:3f:14:c2:85:bc:bd:f0:ee:d8:d5:
59:2c:76:10:76:c5:70:80:f9:4e:86:1d:92:af:2e:54:ba:0c:
0c:29:8c:52:45:b8:51:06:d8:20:80:7f:e1:5b:70:2f:d0:3e:
01:c0:e6:16:a9:32:d1:34:ce:1a:ed:59:77:f4:b1:c4:63:82:
b8:61:f3:bf:04:e4:d3:3f:19:01:29:f9:95:e8:c8:ec:52:ba:
41:a3:c3:17:5d:09:c4:e5:73:bf:cf:7e:e1:b3:66:e6:29:85:
65:75:68:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:47 2025 by rpki-client