Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa
File: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (raw, json)
Hash identifier: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=
Subject key identifier: E3:36:57:E7:32:56:52:C7:D9:E7:39:86:E9:B3:DB:32:BD:25:BD:BB
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01942220295EB9C5C71446C59E97AE50D2F5
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47589
IP address blocks: 62.150.164.0/22 maxlen: 22
62.150.204.0/22 maxlen: 22
62.150.224.0/22 maxlen: 22
62.150.228.0/22 maxlen: 22
62.150.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:5e:b9:c5:c7:14:46:c5:9e:97:ae:50:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e33657e7325652c7d9e73986e9b3db32bd25bdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:51:cc:15:34:f9:c0:2e:3d:c0:b7:25:0a:
bb:4a:20:e6:34:ba:9f:3b:85:2a:c1:fe:ca:34:98:
76:44:01:05:af:f1:58:d2:b0:66:d4:14:ac:75:ce:
ca:5f:63:02:a5:08:dd:30:bc:b3:27:67:4b:04:e5:
4e:9a:5d:78:42:3b:c8:f0:57:23:1b:d7:cf:46:e7:
fc:82:fd:62:10:0e:46:d7:4f:3f:9b:05:e3:a4:b3:
23:e8:87:6b:f6:c5:a6:87:04:d0:ce:70:3d:3f:0b:
3c:99:0f:65:b6:dc:6c:f8:e4:d0:83:e6:10:87:f7:
44:74:2d:f0:00:e2:ea:96:d4:1f:2e:73:17:5a:7b:
96:df:ce:b6:a4:78:64:ea:38:ac:86:e9:01:5c:97:
88:28:77:12:ba:ac:c8:47:e2:37:14:8c:81:54:c1:
66:fa:8f:d2:64:4b:bf:f5:a5:be:09:a0:47:75:9e:
73:2b:30:3a:f9:9e:cc:ee:bf:25:c0:9a:0a:c3:cd:
01:a1:9d:61:ac:29:f9:47:3c:b2:91:d7:16:20:46:
ad:8d:ff:0a:4a:12:9d:78:a1:cb:46:8f:68:55:95:
e5:59:26:86:b7:99:7a:40:aa:d9:32:fc:ae:f0:c6:
e7:6f:96:c6:2c:30:fb:05:fc:7b:1a:87:a4:f0:43:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:36:57:E7:32:56:52:C7:D9:E7:39:86:E9:B3:DB:32:BD:25:BD:BB
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.150.164.0/22
62.150.204.0/22
62.150.224.0/21
62.150.244.0/22
Signature Algorithm: sha256WithRSAEncryption
08:a5:7a:4d:5d:77:67:01:e1:ee:65:2c:8e:6c:f2:a5:2d:ed:
aa:39:83:17:ae:41:49:a7:6a:69:81:ca:6d:8c:83:a5:c0:4d:
71:b3:e0:86:a5:44:20:97:ee:9c:1a:a5:d5:5e:b9:24:a1:c9:
7d:2f:ef:0e:03:92:b8:32:f2:73:b3:4f:53:71:ab:13:da:bb:
95:b7:d8:d5:30:1d:c7:d2:d2:56:e8:6d:d1:ef:fc:b5:2f:e8:
fb:c9:f2:93:e2:da:4b:0e:4f:c2:51:6d:9e:14:48:71:5f:2a:
78:db:3d:0d:46:e5:90:39:d8:82:a5:bc:5f:e6:db:ad:88:38:
33:bc:ed:f7:88:2f:e2:9c:d5:de:c8:68:0c:9f:49:6c:ad:e9:
b2:29:a1:76:75:0e:eb:04:5c:24:9d:c4:97:70:51:60:8c:7b:
5b:7a:bc:c0:72:f3:c9:91:e6:ed:bb:5f:eb:7c:be:82:a5:54:
5a:3d:6a:ab:42:80:14:87:23:bc:23:c5:bd:49:20:08:91:a6:
ca:a6:4e:7f:90:74:18:96:ba:58:22:1a:1f:90:ae:47:c7:c7:
f1:f6:81:6e:59:68:7c:a6:62:90:66:ef:ba:39:f2:07:89:42:
3e:e5:5e:71:3b:0e:7c:fb:d5:86:b0:c0:3f:fd:34:12:37:97:
e6:17:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:20 2025 by rpki-client