Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/REnNHc3EdwxgjNw-VpXGx_g82qg.roa
File: REnNHc3EdwxgjNw-VpXGx_g82qg.roa (raw, json)
Hash identifier: 124s1GBcl/AFEUck0q3Uo/i9OIRaWtaDN26Tjn+07fQ=
Subject key identifier: 44:49:CD:1D:CD:C4:77:0C:60:8C:DC:3E:56:95:C6:C7:F8:3C:DA:A8
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01942220286C7CFF4D2C1D1067034DFAE6C7
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/REnNHc3EdwxgjNw-VpXGx_g82qg.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9155
IP address blocks: 62.150.155.0/24 maxlen: 24
62.150.181.0/24 maxlen: 24
195.39.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:28:6c:7c:ff:4d:2c:1d:10:67:03:4d:fa:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4449cd1dcdc4770c608cdc3e5695c6c7f83cdaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:34:82:19:6b:42:04:17:1a:19:23:d8:5d:
91:49:ce:6f:45:eb:72:d0:f4:67:30:d4:46:c3:96:
a5:34:71:24:9c:aa:24:7d:6a:7b:e7:cc:a5:58:fd:
82:6d:18:b6:de:4f:cd:7c:51:61:36:8c:f4:d2:e4:
6e:98:0b:06:19:89:f9:23:54:d8:27:c4:57:9f:69:
75:bc:54:5b:1a:03:79:57:14:bd:b0:17:fe:ec:4d:
ea:c3:38:c0:98:66:c1:8e:48:87:9e:41:d3:5f:41:
92:5c:e0:7d:37:2c:e6:96:bd:0d:a7:63:97:ba:86:
72:6d:cc:f4:05:ee:48:55:2a:18:b3:f9:f5:e0:10:
6e:91:66:8b:73:5b:de:cb:75:22:af:12:a4:0f:41:
9a:9c:eb:0d:72:fa:cf:e0:04:9b:0a:31:73:e2:a1:
ba:76:ad:78:27:aa:d7:57:a3:06:db:eb:fa:33:9c:
11:95:1f:ce:8b:96:45:cd:b8:f5:66:41:c7:7a:3b:
03:de:2c:4c:9c:46:5f:13:ec:81:d4:11:ee:36:28:
80:19:c7:aa:fd:a2:59:74:7c:30:cd:89:94:05:cb:
ad:1c:ce:b7:7d:a0:e8:d0:01:67:37:94:d4:bd:3d:
03:34:b0:5f:14:33:11:c4:05:25:e7:e7:40:35:4b:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:CD:1D:CD:C4:77:0C:60:8C:DC:3E:56:95:C6:C7:F8:3C:DA:A8
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/REnNHc3EdwxgjNw-VpXGx_g82qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.150.155.0/24
62.150.181.0/24
195.39.181.0/24
Signature Algorithm: sha256WithRSAEncryption
34:86:4b:15:3a:ba:f0:86:ea:e7:a5:b4:dc:6f:29:3d:f8:82:
90:a1:a3:03:1d:26:37:76:dc:d3:e4:a7:18:21:b8:7c:1c:d2:
99:3e:61:31:e1:c4:f4:a3:23:ba:12:28:27:f0:7e:c4:6e:aa:
b3:98:21:eb:b4:ec:08:64:b6:21:d3:b9:89:da:6c:6e:ae:4d:
e9:0d:70:48:0b:35:a0:f0:24:9a:62:80:bf:09:b4:bd:21:ab:
ea:f9:5f:1d:0d:90:e7:d5:b4:e1:65:81:47:58:fb:81:dc:98:
8d:3a:45:9f:70:f3:05:f8:81:0a:78:4d:e4:fc:2b:a3:7c:a8:
6a:28:33:50:a7:b6:74:50:cd:68:3d:5a:5f:d5:76:ed:85:99:
f4:8c:28:b7:5b:22:10:45:a6:96:73:2a:cf:83:76:a7:2e:43:
41:54:9e:d2:57:f8:57:45:ab:79:f0:30:d2:9a:14:ea:95:91:
f6:bd:47:d4:27:33:35:2f:88:17:4b:62:06:dc:8f:32:15:76:
20:7c:07:cf:02:40:bf:ac:e3:3b:a1:1b:14:a5:e0:ea:df:76:
6f:ea:21:ef:72:2e:19:33:f8:a3:dc:00:bf:68:a8:95:aa:87:
8e:e8:31:87:14:99:8b:49:82:ed:86:99:0d:b9:d5:1a:3d:8b:
57:ea:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:13 2025 by rpki-client