Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/jpj69C1ImXMr6CPUoeUXJLiCpDU.roa
File: jpj69C1ImXMr6CPUoeUXJLiCpDU.roa (raw, json)
Hash identifier: PqTZZfg3T7FxVQucLl2CplTcjxSHdbI++B7VwzFwuZU=
Subject key identifier: 8E:98:FA:F4:2D:48:99:73:2B:E8:23:D4:A1:E5:17:24:B8:82:A4:35
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 019423D71A180DFC39290636331FFC5AF491
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/jpj69C1ImXMr6CPUoeUXJLiCpDU.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12479
IP address blocks: 62.151.0.0/17 maxlen: 24
62.151.128.0/19 maxlen: 24
62.151.168.0/21 maxlen: 24
62.151.184.0/21 maxlen: 24
62.151.192.0/18 maxlen: 24
84.76.0.0/14 maxlen: 24
89.128.0.0/14 maxlen: 24
92.56.0.0/14 maxlen: 24
185.124.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1a:18:0d:fc:39:29:06:36:33:1f:fc:5a:f4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e98faf42d4899732be823d4a1e51724b882a435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:32:af:db:5e:e7:23:de:94:06:66:73:13:
c5:0c:7b:02:97:9d:1a:4b:79:31:47:18:c0:e1:b4:
c0:b4:da:99:be:ac:c9:e4:63:cf:74:87:07:9f:45:
5c:b3:58:42:b2:26:16:22:f3:99:7e:e9:8d:2a:04:
e8:1a:65:ed:09:77:42:2b:ce:d0:ac:f6:a7:6f:6c:
cd:bc:40:9c:f4:1f:b6:f9:99:38:1c:d4:fb:ed:79:
87:3d:00:d2:22:15:3b:61:7a:3c:ab:2a:43:5c:b1:
a7:c5:55:26:24:db:19:53:b3:e5:74:a8:2a:ac:a1:
ff:80:4a:a7:9d:ab:b3:12:52:58:4d:0a:a7:50:8c:
79:b1:3d:72:0a:08:33:82:82:71:20:4b:30:ef:bb:
73:9d:08:20:c2:75:9c:83:1a:8b:a9:1e:a1:fd:65:
45:67:01:dd:40:2a:a8:32:1f:57:40:9f:85:30:1b:
25:aa:29:a9:93:4c:f4:a3:9d:9e:ee:f7:85:fc:8f:
45:1b:09:70:9f:df:f7:17:dd:e3:7c:0b:1c:d2:4d:
f2:0f:ce:74:55:76:71:32:bc:51:e2:c3:35:15:0a:
d6:58:4f:28:a6:ca:04:33:a8:6c:a1:88:b0:4d:a9:
18:0d:c4:3b:65:07:cb:7c:fc:56:33:69:6f:4d:df:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:FA:F4:2D:48:99:73:2B:E8:23:D4:A1:E5:17:24:B8:82:A4:35
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/jpj69C1ImXMr6CPUoeUXJLiCpDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.151.0.0-62.151.159.255
62.151.168.0/21
62.151.184.0-62.151.255.255
84.76.0.0/14
89.128.0.0/14
92.56.0.0/14
185.124.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:75:67:bf:19:1a:7c:13:df:60:dc:7c:68:61:90:b5:44:ed:
7c:c2:99:45:4b:0c:9c:ef:08:36:bd:8d:be:9f:4c:9a:8a:32:
57:09:e3:71:e0:34:96:58:fd:c9:15:fe:95:74:80:e8:35:62:
8a:3e:bd:72:0a:66:c7:51:7e:b1:85:ca:66:0e:b6:0b:ea:96:
bd:97:ed:cc:7f:d8:4c:ca:9c:83:76:f2:0d:a2:93:21:3b:98:
03:0a:89:07:9a:e4:04:23:71:6b:7a:ab:18:ba:ba:e7:6f:96:
79:3a:36:13:71:96:87:e5:98:71:1f:62:b6:29:8e:61:fd:f0:
c9:a3:c8:7d:99:89:11:b1:ec:4e:f7:f3:27:02:d0:20:2c:e1:
b5:46:10:9c:42:8a:fd:c1:3f:93:e9:2e:c0:1d:16:e9:27:01:
de:26:ac:cd:33:af:48:5b:be:a9:5b:d7:2b:57:56:d1:c0:a8:
ff:c9:ad:9b:2c:fa:ec:8b:14:ef:5d:8e:76:9b:1b:2c:c1:cc:
aa:86:67:77:67:66:ba:11:13:ae:79:3e:d5:14:81:0d:c1:95:
84:47:01:45:2a:a8:aa:60:c0:c3:86:40:14:23:dd:24:2e:6e:
f5:09:0b:e8:70:75:6a:63:3a:86:13:3b:b9:c4:b5:b2:05:93:
53:7c:55:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:48 2025 by rpki-client