Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/gL5Y2iWE_ZCPNJrNlSdtKJmjg2o.roa
File: gL5Y2iWE_ZCPNJrNlSdtKJmjg2o.roa (raw, json)
Hash identifier: wCggpARdDyZ/wAC1b4ExDASBW4uAEwHa8r5dk7EAX70=
Subject key identifier: 80:BE:58:DA:25:84:FD:90:8F:34:9A:CD:95:27:6D:28:99:A3:83:6A
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746EAE7F36526D845F51A98C3E6B290
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/gL5Y2iWE_ZCPNJrNlSdtKJmjg2o.roa
Signing time: Thu 02 Jan 2025 13:49:06 +0000
ROA not before: Thu 02 Jan 2025 13:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 62.138.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ea:e7:f3:65:26:d8:45:f5:1a:98:c3:e6:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80be58da2584fd908f349acd95276d2899a3836a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:35:46:68:8d:88:22:83:33:8b:58:21:0d:
21:3e:a5:b1:80:4a:b4:15:25:69:03:a9:a2:8a:52:
d2:c8:e4:d4:a0:48:b9:2c:04:48:ae:fc:f3:7b:1a:
0c:0a:e4:d7:88:c3:6f:4c:c6:14:4b:9e:5f:25:33:
50:a2:c1:70:62:80:9a:f4:0d:83:fa:2b:b7:28:e4:
ba:95:d8:fe:87:5e:a9:d4:3e:57:1d:ee:b4:c7:18:
4e:b1:27:e7:7e:76:df:d0:b5:42:85:6c:dd:fb:7f:
7b:38:b5:2e:05:d0:82:69:37:6d:28:da:3b:44:06:
09:ca:86:41:09:ec:e3:dc:61:88:14:62:7f:77:7e:
86:3e:4d:51:f0:09:fb:33:cf:08:9b:2e:d7:ce:19:
e0:f9:4b:0a:b3:57:ef:18:d9:bb:42:bd:09:9c:81:
38:a1:53:fa:c8:83:d6:bd:c0:c4:dd:f9:14:63:8f:
9f:0e:af:b2:a1:9b:0c:6a:ca:0d:8b:3a:7a:03:b7:
cb:44:48:ed:6d:15:02:94:39:f5:11:e9:41:72:db:
c9:c3:b5:b1:06:4f:c9:1d:29:56:c8:65:ec:d0:c0:
05:f0:75:8c:50:5b:24:7b:e9:d1:b6:96:40:85:9c:
52:d5:0c:6b:5b:9c:d1:45:a2:ae:01:55:35:10:8f:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:58:DA:25:84:FD:90:8F:34:9A:CD:95:27:6D:28:99:A3:83:6A
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/gL5Y2iWE_ZCPNJrNlSdtKJmjg2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
Signature Algorithm: sha256WithRSAEncryption
02:70:ab:f7:86:9c:30:e5:82:b1:0e:a1:ff:60:c4:85:26:91:
fa:e5:4e:76:5d:1e:0e:8b:70:cb:ea:22:cc:61:9d:96:74:34:
0b:c6:48:83:21:3c:ec:7b:25:48:d1:1a:88:85:c1:3a:11:dc:
e8:b7:2f:8a:78:63:1b:e0:db:83:3c:41:86:7e:52:86:5a:4c:
61:d2:64:00:54:cb:ca:a9:dd:6b:90:34:31:d9:17:7f:ce:ca:
79:58:8c:50:4a:87:64:12:f6:49:cb:40:e1:ab:79:92:59:c0:
b3:36:c5:fb:99:fe:ac:08:f1:6b:7c:fe:53:59:0f:02:6a:aa:
02:12:f7:a5:55:66:1c:26:18:a8:d5:33:fb:40:f6:30:31:f7:
d1:0a:23:03:6f:2f:a0:b3:f7:e0:d7:04:e0:a2:d7:42:9d:41:
b4:95:f4:fa:d5:c5:21:7a:fe:36:d7:1b:96:e9:d9:31:aa:33:
2d:a9:bb:4a:73:49:45:37:53:14:b0:bf:e5:d2:e4:ca:76:6a:
04:c7:53:f0:cf:27:85:90:3e:41:4c:59:7e:98:06:d6:a5:74:
b6:b6:14:bf:da:8b:65:08:d0:50:18:24:57:74:a1:07:2e:4c:
18:40:82:57:70:ca:bf:55:09:a6:e0:b7:74:04:82:a8:82:77:
3f:dd:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:14 2025 by rpki-client