Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/Fds62TGMyTlwM8vRkzaJaGJ5Eek.roa
File: Fds62TGMyTlwM8vRkzaJaGJ5Eek.roa (raw, json)
Hash identifier: q5Ow33c1bh3hq1JeVBViO7V2snykjsS/0onMTIgKr4E=
Subject key identifier: 15:DB:3A:D9:31:8C:C9:39:70:33:CB:D1:93:36:89:68:62:79:11:E9
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 01942368D81E99735947AE951E5FA166C3BE
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/Fds62TGMyTlwM8vRkzaJaGJ5Eek.roa
Signing time: Wed 01 Jan 2025 19:47:41 +0000
ROA not before: Wed 01 Jan 2025 19:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49915
IP address blocks: 62.69.148.0/23 maxlen: 24
62.69.150.0/24 maxlen: 24
91.216.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d8:1e:99:73:59:47:ae:95:1e:5f:a1:66:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jan 1 19:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15db3ad9318cc9397033cbd193368968627911e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:c9:b3:80:79:75:48:8b:bd:d8:12:28:55:
71:1b:a5:1f:f4:59:68:c2:e3:75:61:bd:d1:70:ca:
33:98:d2:38:7a:5e:13:ac:91:d4:f6:8d:db:78:c1:
c3:0b:dd:b5:1d:98:0d:9e:f4:a7:11:c5:94:6d:7d:
1c:f8:e2:6f:f7:36:18:95:3e:a6:b1:97:27:e7:a8:
c4:d6:37:4f:24:48:e7:d3:1b:80:07:32:88:bd:eb:
3d:49:74:77:58:85:93:75:fe:7e:c6:60:68:d1:b8:
08:c3:97:9d:da:86:e1:21:74:76:6a:72:63:30:d9:
cc:8b:32:08:53:3d:7d:f5:a0:a7:d5:0c:5f:5f:47:
92:25:3f:e4:28:a0:77:8b:36:38:9a:4d:bb:7c:08:
11:be:d0:8b:6a:3f:29:c5:c5:dd:1f:28:6a:89:cc:
1a:38:fa:9e:28:e5:76:86:6e:14:f1:31:79:70:56:
2f:97:7a:27:09:c4:b9:57:eb:35:dd:ee:f2:36:93:
e1:a5:ca:3c:dc:cf:7e:8f:df:c9:87:ef:16:ca:b3:
a9:3a:ff:af:57:39:82:29:69:18:7a:e3:12:a7:33:
00:13:8a:a3:d1:67:63:d3:3f:31:18:74:ce:a0:c4:
54:ae:72:50:cf:1a:79:5f:c6:fd:7c:04:aa:ab:8f:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DB:3A:D9:31:8C:C9:39:70:33:CB:D1:93:36:89:68:62:79:11:E9
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/Fds62TGMyTlwM8vRkzaJaGJ5Eek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.148.0-62.69.150.255
91.216.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:19:28:f8:fd:0d:97:9b:32:c0:58:3a:e5:ef:32:a9:79:02:
d0:fa:02:cc:0c:0a:ce:2f:7e:14:66:16:de:69:8a:82:0d:c6:
b8:8f:0a:64:18:88:b1:67:94:86:7a:a2:70:81:a3:75:93:10:
2b:d2:96:62:7e:df:10:b1:81:f9:38:75:a5:79:98:d3:16:e4:
e2:5a:1c:3f:2f:2e:85:f2:7d:0e:b4:d9:eb:0f:e5:33:00:62:
30:e9:cf:bc:6a:e1:06:67:b9:66:5c:e6:ea:e4:d7:ef:63:1d:
e8:c3:bb:b6:76:e2:5d:19:96:ed:73:eb:d2:aa:32:18:62:3f:
5e:83:00:25:47:05:ef:34:2f:83:3e:ab:42:c2:f1:d6:6e:67:
a2:39:47:17:a1:d6:06:ff:53:50:e5:fe:33:62:cc:74:7b:1a:
a4:6b:b7:10:c1:a8:1c:46:21:55:c6:50:93:e1:b9:ce:90:b9:
0d:9b:7b:0e:a5:6f:74:7e:ad:83:3a:7e:0e:96:3e:56:16:c7:
b2:1f:da:d4:e8:6b:85:e7:de:1f:9f:0d:aa:09:5e:c2:ae:5c:
de:4e:ea:63:e3:8a:23:3d:f7:fb:61:a0:9a:e9:51:42:cc:85:
d4:d0:d9:ef:3e:5d:9e:46:3c:a2:31:87:e3:ea:ff:27:8a:6b:
68:0f:f3:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:18 2025 by rpki-client