Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dmM5V8QYm_TwFmu-64IReiscZas.roa
File: dmM5V8QYm_TwFmu-64IReiscZas.roa (raw, json)
Hash identifier: jSEF2Yen/ueyg8/T39dH/LYQ+CkwREtaPkSOqmnIC2Y=
Subject key identifier: 76:63:39:57:C4:18:9B:F4:F0:16:6B:BE:EB:82:11:7A:2B:1C:65:AB
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23DEDCE3BE0E4D5FE3B5F5DC1D1E7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dmM5V8QYm_TwFmu-64IReiscZas.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63018
IP address blocks: 45.128.59.0/24 maxlen: 24
92.118.235.0/24 maxlen: 24
171.22.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3d:ed:ce:3b:e0:e4:d5:fe:3b:5f:5d:c1:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76633957c4189bf4f0166bbeeb82117a2b1c65ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:25:72:ae:1b:d1:66:5a:54:5c:82:48:3d:
df:1c:b4:f1:ce:59:a9:50:8a:57:f6:63:ea:9a:24:
10:70:65:c9:b8:47:71:92:60:58:dc:d0:79:77:ea:
ff:b8:a6:01:6d:49:9f:47:f5:b9:3f:16:65:65:7a:
f9:4f:fe:2e:27:7e:13:e6:8a:27:38:0b:63:e9:61:
8d:df:e3:20:e3:8f:90:06:0f:b3:e1:96:6d:d5:ac:
36:0c:bf:5b:79:ec:f8:fe:83:7e:b6:eb:5a:81:c3:
19:68:61:77:ec:05:51:7b:eb:0f:13:ac:aa:ea:c9:
5e:85:33:97:d4:f6:d5:18:57:22:48:d9:55:d9:e5:
1f:4e:a9:fa:41:a2:68:21:44:48:00:81:c1:87:a7:
36:7b:eb:48:34:f5:54:63:79:de:b3:c4:eb:98:e2:
43:87:2b:cf:e3:ab:ee:87:bc:fc:31:b8:26:f6:1d:
2e:34:a4:02:1b:dd:e0:0b:8f:55:b2:e5:31:c6:6f:
92:82:ea:4c:1e:59:8f:4c:c6:b4:76:e5:ee:2b:af:
e3:59:2e:2d:6b:71:f8:1a:7c:19:89:eb:53:8a:e8:
09:41:fa:d9:76:10:2a:70:a0:26:c9:8b:96:95:cd:
4f:da:bd:d5:06:6e:6a:af:52:7f:5b:4c:b7:93:21:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:63:39:57:C4:18:9B:F4:F0:16:6B:BE:EB:82:11:7A:2B:1C:65:AB
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dmM5V8QYm_TwFmu-64IReiscZas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.59.0/24
92.118.235.0/24
171.22.108.0/24
Signature Algorithm: sha256WithRSAEncryption
09:aa:41:1b:3d:77:0a:7b:fa:86:f6:9f:e2:0d:f6:33:53:41:
e4:eb:00:be:04:db:8b:23:99:1b:36:40:40:a2:4f:5d:d5:57:
d0:37:f2:e6:14:3b:bd:54:ab:8c:6c:a1:9b:bd:b9:53:8b:f7:
f7:95:7a:7d:bd:2f:c4:8c:66:6d:9c:ee:4c:84:40:36:62:55:
b3:f3:3c:10:4a:99:71:62:09:2a:e3:14:71:f2:8c:3e:4a:d0:
73:82:90:86:0d:52:31:87:e5:ae:19:6c:dd:a0:57:97:6a:32:
f2:52:24:01:b5:0f:dc:3d:22:ea:61:cf:eb:ad:bf:75:50:0a:
67:aa:e1:39:6a:44:12:e2:db:72:e2:40:c6:a1:9a:93:07:a1:
5b:3f:73:60:37:e5:98:c4:6c:02:00:1a:f6:de:7f:a3:ac:b5:
43:6e:a8:08:7f:16:1e:59:75:93:c3:1f:bb:7b:a6:ee:71:09:
64:1a:a6:47:f2:11:fb:11:36:75:0a:ec:5e:0f:ba:ed:1d:dc:
bf:75:de:08:88:c4:ef:3a:fe:92:4f:22:96:aa:40:d0:26:9f:
66:50:4f:01:c8:14:19:3b:7d:20:60:aa:46:5d:ce:43:51:b2:
68:85:21:72:85:ec:4e:fd:4b:cf:5f:d9:07:c0:b4:df:1c:62:
41:e0:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:37:37 2025 by rpki-client