Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/uaqjjhOSvJKLrCRb924fHu7tKv0.roa
File: uaqjjhOSvJKLrCRb924fHu7tKv0.roa (raw, json)
Hash identifier: qzfQRS/VrHIvhTh2/NIR920d/ARAiFhH1JdY8s95FQA=
Subject key identifier: B9:AA:A3:8E:13:92:BC:92:8B:AC:24:5B:F7:6E:1F:1E:EE:ED:2A:FD
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 0187937B4CEBEFBE67AA0C8F093ACB4289A8
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/uaqjjhOSvJKLrCRb924fHu7tKv0.roa
Signing time: Tue 18 Apr 2023 08:29:04 +0000
ROA not before: Tue 18 Apr 2023 08:29:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212865
IP address blocks: 62.65.141.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.142.0/24 maxlen: 24
62.65.143.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
62.65.158.0/24 maxlen: 24
94.78.2.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:7b:4c:eb:ef:be:67:aa:0c:8f:09:3a:cb:42:89:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Apr 18 08:29:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9aaa38e1392bc928bac245bf76e1f1eeeed2afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:7e:fd:e8:e3:54:38:d6:d9:b4:83:d1:ee:
f6:a0:fa:a4:01:a1:d0:7c:f4:fe:f9:bc:0c:be:5d:
6d:64:fd:76:e5:ed:98:66:1f:70:86:54:11:67:4e:
b5:90:32:0e:1c:dc:eb:a8:32:d3:74:d7:2b:97:c2:
68:13:95:b9:ae:62:bd:da:b6:9c:4b:fd:3a:b0:87:
de:0e:1f:94:5e:2f:e3:13:85:0b:f3:5e:a4:9b:73:
95:65:0e:7e:95:f0:d5:e6:7a:a6:46:fc:da:dc:4b:
e0:a3:d1:37:f6:d9:c5:a4:b7:e9:72:e2:be:35:53:
5f:dd:d7:8f:b8:56:c1:98:ef:8d:e2:13:64:ff:b3:
36:96:c8:aa:f4:7c:fa:cb:c8:b1:1b:14:90:eb:c8:
40:4d:b0:65:9d:30:c0:6e:ff:85:d1:07:f8:ad:6f:
d3:7f:51:2e:e6:7e:d4:fa:a5:f0:fd:f5:73:db:4f:
d7:66:8b:9a:17:1c:bf:88:59:56:01:74:53:ee:ca:
eb:f3:78:2b:d1:92:9d:21:76:0d:6d:6e:3c:55:92:
58:15:ee:a3:ca:02:f4:4f:85:79:e6:39:5c:28:99:
b7:19:6d:02:3f:76:26:1c:93:b5:4c:a7:ee:f2:c8:
3e:f9:a3:5d:18:2f:49:e7:70:fc:93:33:3a:d1:f6:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:A3:8E:13:92:BC:92:8B:AC:24:5B:F7:6E:1F:1E:EE:ED:2A:FD
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/uaqjjhOSvJKLrCRb924fHu7tKv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.141.0-62.65.151.255
62.65.153.0-62.65.158.255
94.78.2.0/23
Signature Algorithm: sha256WithRSAEncryption
76:a2:2f:f7:16:2f:0c:b9:8f:46:df:72:32:4b:fc:41:b1:6b:
8e:ae:48:8c:13:01:03:e5:68:96:54:f5:a9:d4:1d:2c:a7:51:
41:a4:3a:09:e1:5c:22:88:f1:27:1c:2d:64:ef:de:1e:e4:6d:
e7:73:4d:08:83:0e:9f:9e:0e:84:de:c2:7e:4c:25:25:0a:e3:
27:9b:28:74:95:01:13:5f:28:68:9f:49:9b:43:92:00:9b:7c:
74:c8:b7:b2:f8:10:5f:55:8e:93:48:ab:3f:6f:52:9f:05:df:
0e:6b:24:b4:12:5a:6e:81:d7:66:d8:df:b2:ac:b3:38:f0:d4:
4b:29:7d:b0:3b:84:01:c0:7e:87:cc:52:90:bb:b2:c1:a2:be:
44:bd:10:79:9d:f8:ac:e7:81:c7:12:b4:dd:2c:87:a4:2f:fb:
08:f3:07:65:82:fc:4a:13:1c:0a:5c:7e:ad:57:3c:e7:8e:17:
25:a7:91:dc:1e:2e:38:5e:78:34:03:fc:d5:43:7b:54:f3:02:
9b:de:12:27:bc:c5:31:45:86:6d:26:37:82:97:57:bd:b8:c8:
1d:09:24:84:c5:5d:f4:f5:e5:bb:bd:ea:da:b5:ef:b0:ab:c9:
49:1e:1c:e4:3a:90:52:86:1e:e2:4c:f9:41:36:6b:cc:a4:49:
58:9a:63:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:29 2025 by rpki-client