Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/wi1MLfuEyzFjR93uRQVD8aXDwlQ.roa
File: wi1MLfuEyzFjR93uRQVD8aXDwlQ.roa (raw, json)
Hash identifier: zZeJjhMUsJ+TL6sz6mZLIwoBvlvbWMlQr62Jsp8O8UQ=
Subject key identifier: C2:2D:4C:2D:FB:84:CB:31:63:47:DD:EE:45:05:43:F1:A5:C3:C2:54
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0186DF5A70DE4AB8F1D9BB9DB0DC3EFF486B
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/wi1MLfuEyzFjR93uRQVD8aXDwlQ.roa
Signing time: Tue 14 Mar 2023 09:01:31 +0000
ROA not before: Tue 14 Mar 2023 09:01:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28843
IP address blocks: 62.205.192.0/20 maxlen: 20
62.205.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:5a:70:de:4a:b8:f1:d9:bb:9d:b0:dc:3e:ff:48:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Mar 14 09:01:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c22d4c2dfb84cb316347ddee450543f1a5c3c254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:9c:fe:f9:56:3a:51:9b:9f:8b:38:ea:e2:
7b:51:75:ab:ce:49:92:f7:89:ce:e6:83:f4:cf:06:
54:93:5d:c5:83:42:a9:c9:8a:87:df:6c:a9:2f:aa:
7b:c2:42:e1:77:f8:55:a2:91:10:80:a1:71:d3:f0:
29:1f:0c:66:ff:ac:61:75:42:31:21:0c:43:59:6a:
7e:76:ea:d6:59:97:21:c5:46:b9:6e:9d:b8:48:cf:
fa:bc:b9:4a:70:02:9a:0c:31:b0:9b:5c:88:3c:42:
94:a8:5d:01:46:30:e4:9e:d9:23:93:82:bb:17:d0:
64:63:8d:cf:e8:3a:73:40:04:e2:0b:e9:ef:a4:29:
75:81:e5:bd:c6:d6:50:df:2e:e5:cf:74:e7:4c:0c:
ad:4c:d4:03:c6:5d:9e:7f:75:d3:12:44:d5:ef:91:
9e:ef:3e:0d:ec:e7:3b:0c:7a:73:d0:a6:b3:94:d3:
d7:52:d6:38:83:30:8c:dc:d0:b1:18:a9:a5:df:8a:
64:e8:33:d0:cb:e3:26:7a:e6:ac:a3:ba:67:0c:d7:
94:b7:56:b2:b6:99:1a:58:67:15:84:1f:15:0f:f9:
8b:a9:95:d0:a0:9a:d0:f6:54:d4:a0:f3:eb:42:63:
86:a3:1a:c0:fa:34:ac:20:f2:9c:45:c5:d0:87:bd:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2D:4C:2D:FB:84:CB:31:63:47:DD:EE:45:05:43:F1:A5:C3:C2:54
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/wi1MLfuEyzFjR93uRQVD8aXDwlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.192.0/18
Signature Algorithm: sha256WithRSAEncryption
59:ad:07:6e:a6:21:db:fc:d7:b8:72:5a:56:17:51:5f:d0:c0:
ef:76:bb:41:97:a7:9e:b0:21:ee:ff:f4:e1:09:53:e4:d1:64:
a8:2e:9c:3a:f3:a8:d3:8f:93:d4:50:25:cd:a0:0c:1b:21:a0:
0b:44:dd:f8:24:36:fd:96:8b:de:17:52:01:1a:c4:60:44:57:
7c:ed:7a:05:b7:c1:c9:18:ab:72:1d:21:a4:9f:a0:3a:f2:35:
e0:f0:f6:4a:00:a5:32:9d:01:c1:32:fd:e2:a9:a6:81:da:a8:
fb:e7:1f:e9:47:2b:09:75:7f:1b:84:73:b0:e2:ab:0e:a5:8e:
38:d2:25:b4:26:d6:23:f3:0e:62:8d:c7:ee:ed:33:d1:34:11:
f8:12:96:03:55:4c:62:ec:70:06:be:ed:f9:ad:c0:85:93:22:
3a:09:9e:24:32:2a:4d:f2:03:1a:f7:b3:94:b7:71:8b:f2:28:
82:a2:80:23:d2:f2:d1:0a:cb:98:1a:71:de:76:85:a7:b1:a1:
f8:ca:e1:88:da:a5:b6:1f:77:c4:8e:93:bf:4a:cb:36:d2:58:
af:b5:a2:40:c4:9e:c7:e7:62:1b:4c:be:be:25:35:ae:f4:15:
3c:7f:fc:2a:af:d8:bc:b3:21:65:3c:cc:08:61:54:31:82:6d:
d4:77:a0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:39:55 2025 by rpki-client