Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/xcVwQHE7lHJ1eVOFxbJD9bEo2lc.roa
File: xcVwQHE7lHJ1eVOFxbJD9bEo2lc.roa (raw, json)
Hash identifier: Q6nDsBx7wQDjrwGn5dxNXHTI7vF27V8jQAMyi0lTMcY=
Subject key identifier: C5:C5:70:40:71:3B:94:72:75:79:53:85:C5:B2:43:F5:B1:28:DA:57
Certificate issuer: /CN=66423285998e8c1fc3cf34714d6415b5aba9f093
Certificate serial: 08CBD5
Authority key identifier: 66:42:32:85:99:8E:8C:1F:C3:CF:34:71:4D:64:15:B5:AB:A9:F0:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkIyhZmOjB_DzzRxTWQVtaup8JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/xcVwQHE7lHJ1eVOFxbJD9bEo2lc.roa
Signing time: Thu 27 Jan 2022 09:26:27 +0000
ROA not before: Thu 27 Jan 2022 09:26:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 62.68.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576469 (0x8cbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66423285998e8c1fc3cf34714d6415b5aba9f093
Validity
Not Before: Jan 27 09:26:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5c57040713b947275795385c5b243f5b128da57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:2e:fd:45:ea:93:95:bb:b7:df:76:34:02:
b5:eb:a0:77:fc:3c:0d:cd:3e:0c:7d:b4:a4:99:2b:
cb:57:f9:cb:03:05:d5:4e:8b:bf:dd:82:22:08:24:
80:ec:44:20:c8:7b:08:26:11:8d:86:31:70:c2:c3:
f3:4b:ce:83:71:b8:49:d8:08:62:52:85:51:f3:5d:
69:c8:b7:fb:c5:f4:06:4a:68:be:91:d8:cd:ef:3b:
9d:77:f1:49:da:38:4c:fa:ed:1e:ae:3d:a7:76:4f:
26:cf:03:d9:37:c9:f9:14:6a:bb:7c:58:e6:b6:b5:
47:31:0e:c0:cb:65:29:ca:75:3f:4f:41:be:95:91:
b2:24:ec:f5:2b:11:56:90:52:81:45:d3:cb:f8:08:
c7:57:ab:e6:77:27:59:1e:96:bf:e6:77:12:57:8f:
b4:57:97:d5:b7:b8:99:c5:1d:07:be:e3:98:c9:2b:
7b:64:64:f1:95:0b:ce:0f:ae:30:01:72:80:40:94:
f9:8d:5d:86:28:5e:b9:b5:c7:3e:06:aa:04:ee:9e:
b3:18:3b:82:c9:2a:77:9c:59:29:98:0f:f2:33:b0:
6f:81:38:c1:a3:aa:8c:c2:c8:07:64:8c:7d:3f:d6:
9e:ad:4b:23:82:45:9e:6b:bb:e3:10:9a:64:fb:f0:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C5:70:40:71:3B:94:72:75:79:53:85:C5:B2:43:F5:B1:28:DA:57
X509v3 Authority Key Identifier:
keyid:66:42:32:85:99:8E:8C:1F:C3:CF:34:71:4D:64:15:B5:AB:A9:F0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkIyhZmOjB_DzzRxTWQVtaup8JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/xcVwQHE7lHJ1eVOFxbJD9bEo2lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/ZkIyhZmOjB_DzzRxTWQVtaup8JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.86.0/24
Signature Algorithm: sha256WithRSAEncryption
96:28:24:26:47:b5:56:db:54:99:74:dd:72:ad:b0:99:db:40:
ee:a9:49:bb:d8:f1:46:5f:54:fb:1e:a6:de:29:93:b1:43:a0:
60:11:fe:d7:5b:b7:b2:85:2c:f8:6f:3e:cf:a2:b5:10:d6:3f:
38:c7:61:0e:0a:18:97:c2:16:f5:27:7f:79:d0:11:eb:60:d0:
cd:c2:87:f6:01:de:ad:07:b7:6a:d9:04:21:62:22:07:4a:e2:
e9:d8:96:7f:71:22:0a:28:df:da:11:e2:cd:58:7e:32:a0:2a:
2f:3f:10:6a:da:2c:66:ad:57:e9:b7:7b:9d:8c:2d:73:9b:f8:
eb:38:52:5c:c6:86:3d:5e:60:99:d9:0b:97:0f:a1:c8:44:c8:
a5:ee:64:0a:7f:1b:be:d6:71:2e:f9:2e:81:dc:87:a8:e4:64:
73:d1:ea:39:80:ef:01:d6:b1:96:5a:16:b0:79:8f:13:70:36:
06:50:b7:44:ad:2d:6f:73:04:89:fb:80:a7:64:c2:0e:3b:b5:
c2:ec:30:91:07:17:00:bb:c8:40:fd:78:54:f6:9e:be:7e:3c:
57:9e:86:02:e3:fc:86:b0:e1:4b:94:37:98:03:a6:9f:2f:ee:
3d:26:a5:0e:52:52:2b:19:d4:54:b4:96:a5:12:41:3a:f2:8e:
41:37:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:02 2025 by rpki-client