Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/FEB62enegK42pklHkojm9vjgl0s.roa
File: FEB62enegK42pklHkojm9vjgl0s.roa (raw, json)
Hash identifier: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=
Subject key identifier: 14:40:7A:D9:E9:DE:80:AE:36:A6:49:47:92:88:E6:F6:F8:E0:97:4B
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 0195D9459180ACE87465F9A4A533147CCD39
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/FEB62enegK42pklHkojm9vjgl0s.roa
Signing time: Thu 27 Mar 2025 20:22:49 +0000
ROA not before: Thu 27 Mar 2025 20:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11404
IP address blocks: 62.164.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:45:91:80:ac:e8:74:65:f9:a4:a5:33:14:7c:cd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Mar 27 20:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14407ad9e9de80ae36a649479288e6f6f8e0974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:ff:bd:a7:2c:8a:f2:0f:50:b3:1c:db:b7:
cc:1c:f8:d3:1a:82:c5:77:81:72:da:8d:8b:62:d0:
0b:b7:0e:e6:fc:07:69:45:e3:b3:7d:8b:66:53:44:
d7:46:d6:5c:79:b0:e3:a0:25:c6:96:8d:97:fd:e1:
1f:aa:33:5c:dd:0b:cc:0e:8e:64:1d:ea:1c:cb:34:
46:87:5d:a0:38:8e:44:ac:92:92:0c:e6:a5:cd:dc:
91:ce:87:d6:9c:c0:5b:d6:8e:c7:86:58:60:c2:84:
d6:d5:dd:2e:c7:db:9c:9e:f0:6a:21:6f:00:59:75:
7c:dc:90:5d:14:73:b6:1d:51:28:5d:a9:86:f2:42:
7c:65:f0:73:10:9a:02:73:c7:c8:9e:02:4d:2c:60:
79:c1:f7:e3:45:36:74:32:4e:c9:a9:48:0b:29:fa:
88:37:4d:b2:b4:55:7a:d6:ca:c0:3c:eb:88:77:a2:
12:57:1e:c3:ff:90:89:b0:90:f7:be:9e:50:b4:05:
14:ce:8c:cf:f5:bb:e6:12:ae:12:bf:a2:b8:81:8f:
e3:04:c5:89:4f:ed:58:5f:ae:65:ab:0c:1c:a3:aa:
81:d0:95:c7:99:c3:db:26:f9:30:2b:b4:ba:c3:e5:
34:dd:2b:71:45:03:c2:1c:9f:f7:99:c7:9e:27:87:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:7A:D9:E9:DE:80:AE:36:A6:49:47:92:88:E6:F6:F8:E0:97:4B
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/FEB62enegK42pklHkojm9vjgl0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.194.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bf:0f:f2:96:03:97:df:ef:a4:1f:1b:bb:44:89:93:bf:af:
5f:5a:8e:c1:06:bc:d7:5f:db:ab:a0:7b:0b:51:bd:d0:76:e0:
0c:9b:30:8e:f9:76:b3:94:d3:78:45:ca:8e:2c:9b:7a:24:74:
cb:68:12:33:b2:99:9c:6b:e9:08:8e:bc:6c:fe:c7:ab:69:94:
b4:53:92:93:73:48:88:33:54:d9:cf:fc:b4:4f:8e:23:dd:44:
0c:70:22:d2:19:74:c2:1f:c1:dc:e6:41:f2:a3:29:1e:07:69:
e4:5a:11:56:26:17:43:ef:e7:76:af:39:46:b9:c9:0b:c9:b7:
dc:a1:bf:58:ab:d3:d9:31:9d:3a:bb:e0:3f:50:16:30:0c:d5:
38:b9:d4:58:2c:7c:29:80:c3:82:46:cb:fe:6e:dd:2e:80:fe:
0e:2a:e8:9a:bf:bc:ba:fc:4c:74:d9:a4:1b:65:27:25:f3:61:
c8:62:c6:58:e4:46:0e:9f:d4:ec:26:29:fb:9e:d7:f7:f6:db:
c3:72:54:52:c4:9c:54:bf:d4:07:1d:c8:7d:2f:a6:2c:74:d9:
83:3e:4d:ef:52:59:d5:2a:57:bc:93:3c:55:f8:c1:83:26:6e:
cb:6f:56:09:7d:d8:0a:33:e4:e0:13:e3:4c:59:ba:b5:ed:73:
d3:b2:88:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:49 2025 by rpki-client