Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa
File: DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa (raw, json)
Hash identifier: wBdx6PRDwqiRs1k8IOdYm4GWe7EZE4vtyKYESIsAUKo=
Subject key identifier: 0D:16:36:BB:74:D4:4B:EC:09:43:CC:5A:F2:B8:D1:4A:9A:1A:A5:EA
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 019424B3D729716846F3C7198DB712B49AF8
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 62.108.88.0/22 maxlen: 24
62.108.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d7:29:71:68:46:f3:c7:19:8d:b7:12:b4:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d1636bb74d44bec0943cc5af2b8d14a9a1aa5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:a0:79:52:0c:e3:d9:a2:30:5a:d8:eb:2e:
5c:73:89:90:a6:64:9f:ce:9f:51:d7:36:11:3f:83:
c8:25:30:a8:b5:b5:d5:8a:de:c5:e3:3d:a8:12:15:
de:73:5f:36:fd:c0:21:fd:e9:e9:5b:0c:a7:b7:0c:
d3:7f:8d:73:37:df:c0:37:cb:66:1f:7f:fd:a1:63:
73:7c:2f:75:27:d7:29:5f:21:a8:ce:f5:5c:6a:71:
4c:8c:91:c9:7e:ff:39:4a:fe:84:70:c2:d6:47:30:
e2:cc:9d:2c:39:42:0d:e4:1a:0f:11:20:22:9f:7c:
22:12:25:40:34:d2:e4:62:34:ca:0e:94:bb:f3:32:
a7:78:88:b0:13:81:24:45:c1:41:8d:85:95:ff:00:
bb:73:09:61:50:44:fa:cb:53:6a:e3:02:4d:a5:79:
b7:8f:81:af:eb:3b:b7:25:bd:00:f5:a7:20:5c:ad:
d7:27:7f:b0:bb:52:93:bb:21:3e:17:c4:c9:25:b8:
63:31:c7:99:5f:77:ef:c3:b2:f5:3b:80:40:cd:76:
1a:58:fe:c5:55:d0:a2:25:ef:65:19:b8:2b:ed:90:
a9:1c:68:e9:dd:5b:3e:00:9d:e0:c5:a5:59:d1:35:
dd:11:30:ec:70:5a:fa:bf:ba:65:6d:e9:3e:77:fc:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:16:36:BB:74:D4:4B:EC:09:43:CC:5A:F2:B8:D1:4A:9A:1A:A5:EA
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
76:91:9e:6a:22:d4:d8:ff:db:84:e8:90:2d:c1:27:26:c8:35:
29:7e:25:a4:52:c3:cd:c9:f7:10:d2:53:ee:cc:3c:12:5f:69:
66:de:60:59:2b:8e:45:67:4f:c9:dc:54:c6:81:18:48:7e:3d:
87:13:d4:cd:8d:7a:81:c6:6c:ff:3f:2b:2f:1e:44:ab:89:96:
1c:10:9d:a6:a0:28:1e:36:cb:51:3d:fb:af:59:f3:c1:fd:1f:
41:28:c3:24:35:e4:dc:f9:f0:d2:af:8e:cb:cf:47:db:4a:67:
e6:93:2b:dc:f7:28:84:b6:b5:72:a3:8d:b6:97:be:3e:9d:f9:
3d:03:e1:7d:ed:e8:da:6b:d2:8a:ff:46:14:e2:3b:6d:67:01:
3e:70:c9:f2:c9:db:e8:68:19:28:e9:79:4d:7d:54:50:74:7f:
a0:3d:0e:b0:81:ec:ca:91:ea:15:80:dd:a8:40:86:f4:3e:34:
15:33:fd:5f:d0:36:44:26:51:89:b0:12:5b:10:45:32:d6:6f:
a1:52:9e:78:3f:07:58:64:6f:2e:ef:52:62:03:1f:d6:02:df:
e4:c8:a5:8b:51:3a:c1:a8:50:78:f6:5f:e0:1e:9c:1c:ae:4c:
cd:24:4f:4e:6a:bc:a9:76:4d:43:f9:c6:33:7f:01:64:36:6a:
b5:97:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:15 2025 by rpki-client