Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/NeQGc84ykYKX-hhW1N653d5MHpk.roa
File: NeQGc84ykYKX-hhW1N653d5MHpk.roa (raw, json)
Hash identifier: vGFnBjN/2ztt9ba6km9iFQtUlGYUHCu/ylRWJaSFFOM=
Subject key identifier: 35:E4:06:73:CE:32:91:82:97:FA:18:56:D4:DE:B9:DD:DE:4C:1E:99
Certificate issuer: /CN=815f961a7373170da35dbdfc88f510c7d45a60a0
Certificate serial: 018CC5DCF72BD4F699423E374779E38AD796
Authority key identifier: 81:5F:96:1A:73:73:17:0D:A3:5D:BD:FC:88:F5:10:C7:D4:5A:60:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV-WGnNzFw2jXb38iPUQx9RaYKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/NeQGc84ykYKX-hhW1N653d5MHpk.roa
Signing time: Mon 01 Jan 2024 16:30:41 +0000
ROA not before: Mon 01 Jan 2024 16:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f7:2b:d4:f6:99:42:3e:37:47:79:e3:8a:d7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815f961a7373170da35dbdfc88f510c7d45a60a0
Validity
Not Before: Jan 1 16:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35e40673ce32918297fa1856d4deb9ddde4c1e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:d5:ed:5b:52:64:5a:62:98:40:dc:bc:c2:
21:9f:6f:ac:c6:f4:48:d5:ef:4e:ac:8d:d6:a9:a2:
e4:2f:57:c3:97:22:13:23:43:bf:c0:43:62:09:2f:
e0:3b:e5:fe:4c:4c:e7:65:c9:06:77:10:25:4f:1b:
14:59:07:55:76:e1:13:6d:78:72:2d:5a:3a:35:b6:
52:41:11:a2:bd:95:97:06:06:72:d4:c6:02:24:1f:
48:43:aa:7d:17:cb:7c:ea:62:c5:76:d6:bc:f0:7a:
28:9d:22:8f:28:59:3b:24:2b:6b:29:eb:e7:79:20:
16:5d:04:a3:70:db:ba:a8:9c:a6:96:ed:b0:9d:4b:
c2:c8:58:07:5a:c9:9b:72:7c:e3:f9:9e:c6:3f:d2:
1d:83:dc:54:be:8e:76:1a:ff:12:2f:b7:a2:b8:b9:
72:dc:23:11:30:f0:02:c0:eb:e2:60:57:39:57:cb:
6f:f7:d0:91:5e:f9:86:33:cf:50:9f:96:be:28:4b:
c4:0b:78:9b:28:73:cd:16:46:40:21:36:e8:7c:40:
58:26:af:f3:22:e8:78:4d:b7:33:b6:db:03:61:64:
62:8f:ef:98:6f:7b:37:a1:4e:1e:44:e8:2c:97:7c:
11:8d:5d:ff:18:ed:e5:67:b7:e9:fd:fc:2e:3a:52:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:06:73:CE:32:91:82:97:FA:18:56:D4:DE:B9:DD:DE:4C:1E:99
X509v3 Authority Key Identifier:
keyid:81:5F:96:1A:73:73:17:0D:A3:5D:BD:FC:88:F5:10:C7:D4:5A:60:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV-WGnNzFw2jXb38iPUQx9RaYKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/NeQGc84ykYKX-hhW1N653d5MHpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/gV-WGnNzFw2jXb38iPUQx9RaYKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:18:28:9e:6b:37:b9:b4:ab:bb:7c:5a:78:bd:ee:6e:4f:66:
a3:cb:b2:d0:06:e9:82:64:6e:20:46:98:08:04:e3:a2:b4:da:
91:83:8f:ee:34:28:37:e7:ac:ab:2b:6a:54:93:5f:4a:0d:bb:
8c:4f:ac:56:3c:f4:1c:38:c2:58:7a:94:7c:a5:84:01:62:90:
0d:e2:20:d5:20:0e:53:58:57:db:25:4c:51:56:c3:83:7b:d8:
5a:e5:91:4a:70:da:a9:f4:63:83:06:ff:f3:d1:5e:60:14:f7:
56:5f:99:f5:e7:49:da:f3:22:c5:f7:09:bc:c0:f4:c9:73:ff:
64:c4:8a:28:01:86:58:85:db:22:43:c5:f3:2b:f0:8b:fc:2f:
08:33:78:4e:0d:d5:c5:be:3f:c7:ff:89:a4:a1:3f:c1:5e:9a:
8e:bc:59:cb:b0:6f:45:23:ba:1f:13:1f:78:b9:38:9d:20:51:
c9:43:c3:1b:b9:20:ab:26:bf:60:ec:48:13:19:62:ce:7d:3b:
ba:b8:7d:a0:57:fd:1a:a8:7a:04:b5:a3:ed:83:fd:84:b5:ce:
2a:22:25:fe:b1:a8:93:2f:2d:d6:1c:a5:67:4c:35:06:37:ca:
57:b6:92:68:58:86:b6:53:52:94:38:1f:03:d7:8e:88:90:21:
4c:8c:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:26 2025 by rpki-client