Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/A_1tj4wVOePrky2QZ3Vcci8QqKA.roa
File: A_1tj4wVOePrky2QZ3Vcci8QqKA.roa (raw, json)
Hash identifier: yJGV1VVD6+9OyBcqDsuFyzbX2GfB+1TMGo0ek6wnThY=
Subject key identifier: 03:FD:6D:8F:8C:15:39:E3:EB:93:2D:90:67:75:5C:72:2F:10:A8:A0
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 01919A41B3D9DCBA71A8E5391A5DC14631DE
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/A_1tj4wVOePrky2QZ3Vcci8QqKA.roa
Signing time: Wed 28 Aug 2024 18:31:22 +0000
ROA not before: Wed 28 Aug 2024 18:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 62.204.37.0/24 maxlen: 24
2a13:9300::/29 maxlen: 29
2a13:a700::/29 maxlen: 29
2a13:fe00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9a:41:b3:d9:dc:ba:71:a8:e5:39:1a:5d:c1:46:31:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Aug 28 18:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03fd6d8f8c1539e3eb932d9067755c722f10a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:7b:17:75:77:3a:6c:da:88:5c:9c:0e:af:
15:f6:94:dd:0a:2a:0b:aa:82:e3:30:c9:d7:2c:1e:
cc:d4:87:78:f3:25:80:03:9d:c3:b9:f9:db:51:12:
06:ef:ee:d7:a1:2d:56:a0:31:55:f3:bb:83:21:94:
67:b7:c2:70:d2:3e:53:ff:19:b8:76:34:ac:13:f2:
91:10:10:e4:53:73:9b:4b:9b:77:72:53:25:dd:38:
8d:2d:61:9b:e4:85:70:f9:e9:8b:3f:91:c1:91:56:
e4:87:40:d3:cf:b2:95:38:dc:f2:e4:9d:0e:3a:0b:
e9:46:8b:da:4f:9b:ca:b1:81:44:4a:a6:ec:92:fd:
39:75:29:b6:d0:19:26:7a:97:bb:bf:27:37:81:45:
e2:f8:71:f0:f7:2c:65:2f:18:8b:5f:3a:09:96:c0:
cf:39:77:cc:7c:80:71:08:1a:d0:22:57:47:90:8c:
8f:ba:ce:b9:77:dd:d9:f5:c5:e3:4d:ef:38:de:f1:
9f:92:33:ea:d5:12:6c:f6:95:f2:40:27:4f:72:55:
ea:12:af:82:e7:c0:3b:94:18:20:5c:01:6a:3f:c8:
1d:11:b6:7d:50:8c:96:64:5f:95:26:4f:cd:6b:bb:
b5:20:ff:8a:27:f0:22:68:b8:c4:15:56:64:86:aa:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FD:6D:8F:8C:15:39:E3:EB:93:2D:90:67:75:5C:72:2F:10:A8:A0
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/A_1tj4wVOePrky2QZ3Vcci8QqKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
IPv6:
2a13:9300::/29
2a13:a700::/29
2a13:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
1d:da:f1:60:0e:ba:b0:aa:89:d1:85:4b:c0:04:7a:35:6a:38:
4d:0d:2a:de:14:ba:27:cf:32:ee:59:22:59:b1:ea:1c:89:6e:
70:08:99:98:9a:27:30:7d:c2:c7:35:de:5f:86:35:48:85:5c:
be:98:e1:9c:2f:17:08:aa:fa:e8:96:ea:3b:9c:1e:2f:19:43:
41:4f:26:f3:a8:38:3f:fb:1b:db:92:65:ed:a9:46:59:6b:4d:
46:a3:ab:9a:cf:90:0d:f4:eb:cc:43:08:6d:65:9a:57:98:24:
0d:78:99:12:9e:a4:66:32:3e:5d:ef:8d:39:73:29:59:38:d6:
1f:79:7c:f2:5f:ce:e2:58:fc:3c:20:ba:58:f5:25:bd:ad:58:
05:1c:90:98:f2:47:b9:54:42:05:66:ed:2e:1a:a1:f9:64:9d:
4b:2b:f4:7c:2b:94:32:0d:dd:45:94:93:b8:2c:c9:11:19:49:
e1:e4:53:8e:9e:49:9c:fb:2d:32:a2:53:6e:24:c5:8b:fd:76:
7c:32:9f:8a:a4:70:22:9a:a1:f2:49:9e:29:ff:d9:78:27:a2:
b7:d7:bb:eb:98:d5:e7:50:40:e6:16:47:2e:ed:aa:19:41:30:
c5:18:de:e4:95:20:96:aa:7f:e7:00:3b:85:72:f0:f0:7e:37:
a6:e3:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:00:54 2025 by rpki-client