Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa
File: yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa (raw, json)
Hash identifier: Fg4ccth+vYXV/2sgHnZqs8EKhJY1bCZHVgLjSsbq1kc=
Subject key identifier: C9:53:AF:FC:ED:C5:E2:52:82:F8:59:E6:E5:E0:FC:40:E5:7A:00:A0
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194F91186826800FB880680CCC888215EC8
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa
Signing time: Wed 12 Feb 2025 07:31:02 +0000
ROA not before: Wed 12 Feb 2025 07:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:11:86:82:68:00:fb:88:06:80:cc:c8:88:21:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 12 07:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c953affcedc5e25282f859e6e5e0fc40e57a00a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:4d:1c:35:98:07:16:c4:8e:51:51:f6:24:
2e:4d:5b:a3:31:d4:43:2a:c2:19:f9:e2:d6:c0:7f:
c6:64:6a:85:b1:03:3a:c5:00:00:3a:cd:16:b1:e2:
b2:b4:9e:fe:fa:60:22:d2:84:6c:c0:45:cc:6a:79:
69:e4:3e:6e:17:71:84:6d:2a:d1:0b:c9:2a:37:81:
69:85:a3:b1:d9:e6:9c:e9:6b:59:4a:ef:91:a1:8e:
1d:b9:25:4b:bc:32:88:39:c7:c9:60:da:7c:3b:b7:
0d:77:c6:69:20:3e:c2:7a:26:b0:66:fa:d4:c6:9d:
58:ff:e5:04:2d:f8:7c:3c:cf:1f:9d:ab:af:bb:c1:
73:85:04:38:8f:f2:c2:0c:48:91:15:03:dc:18:b6:
07:2d:08:65:dc:d8:6f:2f:6d:de:99:f6:82:f9:44:
8c:5b:d6:4a:0a:75:81:19:4a:5e:07:82:bc:cb:f0:
d6:6c:55:e0:a7:fd:4b:f6:d9:ca:61:77:06:73:f2:
e8:a5:20:d6:40:84:23:e7:6b:71:90:25:7d:9c:3f:
f1:df:41:aa:ae:a5:a7:4d:16:9e:f5:05:dd:e8:65:
04:ea:67:fd:69:2e:83:50:b5:a7:53:8f:f0:7d:4e:
a4:8b:be:29:6b:92:02:d7:4c:de:78:a1:e3:3e:8d:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:53:AF:FC:ED:C5:E2:52:82:F8:59:E6:E5:E0:FC:40:E5:7A:00:A0
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/yVOv_O3F4lKC-Fnm5eD8QOV6AKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c6:ae:fc:de:21:4f:12:77:fc:9e:21:d3:c6:bf:04:ac:d9:
c0:e7:f6:3a:4e:2a:76:c2:e0:90:c1:49:7f:f8:46:6d:3b:88:
6e:45:ad:f0:3e:74:0f:77:10:22:37:27:23:3e:01:bd:36:20:
7c:21:14:1e:0e:f5:82:3f:61:3c:4f:02:ad:3e:9d:22:41:c3:
92:e6:f6:da:ed:20:10:4c:1f:8b:b1:68:f4:b0:80:be:e4:75:
35:7d:cf:63:10:14:4e:e0:f7:1a:a5:14:8c:ee:ac:0a:67:e2:
ac:c4:38:6b:89:25:6c:df:7c:24:53:30:20:68:b6:77:d3:9e:
d1:61:ad:1a:b2:29:47:56:30:11:16:20:4e:9c:37:3c:36:6a:
a5:19:df:c0:39:f8:24:fa:7b:d7:9e:bd:a1:78:df:1f:c5:8c:
9a:aa:22:7e:da:6d:3f:6e:67:7e:7f:49:c5:f5:56:3d:d1:26:
a0:b3:68:f3:93:6d:eb:b1:88:b1:95:b8:4a:e1:5f:63:4d:46:
12:f3:fa:c5:98:e9:70:6e:52:68:c2:70:89:1c:2c:71:9e:76:
6c:5e:72:96:e8:31:eb:9c:08:45:3c:2b:b4:02:22:c0:e2:de:
06:ed:46:e1:3a:82:66:66:0a:55:36:41:8c:10:e5:c0:de:eb:
be:00:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:24:45 2025 by rpki-client