Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa
File: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (raw, json)
Hash identifier: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=
Subject key identifier: FA:E4:C1:08:B3:8A:EF:7A:C7:48:92:CE:95:44:3E:7A:9B:8B:A3:2F
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194658D12E46FDE08CDDBC4C272ABF6AE34
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa
Signing time: Tue 14 Jan 2025 16:02:11 +0000
ROA not before: Tue 14 Jan 2025 16:02:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 62.108.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:8d:12:e4:6f:de:08:cd:db:c4:c2:72:ab:f6:ae:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 14 16:02:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fae4c108b38aef7ac74892ce95443e7a9b8ba32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:1f:33:47:35:3a:e1:0d:d1:69:bf:a7:18:
60:50:a3:c0:bd:ae:28:5f:c1:07:17:dc:f2:7a:72:
cf:48:48:6a:e7:9d:6a:5c:ae:c9:6d:1b:24:30:8e:
0f:a1:ee:69:9c:5c:19:19:f9:b8:b2:20:a0:ee:ed:
90:de:7b:8d:9d:9b:d5:55:f9:a2:0c:13:93:bf:2c:
ff:0d:26:08:b2:85:7d:9a:4c:ec:84:0b:7c:87:e3:
c9:85:cc:6f:16:08:db:fa:67:17:61:56:41:ad:3d:
49:26:3d:93:1e:0c:34:86:5b:80:fb:ba:4f:b0:82:
96:81:b9:6d:8d:f2:d3:63:5a:ea:3a:ef:a2:80:e8:
1e:67:e3:18:04:9d:bd:1d:9a:39:9b:4e:cb:4f:64:
43:f7:72:e6:1f:81:64:35:6f:90:43:d0:05:b4:60:
0b:83:36:1c:2b:cc:01:e8:c9:ea:bb:44:0b:d2:f8:
ce:fd:95:b1:46:79:9c:de:7b:11:25:f9:c0:33:18:
26:40:40:24:37:de:39:dd:1e:13:29:5d:65:98:86:
fe:d1:96:fa:32:b4:a8:5e:92:6a:84:ca:f1:67:ee:
03:ac:fc:c5:7e:3e:8f:53:48:f8:a9:b9:5d:84:c8:
ba:9a:4f:8e:06:74:37:60:87:f7:33:45:2f:9a:c3:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:C1:08:B3:8A:EF:7A:C7:48:92:CE:95:44:3E:7A:9B:8B:A3:2F
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.34.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b4:9c:5f:24:94:50:de:d0:31:24:1d:14:ef:f8:f0:e7:b0:
a0:ae:97:eb:5a:c7:f7:1f:14:b5:2d:85:1e:f8:e9:a0:a5:9b:
39:56:e1:55:c3:8a:b7:07:55:03:0f:d8:66:84:b1:99:bd:61:
2a:c3:d2:11:a8:c7:11:9a:26:94:ed:53:c6:0d:63:53:a3:6d:
79:1a:bd:71:7b:85:a6:6b:11:e2:71:66:80:6f:cc:46:a7:ec:
4a:5d:32:7b:df:c5:5a:9b:da:16:e3:b2:80:13:3f:c8:5c:0d:
73:d5:c0:6c:0b:4d:ab:49:95:65:9a:3d:dc:5a:29:66:7a:c2:
d4:aa:d6:71:68:fa:ca:a2:2a:0e:f8:c0:69:75:1c:45:b6:9e:
c8:61:4b:7d:ae:cd:eb:4b:d4:e4:32:3b:02:6e:84:39:03:25:
e4:19:65:98:91:16:30:5d:32:f3:85:ac:25:91:c2:b6:37:c0:
75:f5:66:f9:14:23:d0:28:8a:56:a5:2f:31:f5:d2:c7:d4:eb:
c6:d0:35:8e:93:5b:b6:02:42:0c:bd:fe:fd:1d:ad:b9:27:11:
20:12:40:fb:88:f5:b7:b6:50:75:5a:34:27:6c:c6:aa:15:56:
aa:36:24:8b:df:dd:df:af:a0:b7:f1:66:f4:a1:e2:62:fb:0f:
53:4d:2d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:01:36 2025 by rpki-client