Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/gwP3zfDBTEpJJYALk_WogtKfIHU.roa
File: gwP3zfDBTEpJJYALk_WogtKfIHU.roa (raw, json)
Hash identifier: JepxDCmJPHU3GqEztiisokkjlBEYP0YFN8KJ5Nb1s3Y=
Subject key identifier: 83:03:F7:CD:F0:C1:4C:4A:49:25:80:0B:93:F5:A8:82:D2:9F:20:75
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 01953D37D077098FD981782528590B608F2A
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/gwP3zfDBTEpJJYALk_WogtKfIHU.roa
Signing time: Tue 25 Feb 2025 13:07:02 +0000
ROA not before: Tue 25 Feb 2025 13:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209155
IP address blocks: 62.108.51.0/24 maxlen: 24
62.108.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:37:d0:77:09:8f:d9:81:78:25:28:59:0b:60:8f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Feb 25 13:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8303f7cdf0c14c4a4925800b93f5a882d29f2075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:6b:a8:77:ed:20:f6:d5:d4:a6:f7:87:d3:
44:b1:51:2f:e0:27:4c:fd:19:c9:91:37:17:52:8f:
f0:b8:ce:75:2f:57:91:d7:52:7b:85:e8:b0:08:26:
a7:d4:90:b8:5b:10:69:a9:a8:a0:49:7e:3c:0c:23:
d8:82:27:90:48:ca:e6:90:ee:01:29:9a:49:76:bd:
74:7c:c8:73:c8:4d:01:cf:20:11:eb:99:3a:f0:d6:
1c:74:f8:71:44:50:61:26:df:94:27:c0:83:d3:5e:
78:8e:d0:6a:73:a8:c1:fe:31:62:fd:10:75:1f:95:
e8:7c:84:4d:39:76:d3:54:7f:62:94:b4:8c:c6:64:
81:1f:33:17:15:2b:9d:d7:d6:48:19:d7:c3:95:19:
d8:f9:79:23:34:75:a9:c3:a2:22:a5:dd:04:9d:ed:
6e:eb:bd:27:48:31:45:0d:2c:46:40:fb:16:89:76:
f9:e6:28:8e:24:6b:a3:3e:d3:61:b3:5b:fe:0e:85:
6e:27:4c:eb:36:15:23:09:17:63:1e:c7:91:e7:28:
db:aa:f8:fc:cf:e8:94:a9:98:e8:9f:65:13:89:39:
0e:f3:14:35:98:6a:43:39:d8:de:62:fa:e7:26:2b:
bb:c1:07:07:18:f6:e4:77:d5:85:30:06:90:73:c9:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:F7:CD:F0:C1:4C:4A:49:25:80:0B:93:F5:A8:82:D2:9F:20:75
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/gwP3zfDBTEpJJYALk_WogtKfIHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.51.0/24
62.108.53.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:91:0f:5b:13:ee:c5:9d:48:9e:0a:dd:ff:bb:2c:fe:55:5d:
9e:b8:8a:06:a9:54:f0:5c:28:fc:d1:c6:b9:e7:0c:aa:19:dc:
7e:90:39:bc:d9:bc:8c:0a:cc:ef:5f:47:4e:da:af:db:c0:43:
4a:61:a3:af:04:b3:d9:8f:62:54:6e:31:7f:41:f8:46:e6:41:
1e:54:30:a7:22:77:25:f4:de:a4:fe:f9:93:68:45:19:17:6d:
24:31:8e:bd:67:50:85:89:8b:9d:b9:b5:11:63:4a:44:b6:f7:
57:78:95:4c:11:13:c9:7e:80:c1:9b:f2:db:08:48:23:cb:ec:
a1:33:93:a0:2c:3a:0c:a5:6f:82:f8:8a:9e:5d:a7:6f:4b:b9:
49:7f:b1:66:f9:72:71:18:6b:0a:23:8b:81:63:dd:de:22:a7:
2d:32:87:f9:7c:63:2c:58:ae:13:81:23:82:1c:39:bd:f0:15:
7a:77:25:28:76:18:fb:f9:b8:08:d8:d8:53:52:d3:81:d0:da:
99:68:ed:89:ec:03:dd:6b:f2:2a:8a:7b:ed:84:53:12:08:cb:
15:de:9e:ee:f8:bb:a1:56:4c:db:3a:99:37:e8:7d:4d:b1:93:
17:b3:1d:36:3b:86:cd:98:7e:ea:9b:6c:d6:aa:eb:61:ce:56:
6e:96:42:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:59 2025 by rpki-client