Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa
File: ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa (raw, json)
Hash identifier: 7YOwLzYn+04mEiM6zjtu45GNMFpON/tmtRVeglwvQWQ=
Subject key identifier: 02:B7:D5:CD:5F:DA:77:6E:D6:4A:0E:8C:48:D0:09:54:E5:4E:E0:99
Certificate issuer: /CN=688b75dc67295d5861b77d51a02118b60dc55868
Certificate serial: 019422203E670F09AD48C3DFCB4273CDE481
Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210638
IP address blocks: 62.233.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3e:67:0f:09:ad:48:c3:df:cb:42:73:cd:e4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b7d5cd5fda776ed64a0e8c48d00954e54ee099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:e2:96:b3:fe:d2:13:bc:6c:ce:d8:3c:6b:
e5:1b:07:74:4e:24:98:2e:dc:03:c2:c1:b1:60:7b:
f1:38:09:b4:e9:98:95:c5:c0:0e:42:b6:04:52:9a:
8c:d2:18:76:bd:3e:28:d5:67:fb:a5:41:6b:1f:f5:
c3:0e:5c:8e:1a:7d:ae:d2:ce:12:9f:6d:2c:ab:a4:
d5:de:be:bf:b7:d1:ac:ca:57:a8:1b:f3:7f:34:20:
ad:d5:11:1f:52:17:04:cb:1d:7b:a8:84:d1:ee:1b:
b5:e7:ac:0f:72:f6:1a:58:40:ad:24:d9:72:18:26:
7b:ef:71:68:93:65:e1:da:97:92:f6:81:0a:54:3d:
53:41:a9:37:a2:e5:1a:4a:c6:4b:97:62:08:a2:ae:
65:3e:3b:36:bc:a7:c3:64:45:37:4d:52:7c:c5:cc:
b1:49:3d:03:40:d8:34:24:26:54:72:f2:23:8c:33:
c2:da:6d:ea:ed:e4:00:c0:3e:66:9c:7a:c2:96:07:
c1:2f:61:80:aa:c3:51:8f:07:f6:35:f1:a5:0f:48:
74:f8:f2:18:52:09:41:d6:39:85:7e:bb:d9:9b:d7:
02:9c:46:af:eb:9c:86:73:c7:29:63:97:71:b6:fa:
12:31:e7:36:a6:7b:b9:c9:8a:dd:4f:d3:6f:20:6a:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:D5:CD:5F:DA:77:6E:D6:4A:0E:8C:48:D0:09:54:E5:4E:E0:99
X509v3 Authority Key Identifier:
keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.58.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c3:cd:f1:37:39:48:cc:28:d7:75:16:84:b2:2b:3b:a6:37:
bc:d2:f0:c2:34:a6:43:73:3e:41:a3:69:41:3e:90:b2:f3:3b:
fd:f5:2b:52:59:0d:25:3f:88:5b:18:67:c2:dd:d7:0b:40:51:
1f:21:e6:7c:ec:80:8d:b0:a7:17:df:21:42:39:a5:8f:81:41:
f0:f7:c2:de:0d:68:6a:d5:f5:d9:1f:b3:ec:83:14:1a:6d:9a:
62:44:99:f9:b1:e8:07:31:66:44:ec:94:c1:f3:4d:e2:d6:66:
e0:92:8a:98:37:1d:7e:29:1b:0a:95:19:e7:7c:3f:e2:03:3e:
77:dc:4d:6e:c7:4a:91:b8:f8:ee:56:b0:19:3f:58:ec:9c:e3:
f8:db:45:4f:ee:83:83:7f:e7:17:8a:0e:b3:24:89:61:f9:4f:
44:cc:d5:4f:02:9a:21:36:e3:82:f9:70:75:dd:18:2b:53:97:
46:0b:9a:b7:3c:aa:ae:6c:eb:4d:8b:65:ec:e7:a8:f2:99:4f:
ea:df:78:7d:a4:14:3b:ac:f3:04:b1:24:f5:02:16:1b:36:99:
60:0b:97:aa:5b:7a:ad:af:9a:df:7b:81:d5:6a:e3:4b:3f:cc:
16:05:e8:59:c8:c5:34:3d:7f:5f:16:67:cb:7c:d6:9c:a3:88:
c6:af:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:08 2025 by rpki-client