Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/_RrklPPjBRVT9l7R_WmogHfbnpg.roa
File: _RrklPPjBRVT9l7R_WmogHfbnpg.roa (raw, json)
Hash identifier: 23WF2kTW3HfbPt4TaHmOz8OsNcXCOYTN48o+6AQ8qYU=
Subject key identifier: FD:1A:E4:94:F3:E3:05:15:53:F6:5E:D1:FD:69:A8:80:77:DB:9E:98
Certificate issuer: /CN=4b2d90122264719147a561e7c6c61f7cc1706c92
Certificate serial: 2CDA53
Authority key identifier: 4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/_RrklPPjBRVT9l7R_WmogHfbnpg.roa
Signing time: Tue 26 Apr 2022 13:08:08 +0000
ROA not before: Tue 26 Apr 2022 13:08:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 62.106.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2939475 (0x2cda53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2d90122264719147a561e7c6c61f7cc1706c92
Validity
Not Before: Apr 26 13:08:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd1ae494f3e3051553f65ed1fd69a88077db9e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:26:d2:33:fb:a1:28:a6:05:ab:e8:2a:b4:
f5:a6:01:35:69:79:99:e1:45:a8:33:2b:89:17:d9:
30:55:bb:f0:d9:32:49:c3:16:04:34:3f:6b:0f:73:
e2:c1:52:47:e1:fb:57:72:ad:35:0e:a6:8b:a7:f4:
4b:68:12:01:51:e8:31:95:e3:d1:f5:51:26:d5:3c:
9e:a1:6d:b4:d5:ef:3b:53:f5:3f:b4:d1:c9:3e:31:
b5:3f:17:87:2c:7d:3b:fd:9b:29:84:b1:96:ab:12:
bb:61:07:58:43:89:a6:7f:40:f3:75:41:41:6a:bf:
cd:af:7c:ba:fd:5b:44:dc:9c:2b:f5:d9:64:95:58:
08:df:f8:ef:cd:2a:5b:cb:bf:78:b6:c5:87:01:e9:
30:12:b1:11:e4:c6:62:58:2e:56:90:36:b2:92:7e:
df:d8:fa:d8:05:59:f5:53:ae:59:5f:48:7d:ea:65:
4e:ca:2d:a6:98:67:36:15:01:91:57:bc:33:e8:46:
66:fc:5a:db:20:69:f4:b6:32:1d:63:02:01:d7:57:
64:14:ef:f7:40:ed:57:0a:29:c7:64:69:b3:43:74:
79:39:51:40:b2:26:e8:67:a0:a3:a1:d5:1a:28:b9:
8b:2e:87:64:40:0b:7f:2b:6d:44:b4:17:13:09:c5:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1A:E4:94:F3:E3:05:15:53:F6:5E:D1:FD:69:A8:80:77:DB:9E:98
X509v3 Authority Key Identifier:
keyid:4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/_RrklPPjBRVT9l7R_WmogHfbnpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/Sy2QEiJkcZFHpWHnxsYffMFwbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b7:84:a7:51:b6:06:de:c3:d0:ae:2a:be:5a:d9:a4:e6:bc:
ec:60:67:24:5f:e4:74:8b:42:01:25:6b:fb:43:62:0e:86:14:
4f:bd:51:39:52:6f:6b:74:9e:29:aa:e9:76:25:67:a5:81:d5:
77:1f:a8:79:07:f9:fc:ea:2d:c4:00:4c:85:11:0d:85:99:7f:
20:c5:30:9a:3f:82:9f:09:96:4e:08:6f:89:75:d7:bc:86:8d:
3c:1b:8b:11:c3:0c:cb:cd:6c:38:7d:dc:e5:0d:a2:ca:4c:c7:
4a:5b:f2:9b:4b:56:08:a9:33:69:03:b5:a0:01:06:32:0f:25:
ca:a2:b1:a3:0a:2d:44:33:cf:ac:47:9d:37:e2:3c:6c:86:a3:
a8:a0:d9:a8:cb:08:54:fd:6f:69:0a:5f:eb:36:0b:74:73:a2:
fd:c8:b9:24:be:87:43:bb:98:d5:55:18:11:cf:d9:13:50:cd:
4c:ca:0e:7c:0f:90:41:a8:b5:de:44:fd:66:42:38:65:af:63:
99:da:9c:d1:9e:4e:41:99:44:8d:f7:2c:f5:85:94:7f:c3:c1:
64:67:cc:eb:97:79:a7:8d:0f:dc:4a:c6:23:b8:c1:7b:a4:fd:
ab:4b:ba:6a:c4:ea:78:47:6d:17:33:e7:13:64:3a:ba:b3:0a:
83:bd:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:34 2025 by rpki-client