Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/4FxPFzxj4FSHik_DOFi3dYQ8Bsg.roa
File: 4FxPFzxj4FSHik_DOFi3dYQ8Bsg.roa (raw, json)
Hash identifier: dYvRHVpk4Sr+hzgdgs4XjWxVzvhHMuwkRgrGSGCabUU=
Subject key identifier: E0:5C:4F:17:3C:63:E0:54:87:8A:4F:C3:38:58:B7:75:84:3C:06:C8
Certificate issuer: /CN=87c232d3f005ca745d818cd6439e8087905010e4
Certificate serial: 01856F66FAB00CB4A4CA2966C4F80509793C
Authority key identifier: 87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/4FxPFzxj4FSHik_DOFi3dYQ8Bsg.roa
Signing time: Sun 01 Jan 2023 22:14:57 +0000
ROA not before: Sun 01 Jan 2023 22:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 62.3.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:fa:b0:0c:b4:a4:ca:29:66:c4:f8:05:09:79:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c232d3f005ca745d818cd6439e8087905010e4
Validity
Not Before: Jan 1 22:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e05c4f173c63e054878a4fc33858b775843c06c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:fe:7d:61:81:d0:9c:ca:48:ec:5d:2e:ef:
95:c5:16:3d:12:09:76:96:fb:e5:4f:b4:4c:60:63:
e6:3d:f3:6a:07:ba:bd:ad:52:5e:22:ca:f5:aa:c3:
bf:7f:1e:24:6e:73:d1:f1:14:30:b4:38:b1:c5:05:
1b:4b:94:d8:74:01:7f:fa:18:ef:b7:ed:63:22:ef:
b6:2b:e4:44:41:cd:55:ee:e3:d7:03:25:63:22:59:
a0:b3:5c:ef:53:9b:c6:d8:a0:8f:84:1e:fa:8e:a2:
8c:bc:75:88:8d:bc:ba:1c:bf:7c:ce:15:3f:d8:0e:
9a:9c:87:bb:74:ed:51:1d:8a:00:d3:f0:ae:fa:cf:
e0:a8:29:09:4d:99:34:0c:33:bd:54:93:ed:ae:5d:
3f:8c:83:30:51:99:79:3c:de:ef:8c:a8:2e:89:55:
bc:46:21:aa:ab:4c:60:7f:63:53:e7:54:69:1c:ca:
d3:23:1e:ba:a2:6d:2b:ce:79:c1:d3:f1:90:78:b7:
d0:f1:61:fe:44:21:d5:27:83:d4:31:4f:25:55:32:
b3:5e:5f:07:dd:f8:d6:ef:10:16:6f:07:55:1d:6a:
76:5a:6b:82:e6:f7:90:50:d2:92:28:37:5e:cf:e8:
2f:bd:55:97:cc:6c:aa:c2:1c:c3:ef:81:ca:c7:ff:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:4F:17:3C:63:E0:54:87:8A:4F:C3:38:58:B7:75:84:3C:06:C8
X509v3 Authority Key Identifier:
keyid:87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/4FxPFzxj4FSHik_DOFi3dYQ8Bsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.51.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1c:65:ff:01:79:ad:48:c5:62:03:73:96:45:bd:eb:5e:70:
04:87:45:ed:5b:d8:ea:38:c4:05:db:42:1d:34:11:a4:2a:51:
e5:cb:b6:76:48:b0:c9:0d:d3:43:03:31:22:70:27:5e:c7:6a:
b3:c6:52:e3:d1:e9:60:93:73:77:df:15:fd:06:26:ce:c6:09:
03:4c:24:a7:e2:8e:f5:ce:b3:26:d4:49:c5:d9:ba:28:00:ce:
c1:4a:87:f4:85:b9:13:d8:c4:5f:02:cb:5d:f7:bf:04:78:0f:
a6:8c:48:f9:60:e8:1c:4b:4d:62:74:63:60:26:7c:26:4a:c0:
b2:3f:df:b5:32:ea:55:a2:00:a6:87:1a:e1:27:6e:dc:5e:05:
0f:8d:3a:4a:74:3f:10:53:1a:52:d7:1b:8f:e7:99:00:c6:16:
2f:35:c0:23:b6:a2:52:2a:50:76:7e:7d:1d:25:e9:0b:29:54:
11:cb:45:09:fe:34:f7:61:eb:59:ea:46:40:10:03:7d:f5:92:
89:c9:df:84:82:ac:61:57:ac:92:33:e5:be:d7:89:8e:73:53:
1d:d3:c8:48:7d:24:97:e7:a8:98:97:36:b4:01:39:73:05:ce:
b8:8e:8c:3e:65:d7:56:87:4a:de:ee:f0:a6:8c:a4:f9:45:fd:
04:7f:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:07 2025 by rpki-client