Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/9jp5_XfTiEwwNHNk2oxw-oayz6g.roa
File: 9jp5_XfTiEwwNHNk2oxw-oayz6g.roa (raw, json)
Hash identifier: 3r63RXuBq2+H+3uAIUcsKa19QDg8Wvj+gzAnmLVuRWY=
Subject key identifier: F6:3A:79:FD:77:D3:88:4C:30:34:73:64:DA:8C:70:FA:86:B2:CF:A8
Certificate issuer: /CN=d9740a02fbe1236226c366b33c29f36dab70de5c
Certificate serial: 018CC49390B5F7BDCBF35928B8B1C25A246E
Authority key identifier: D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XQKAvvhI2Imw2azPCnzbatw3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/9jp5_XfTiEwwNHNk2oxw-oayz6g.roa
Signing time: Mon 01 Jan 2024 10:30:54 +0000
ROA not before: Mon 01 Jan 2024 10:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39305
IP address blocks: 62.68.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:90:b5:f7:bd:cb:f3:59:28:b8:b1:c2:5a:24:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9740a02fbe1236226c366b33c29f36dab70de5c
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f63a79fd77d3884c30347364da8c70fa86b2cfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:0a:92:26:5e:95:5e:c9:e0:68:bc:fd:6e:
96:53:fd:aa:ee:f9:fb:33:a3:46:26:62:98:91:43:
53:c5:68:90:f1:29:85:3c:3e:2c:04:7a:47:b4:98:
16:3f:f0:e2:75:30:e5:30:2d:3f:1e:d4:46:5f:b1:
7d:3c:38:4f:84:90:f8:00:47:ee:9a:1a:7d:4f:40:
8f:08:b1:d7:5a:ff:d6:86:00:b8:16:98:4e:7f:03:
e8:da:ff:86:76:dc:1f:49:4e:cb:d0:a9:16:3e:ca:
e6:a5:8d:e7:b3:69:0d:c3:a4:d2:9c:55:f7:e5:7b:
c2:d2:06:8e:32:cb:0a:e8:64:bf:7b:c8:8f:23:c3:
3b:7e:6e:7c:2f:64:74:f0:27:18:62:ba:c7:2a:3e:
bb:89:42:7c:75:05:db:f8:73:00:78:72:8e:7d:20:
3b:1f:18:10:01:09:8d:2d:0c:40:5f:08:3c:4c:28:
38:de:68:9e:24:ad:8c:30:b6:64:d5:1f:dd:50:2c:
cd:b9:a2:ea:4b:24:37:f5:94:47:6a:8d:09:a7:d2:
c6:61:d5:ad:a2:ab:eb:14:ef:44:1b:6c:10:9f:38:
c6:89:01:d7:e0:96:10:39:5a:cc:8c:fb:ff:1f:40:
f6:0f:75:d4:9d:b9:cb:02:bb:2c:a3:e1:9b:8e:42:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3A:79:FD:77:D3:88:4C:30:34:73:64:DA:8C:70:FA:86:B2:CF:A8
X509v3 Authority Key Identifier:
keyid:D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XQKAvvhI2Imw2azPCnzbatw3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/9jp5_XfTiEwwNHNk2oxw-oayz6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ba:99:ef:9d:fb:e3:52:7b:a4:49:5a:ff:2d:4c:8c:17:85:
89:2d:44:a6:bf:21:28:ce:2a:8c:0b:b2:fb:4d:e3:17:75:2d:
02:f4:b9:c0:67:9f:c4:f5:aa:b6:bc:96:4f:f7:3d:19:72:92:
b8:20:c2:a8:7e:11:a6:cf:7b:06:85:f5:d2:68:b3:17:30:be:
2c:a9:86:c0:fe:9e:1e:27:a8:2d:5f:9d:8d:e2:d8:99:15:8e:
c4:45:15:ca:c1:62:a3:0d:e3:00:c4:c5:fe:08:e6:d6:e9:82:
10:46:6f:74:8a:2a:76:d9:66:cd:d5:b0:a1:c8:cc:f5:2d:9a:
84:cc:6a:6a:5d:0e:fc:3c:cf:79:d5:33:30:b8:97:c6:f7:0e:
2d:b8:c8:35:20:64:72:80:55:59:e0:25:a7:56:24:dc:ec:66:
61:58:50:f6:17:73:ef:94:00:87:5f:d4:59:74:e2:84:54:72:
aa:b1:63:8b:b2:ee:49:20:8c:84:a9:5c:03:33:f6:fb:f4:7d:
8f:07:24:e8:22:2e:aa:82:d5:50:5a:4e:64:be:9f:61:9e:72:
87:7c:25:a6:5f:83:c4:09:ec:e2:ae:b4:d1:3f:6b:38:b6:ff:
a9:4e:aa:41:f6:b3:3a:d9:0f:14:34:58:ae:02:19:ff:c7:4c:
52:c0:64:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:43 2025 by rpki-client