Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/JIWScFv9Kksz3-WjVTMxXPLjiWo.roa
File: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (raw, json)
Hash identifier: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=
Subject key identifier: 24:85:92:70:5B:FD:2A:4B:33:DF:E5:A3:55:33:31:5C:F2:E3:89:6A
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0194274743663437ABE01BAC26CB6EA1A4D3
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/JIWScFv9Kksz3-WjVTMxXPLjiWo.roa
Signing time: Thu 02 Jan 2025 13:49:29 +0000
ROA not before: Thu 02 Jan 2025 13:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 62.56.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:43:66:34:37:ab:e0:1b:ac:26:cb:6e:a1:a4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 13:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=248592705bfd2a4b33dfe5a35533315cf2e3896a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:22:e2:f3:98:47:33:99:47:41:a1:b5:46:
84:ac:19:d3:bf:2e:db:e8:68:ac:8b:8c:7d:a4:b3:
64:fd:57:3d:01:c8:2e:49:5e:1b:d7:e4:69:37:81:
ed:74:78:43:5e:bb:b4:99:f7:60:1c:dd:86:d9:39:
72:00:87:4a:46:b4:2f:30:9e:27:10:a9:20:ab:98:
9a:f8:b5:02:f3:44:4d:b4:cc:a4:8f:d3:cf:b9:0e:
1b:68:d0:16:3f:21:fe:2c:be:f7:96:a7:c4:e1:9b:
ba:15:2e:c2:49:fc:e3:cf:9a:07:6e:b6:05:2c:b7:
aa:64:bf:3a:67:19:54:2e:97:34:50:3a:53:ea:c3:
16:e5:e8:86:2b:f0:98:4c:d6:ff:2d:c4:81:da:40:
af:ff:6f:5c:c8:70:b6:55:f4:05:36:7e:66:42:cd:
61:12:e9:af:4e:bc:7c:3f:87:48:2f:99:4e:2b:1f:
18:d9:80:7b:6b:52:70:8d:6f:76:28:de:84:7a:0f:
f6:4d:dc:4f:94:ca:31:45:59:52:2a:08:4b:56:56:
a3:a2:7a:f9:ac:a1:93:b1:01:3f:c2:7e:e4:72:fa:
57:74:eb:7e:c2:f2:fc:32:e9:fb:0d:ba:1d:7f:01:
3b:e1:1c:28:b9:40:3e:76:f1:99:86:4e:ab:6e:9a:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:92:70:5B:FD:2A:4B:33:DF:E5:A3:55:33:31:5C:F2:E3:89:6A
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/JIWScFv9Kksz3-WjVTMxXPLjiWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.208.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:e9:f7:76:25:78:b4:c1:ea:db:82:3b:98:4f:1c:37:ef:e1:
2f:8c:4b:30:56:47:ec:01:91:82:17:2d:46:99:e5:5e:ce:05:
b7:d0:b6:e2:52:4b:d5:9c:a6:c4:47:cd:00:1c:31:3d:73:e5:
46:0d:9c:72:d8:e2:bb:fe:d9:c4:2c:22:23:ce:bc:3a:c1:a6:
5f:64:7d:92:1b:87:f5:f9:e5:9e:c8:60:5b:6b:92:01:1f:22:
85:bf:20:ba:92:e8:09:8a:f6:64:da:b3:9f:f1:02:a8:bc:1d:
35:da:f5:ae:3c:3b:90:62:50:55:7f:28:c4:7c:51:2e:e0:65:
f1:f7:a3:7e:69:0d:5b:aa:cb:c3:10:f7:8e:e8:8c:53:24:e2:
85:ee:56:2a:fd:e4:09:2b:cd:6c:86:d2:cf:1a:f1:e1:58:c8:
95:c7:30:84:2a:c7:ea:85:80:f9:c5:cd:2b:14:5d:54:ca:e5:
6f:50:2f:8e:3b:27:a4:2c:0b:12:3c:87:05:42:b1:1b:45:1c:
fe:b0:b2:57:da:1c:ad:62:79:60:d7:fa:c3:41:54:03:e5:83:
ef:66:11:05:b2:ab:38:9b:3e:e3:89:97:c7:2e:cf:5c:31:c4:
d3:68:e7:2d:58:11:44:ba:88:a5:5e:11:7e:f8:62:75:d5:8c:
a3:dd:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:31 2025 by rpki-client