Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/E0RHhyeKre4lAHIAyXzrOjHT020.roa
File: E0RHhyeKre4lAHIAyXzrOjHT020.roa (raw, json)
Hash identifier: ObFUR9/6cyqhYdfn8xfAajKYvmxQLbWEfJXQrg4mANs=
Subject key identifier: 13:44:47:87:27:8A:AD:EE:25:00:72:00:C9:7C:EB:3A:31:D3:D3:6D
Certificate issuer: /CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
Certificate serial: 0103891A
Authority key identifier: 31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/E0RHhyeKre4lAHIAyXzrOjHT020.roa
Signing time: Wed 16 Feb 2022 18:31:53 +0000
ROA not before: Wed 16 Feb 2022 18:31:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 62.204.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17008922 (0x103891a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
Validity
Not Before: Feb 16 18:31:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13444787278aadee25007200c97ceb3a31d3d36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9b:d5:e7:4d:3a:38:9a:bb:21:20:21:12:21:
bf:05:ec:4b:44:e5:20:c9:2f:e0:d8:f7:4e:6a:f5:
46:af:12:bc:e3:1b:fe:4c:70:a9:7a:fd:a0:00:ce:
b6:e5:99:17:e1:0c:00:8a:2b:8d:89:d9:45:ab:29:
75:ab:a3:80:99:7b:f7:53:35:14:7b:1b:7a:91:0c:
46:cc:0d:4f:ad:a1:f4:8d:e8:fb:fa:c4:db:1c:08:
ba:8e:ea:7e:60:b7:68:c0:ae:6f:2c:ad:67:32:8c:
e4:be:53:83:ba:a4:cc:38:5e:3f:64:31:94:39:d2:
01:04:0f:99:a4:35:02:82:5d:79:8b:ba:9d:b4:e6:
a1:0a:87:37:25:df:ad:8a:df:92:44:5c:e2:85:dc:
c6:ff:a5:5b:f2:da:b8:3d:df:9b:61:a9:78:41:6c:
22:c5:4a:03:e5:ea:2c:84:7d:83:a9:06:54:9c:57:
a8:62:43:87:31:fd:eb:85:e7:f4:77:0d:27:5d:1c:
54:02:69:63:db:26:8b:a9:0b:80:06:cb:bf:73:bc:
3a:2e:86:3a:33:b1:3f:6d:42:c8:a6:6b:f6:bc:fe:
5c:0e:3e:ad:d7:e1:63:4c:06:45:4d:73:de:ee:16:
b0:88:e4:2c:58:16:c1:f7:4c:44:11:84:52:6b:94:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:47:87:27:8A:AD:EE:25:00:72:00:C9:7C:EB:3A:31:D3:D3:6D
X509v3 Authority Key Identifier:
keyid:31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/E0RHhyeKre4lAHIAyXzrOjHT020.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.50.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c8:3b:67:92:e0:44:a7:9e:c1:ba:ca:01:4c:af:fe:53:1a:
c5:5b:46:b5:94:d9:67:4f:b0:ae:6b:d1:92:f7:36:83:bd:7b:
4d:0d:93:c6:22:3c:92:e3:7a:7f:1e:54:f9:cd:dd:b7:e1:32:
c0:c3:95:62:3e:c0:23:a4:6e:1a:fc:86:80:6d:a8:a8:f8:3b:
ae:81:4a:12:a8:4f:5a:91:1c:8f:b7:82:04:df:53:63:98:09:
84:7c:64:13:22:54:14:00:8e:94:74:19:a0:90:d6:02:c0:c5:
fc:54:bf:f8:a6:7d:d6:ee:dc:48:74:5d:60:bc:1c:34:ba:47:
54:1f:3a:26:4c:16:dc:75:eb:2b:05:52:91:98:c0:db:c2:3b:
da:2f:8a:1a:de:5a:37:52:6d:8b:94:74:bf:d1:c7:33:9f:a3:
1a:a1:ca:4b:82:89:68:de:fc:b9:fc:e5:f8:a6:b3:a1:3b:68:
b5:28:72:0f:6c:b1:e0:72:d2:7a:32:b1:83:48:ae:ee:14:63:
f9:cc:17:ee:8a:74:a0:7a:d1:63:05:a0:70:80:f1:28:68:1f:
b6:a8:1f:67:66:da:16:ba:55:ea:b4:11:fc:34:87:a3:56:53:
ed:b5:c6:56:de:0f:53:bb:3a:7a:27:42:bc:0e:58:18:c1:44:
06:7f:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:44 2025 by rpki-client