Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/VB2zjyzRbVcAI7qwybUzZhlXV-U.roa
File: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (raw, json)
Hash identifier: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=
Subject key identifier: 54:1D:B3:8F:2C:D1:6D:57:00:23:BA:B0:C9:B5:33:66:19:57:57:E5
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019426D9C66E467379ECD6559C00C5D21A28
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/VB2zjyzRbVcAI7qwybUzZhlXV-U.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44709
IP address blocks: 62.219.10.0/24 maxlen: 24
62.219.14.0/24 maxlen: 24
62.219.83.0/24 maxlen: 24
62.219.106.0/24 maxlen: 24
62.219.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c6:6e:46:73:79:ec:d6:55:9c:00:c5:d2:1a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=541db38f2cd16d570023bab0c9b53366195757e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:1d:37:0d:ec:ad:8e:4f:d9:87:db:df:24:
d5:33:48:80:c8:74:90:dc:f2:07:f0:00:81:19:7d:
2c:73:61:cf:cb:ef:77:57:33:6d:c9:18:95:1a:b9:
e2:47:78:02:2c:9d:04:7d:ec:28:ad:ac:ef:83:e2:
83:4d:53:bf:24:3e:ed:05:a6:d7:85:85:82:f1:46:
c4:fe:0b:32:e7:4f:eb:70:35:bb:c5:e4:89:63:73:
dc:fe:00:49:b1:a1:1d:34:37:2d:17:08:44:a7:c5:
ba:83:9e:f5:47:5a:1b:76:a7:a1:bc:31:ee:d9:4a:
af:86:13:4c:c5:78:cb:5d:b5:4a:31:78:6a:e3:03:
3b:ca:91:be:cd:af:e3:e9:03:a6:11:96:e8:87:a6:
83:bb:66:83:6d:6a:5e:30:a7:e4:56:f3:01:97:19:
f3:60:63:a2:15:f7:a6:16:af:7d:b1:c0:1b:85:ef:
77:13:5e:53:91:54:2e:67:b4:e3:ee:88:56:91:b8:
cf:4a:d7:5b:1e:35:97:da:61:35:ea:67:15:b1:f4:
18:f1:bd:f9:97:29:59:e7:2d:ef:8c:e6:6f:ee:46:
d0:23:88:15:ff:00:22:46:76:b9:66:e3:ed:01:4a:
0d:7f:ea:12:cc:0c:d6:a7:e9:ef:36:3d:69:2f:91:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:B3:8F:2C:D1:6D:57:00:23:BA:B0:C9:B5:33:66:19:57:57:E5
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/VB2zjyzRbVcAI7qwybUzZhlXV-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.219.10.0/24
62.219.14.0/24
62.219.83.0/24
62.219.106.0/24
62.219.197.0/24
Signature Algorithm: sha256WithRSAEncryption
13:42:91:83:cd:bf:e7:d7:5a:61:d8:44:91:b1:22:b6:f4:ea:
11:63:ad:6c:fa:a3:59:55:b6:79:38:6a:3a:c7:fb:b0:08:a2:
d5:95:a3:bc:3b:ea:bf:17:07:70:e6:46:43:9e:38:35:97:3c:
4c:a4:a3:e7:88:63:6c:ef:d4:2e:54:3c:99:ea:b0:38:dc:77:
50:17:fe:a4:55:8b:4f:89:cd:9f:98:3f:20:37:28:7d:86:3d:
6e:e6:6b:3b:f9:03:ff:32:fc:e2:fb:c4:e1:3d:89:d9:96:e5:
79:23:8e:2b:3b:0c:b2:e8:66:eb:e8:da:57:8c:1c:42:d2:7e:
2e:2b:13:87:51:39:74:91:97:ba:78:88:0d:30:34:6f:ff:d3:
75:44:c4:62:b6:90:21:5c:d8:5e:e7:7b:df:2f:83:ac:5e:8f:
56:af:15:8a:25:52:1a:ac:c7:70:f0:a5:6a:f5:52:13:33:33:
df:8e:0d:49:7c:23:02:2a:66:f8:0d:7e:1b:af:5c:a7:87:ec:
37:66:08:15:ed:f8:f9:e8:49:c7:b3:f0:f1:40:3d:10:af:e7:
54:86:b0:c9:f4:97:7a:a8:7f:49:0c:b5:e4:69:91:e3:6f:c2:
22:0d:76:6b:85:a3:3d:a2:f3:15:18:8b:07:63:b2:eb:8b:3c:
e8:d0:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:43 2025 by rpki-client