Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/EsZDeT6OHYDeCNoQtOvZnKISaoM.roa
File: EsZDeT6OHYDeCNoQtOvZnKISaoM.roa (raw, json)
Hash identifier: UJQQ9fqFS36Fh58l1jmXdq20fd5Irnb7TWXrjcYEMlU=
Subject key identifier: 12:C6:43:79:3E:8E:1D:80:DE:08:DA:10:B4:EB:D9:9C:A2:12:6A:83
Certificate issuer: /CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Certificate serial: 75D5DC
Authority key identifier: 51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/EsZDeT6OHYDeCNoQtOvZnKISaoM.roa
Signing time: Sat 01 Jan 2022 03:53:42 +0000
ROA not before: Sat 01 Jan 2022 03:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 62.3.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7722460 (0x75d5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Validity
Not Before: Jan 1 03:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12c643793e8e1d80de08da10b4ebd99ca2126a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:4d:10:5f:39:ac:9a:ff:6b:db:19:35:a6:
7a:02:38:e5:4e:e3:ca:8c:ab:5a:72:e2:d6:14:58:
10:80:50:6a:29:f6:e7:5d:a7:20:75:ca:97:52:9d:
97:9c:34:a9:29:e9:43:89:00:1f:64:35:5f:dc:32:
5b:d9:47:f8:e9:f1:08:b3:f5:da:cd:1e:10:4b:59:
51:74:17:0d:87:ef:bd:21:76:96:dc:8e:a4:86:36:
ab:0b:9f:68:e5:e5:bc:58:d5:f6:26:3c:03:a8:5a:
b7:ff:64:f0:3f:62:af:64:a7:d9:b7:c3:74:11:87:
9b:f6:4e:53:b0:4f:b8:9d:04:6e:1a:1d:b5:3f:49:
30:f5:1b:ed:81:96:51:5f:0a:13:f1:42:9c:e8:0f:
62:56:3c:7e:5c:13:fa:47:01:da:a8:2f:7e:3d:b7:
19:f9:3d:3c:98:a4:e3:f0:66:69:63:6f:dc:9f:3c:
91:71:0a:4c:43:45:93:1e:4e:40:c7:4e:d3:c5:c3:
77:9e:b7:13:18:ae:95:f7:2d:d2:ed:62:ad:79:7f:
f0:8f:5a:82:05:2d:dd:8a:0e:c9:6a:a4:12:a7:d9:
8d:98:16:d0:a4:35:12:ba:d0:94:da:ba:ff:16:56:
0b:d2:a5:1c:35:52:cf:1c:5d:9c:37:ed:c5:3d:13:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C6:43:79:3E:8E:1D:80:DE:08:DA:10:B4:EB:D9:9C:A2:12:6A:83
X509v3 Authority Key Identifier:
keyid:51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/EsZDeT6OHYDeCNoQtOvZnKISaoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e4:66:3e:f9:6c:10:40:d0:38:c2:c7:54:5e:c1:0f:9c:c0:
fa:6c:36:20:22:21:f5:cc:d0:c1:ea:d5:ae:74:3f:df:a5:7e:
4f:53:0c:60:cf:8c:9c:52:62:fd:5b:01:37:6b:9f:af:84:93:
77:20:31:58:73:e7:8e:ef:76:0e:3e:f2:12:b9:74:a2:7e:d4:
62:36:ec:48:01:83:4b:26:31:59:2b:50:ed:81:75:54:c1:de:
fa:dc:a9:d8:8c:a2:20:0b:03:08:6e:3f:0c:bd:95:ae:6b:13:
2e:29:d2:36:ca:dc:3e:a9:cc:6c:cc:5d:0f:56:5f:1b:f7:6b:
5d:de:fb:01:48:57:ac:de:69:05:8f:04:dc:14:58:73:7c:63:
61:32:44:22:4d:19:61:28:02:74:88:56:c7:c1:df:91:72:70:
64:22:78:26:88:f8:fd:9b:db:2c:e6:2b:2b:4e:30:dd:2a:ad:
87:19:13:f9:3d:d3:31:95:1d:82:74:8c:6b:5a:0d:1e:41:c0:
17:24:64:8d:ed:84:a6:a1:7b:1b:7b:d5:fa:bb:a1:88:42:63:
9e:c4:f4:81:71:5f:d7:f0:78:73:13:d0:de:6b:04:fb:1d:b8:
75:a6:ab:83:b7:52:57:8f:90:65:96:d2:19:d4:90:ab:25:95:
5b:08:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:46 2025 by rpki-client