Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4IzL0th5qgIg4Lku9-I5a3DurDg.roa
File: 4IzL0th5qgIg4Lku9-I5a3DurDg.roa (raw, json)
Hash identifier: WhbG+4qdlk7TUYebCiB7rxthe53zaiNGTutCSMGvR8k=
Subject key identifier: E0:8C:CB:D2:D8:79:AA:02:20:E0:B9:2E:F7:E2:39:6B:70:EE:AC:38
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452B8CFF42D516DA048944B31C48A6
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4IzL0th5qgIg4Lku9-I5a3DurDg.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64433
IP address blocks: 62.233.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2b:8c:ff:42:d5:16:da:04:89:44:b3:1c:48:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e08ccbd2d879aa0220e0b92ef7e2396b70eeac38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:84:c4:3f:1a:e9:0b:79:6a:66:5d:03:81:
26:fb:ce:86:fc:fe:f9:8f:10:4f:19:58:7c:f2:0a:
6b:67:19:3d:9e:15:fe:89:c5:c6:ae:59:42:7d:5d:
44:81:6c:7c:f4:af:41:f8:5e:9c:61:90:55:b0:55:
69:7c:a4:89:37:4d:21:55:c3:9c:8c:51:bd:39:ee:
0b:ee:20:df:e8:50:5d:95:c9:ea:c7:8b:56:04:7e:
39:d1:32:a2:a2:04:ba:2e:e1:2f:4b:75:08:c1:6a:
79:61:a0:bb:b5:82:20:36:a2:24:86:a7:e7:82:5c:
03:f8:56:39:22:09:65:14:2e:5d:9a:b4:94:c5:77:
95:c5:fe:6e:87:d9:6b:fc:44:36:26:f5:4a:98:a7:
20:13:de:52:d4:e1:04:91:ef:1a:be:f7:ba:2b:cc:
a7:5c:5b:06:ca:0c:9f:c3:8d:a2:5e:8e:65:d6:6f:
0b:06:32:8c:e0:2b:07:f0:48:8c:80:4b:45:bf:ff:
99:b2:aa:69:74:df:03:e9:37:cd:b4:6e:7e:73:87:
3e:69:d8:88:bb:cb:54:05:ec:7a:20:a7:ad:52:26:
2f:ce:d4:3c:07:7f:8f:7c:52:3e:3e:03:83:b2:55:
01:0b:73:bd:83:00:a9:46:e1:92:d0:12:82:4e:d0:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8C:CB:D2:D8:79:AA:02:20:E0:B9:2E:F7:E2:39:6B:70:EE:AC:38
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4IzL0th5qgIg4Lku9-I5a3DurDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b0:66:ba:c5:c4:c4:d4:2a:27:32:49:fa:bd:2c:e2:32:53:
d3:b3:3f:46:d4:b0:29:a2:72:20:a9:4e:f9:29:0b:f3:5c:f4:
0d:83:4c:4c:59:ff:71:3d:fa:db:e4:58:49:b4:9f:04:e9:43:
72:06:4d:67:15:0d:55:49:1d:48:34:e1:3a:e6:2c:7a:6a:39:
ca:0e:14:0b:d9:04:53:21:e5:04:11:a7:d9:e3:5a:65:5e:60:
75:1a:7f:b2:f5:3f:67:80:ae:0e:e6:78:68:bf:c9:64:d4:58:
31:eb:0b:95:99:d1:8a:9a:95:24:d8:6c:96:2a:46:6a:5b:23:
6e:68:69:7b:59:2e:0d:50:1f:26:a2:04:72:60:c5:50:38:3f:
7d:44:61:18:cc:02:db:3b:29:40:63:bd:16:1d:93:31:03:49:
62:22:6e:05:24:ec:ec:e7:c3:aa:3d:42:cf:a5:d8:7f:3d:a9:
ae:f1:7c:e8:4f:ab:a4:56:cc:14:46:84:84:61:d0:e8:89:d9:
78:5d:ad:0b:5e:32:79:e5:62:d8:e1:56:0d:cd:e0:b4:56:86:
00:05:35:42:28:72:fa:13:1c:5b:f5:4d:d4:f7:e3:e0:27:e3:
1b:37:61:6f:c8:93:29:20:7a:9e:19:c3:a8:ff:3c:c6:6c:a3:
2b:89:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:59 2025 by rpki-client