Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m6AJATtAn7-svZkDR7QV7IBaHs8.roa
File: m6AJATtAn7-svZkDR7QV7IBaHs8.roa (raw, json)
Hash identifier: seJWGMr87YQHNGsmwesS7w855+a2TrJ9VN5LYMRfBNY=
Subject key identifier: 9B:A0:09:01:3B:40:9F:BF:AC:BD:99:03:47:B4:15:EC:80:5A:1E:CF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0193B58E4F0F1D0EA981196B7B1508B88D6B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m6AJATtAn7-svZkDR7QV7IBaHs8.roa
Signing time: Wed 11 Dec 2024 11:50:22 +0000
ROA not before: Wed 11 Dec 2024 11:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213808
IP address blocks: 62.233.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:8e:4f:0f:1d:0e:a9:81:19:6b:7b:15:08:b8:8d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Dec 11 11:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ba009013b409fbfacbd990347b415ec805a1ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:b6:82:b7:ac:d0:8b:5c:5f:3e:b6:d1:dd:
5c:f3:61:6e:9a:5f:e2:20:0c:ce:4e:04:bd:46:5a:
7b:1e:d2:c6:91:85:5b:4e:24:f7:97:fc:df:f7:d1:
a8:a5:48:99:d3:d1:82:ff:2b:e4:22:64:cc:d2:74:
96:cd:d0:3e:0e:45:bc:50:41:a0:f8:02:23:c5:f6:
33:83:a6:e4:bc:b0:a2:16:5d:0c:e6:5e:4f:bc:b5:
43:7b:60:2d:21:c5:c8:f3:bf:9b:f1:b3:c6:1c:78:
13:85:a7:24:13:6d:db:cb:25:a5:f0:e1:53:5b:e9:
64:8b:af:01:78:68:5c:69:1e:56:e0:63:84:d6:94:
43:9a:44:82:af:d8:e8:14:34:ea:64:f2:08:c8:1a:
75:ce:26:01:f0:b5:9b:3e:5e:83:63:57:e3:29:d3:
4c:12:72:22:7d:a8:aa:67:af:34:e3:dd:ca:01:f2:
6d:88:b2:de:2d:85:1b:46:4c:50:29:8e:d0:12:07:
af:38:8e:4f:15:d1:2e:68:34:b2:fd:c4:23:19:c5:
fe:b3:62:e3:6b:1f:de:ae:f3:5e:86:92:98:44:f4:
cb:c0:82:d2:19:5b:68:94:14:e8:eb:6f:34:ae:4a:
30:dc:b1:74:ee:61:ec:99:62:47:fc:27:9e:d7:ad:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A0:09:01:3B:40:9F:BF:AC:BD:99:03:47:B4:15:EC:80:5A:1E:CF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m6AJATtAn7-svZkDR7QV7IBaHs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7e:2c:31:63:02:aa:d0:94:64:08:08:0b:f9:ce:43:df:aa:
14:17:00:fa:09:0e:88:33:e9:d1:ea:28:74:05:16:92:c7:f8:
c9:80:d7:b0:44:6a:92:ed:39:ad:6a:71:fd:34:a9:d8:13:5c:
a6:92:a3:62:01:44:fa:74:7d:6f:f7:27:c5:9a:02:96:ca:7c:
16:9f:9c:6a:97:8e:67:44:ae:35:85:33:84:7e:c5:1c:2b:53:
d1:fd:82:2c:8e:cf:5a:31:61:0c:34:24:7f:aa:16:06:a0:fb:
8a:64:ef:6c:8d:2c:e3:52:54:1e:f5:52:3d:81:82:b0:4f:a7:
7a:cc:eb:33:93:e8:fe:15:dd:cd:02:c7:aa:db:63:82:0f:b1:
e7:bc:6d:62:db:45:ba:b9:8f:10:c6:c7:9e:c3:45:23:d9:d0:
f4:c7:82:22:d5:00:a3:0f:f1:60:68:b4:55:d1:74:ea:45:0c:
af:b1:16:55:b3:8f:03:90:af:9e:c4:41:63:5b:76:08:01:7a:
be:f9:28:c3:f4:84:0f:14:6e:5d:fe:07:ae:21:1c:b9:96:65:
96:47:aa:c0:61:1b:15:7c:04:f9:cc:d1:b9:a7:3f:e0:a0:87:
69:10:59:e3:7c:7a:ad:75:1f:c8:d7:01:db:f2:8c:e1:6a:6f:
61:9b:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:49:59 2025 by rpki-client