Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/av6b68OK5sqf3urFBd6xH3ObLkI.roa
File: av6b68OK5sqf3urFBd6xH3ObLkI.roa (raw, json)
Hash identifier: ARB67cwOPCShGlNStys39TYup8WI7lg4m80wRDyBO/8=
Subject key identifier: 6A:FE:9B:EB:C3:8A:E6:CA:9F:DE:EA:C5:05:DE:B1:1F:73:9B:2E:42
Certificate issuer: /CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Certificate serial: 01837AAA5DF654D13F8D7870CAA8478F2030
Authority key identifier: 74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/av6b68OK5sqf3urFBd6xH3ObLkI.roa
Signing time: Mon 26 Sep 2022 16:38:48 +0000
ROA not before: Mon 26 Sep 2022 16:38:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205124
IP address blocks: 149.62.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:aa:5d:f6:54:d1:3f:8d:78:70:ca:a8:47:8f:20:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Validity
Not Before: Sep 26 16:38:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6afe9bebc38ae6ca9fdeeac505deb11f739b2e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:72:fd:d6:a2:8c:86:30:29:6a:a8:dd:c2:
b6:45:92:27:c2:1d:db:d2:8a:4e:5a:ef:7e:d6:3a:
70:58:3b:3e:9b:2b:e3:6c:00:83:33:13:90:31:5d:
4a:0e:82:3e:ab:1c:64:e5:d5:10:b4:ba:9c:cc:53:
90:a6:4a:a5:30:4a:9d:6b:d8:5c:b0:64:01:fc:48:
32:2b:35:00:b9:5f:7c:c8:15:2e:77:18:72:6a:8d:
a8:2e:06:5c:a0:c5:8d:5a:51:f3:f1:82:a7:04:3a:
a2:1e:a1:b0:f7:9f:71:7d:55:04:5e:74:12:88:23:
03:54:d7:27:86:82:23:61:5b:3f:f2:05:84:dd:21:
66:48:85:b0:a8:0f:15:18:57:c0:32:67:56:d3:46:
a5:9e:e6:a3:5b:78:7c:60:52:9e:bc:66:0f:c9:31:
95:b4:77:11:04:10:ed:f9:f2:c7:fa:4d:86:f1:d2:
9d:30:56:f1:66:81:a6:48:0b:1b:df:39:1f:ac:be:
58:a7:eb:96:01:69:ec:a3:ee:65:d7:b8:29:6b:64:
24:cd:75:6e:65:f4:c0:f1:43:e4:5d:de:87:3e:22:
82:d7:2c:74:7c:22:c8:ac:ab:de:aa:bb:45:0a:8e:
82:1b:2b:91:ee:06:c0:10:6f:3c:c6:ff:cb:54:13:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FE:9B:EB:C3:8A:E6:CA:9F:DE:EA:C5:05:DE:B1:1F:73:9B:2E:42
X509v3 Authority Key Identifier:
keyid:74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/av6b68OK5sqf3urFBd6xH3ObLkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/dHM-CN3CU2e-bzrYps79GOde7YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.32.0/22
Signature Algorithm: sha256WithRSAEncryption
37:ea:d2:e7:25:1e:d3:eb:47:bc:fa:81:c6:66:26:b0:72:be:
e4:2c:f7:cf:25:11:3c:6c:6b:44:54:35:7e:02:5e:af:95:b4:
fd:44:84:ae:34:4c:60:f5:53:14:3c:34:72:30:7c:a1:f9:cb:
e7:db:23:3b:3f:77:b7:b4:51:e1:7e:5c:3c:2b:98:cf:13:ae:
78:5e:15:bf:4d:f5:75:68:cb:f7:74:43:c5:76:56:11:f6:ec:
d1:eb:b5:0a:60:3c:97:93:df:ab:97:81:16:32:9e:5b:c4:bc:
fd:fe:9a:14:3b:f5:0d:de:98:2d:60:a4:d1:db:ad:e9:9f:95:
60:fd:11:c9:b8:89:09:b3:43:1b:64:b0:36:3f:6d:4b:f4:f7:
b6:f5:92:5f:45:6e:23:9a:f7:af:d2:49:ca:9d:db:e2:db:7a:
87:c3:db:df:3a:26:92:40:1b:a6:e4:ad:c3:14:a5:90:1e:9b:
3c:ee:a3:16:a3:1f:66:50:02:46:87:a7:73:11:0b:56:4b:ef:
0d:a3:89:05:49:44:04:b8:a6:8f:97:09:81:b7:0a:31:09:02:
fe:71:52:c3:e9:47:db:6a:f7:df:c3:d8:dd:ed:30:75:88:6a:
2b:05:c6:b3:8e:35:3c:e2:16:11:eb:8a:cb:b8:26:25:f6:20:
83:37:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:40:57 2025 by rpki-client