Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8bf5d7-d417-4266-b1ff-90a64dd52606/1/O9vQJSH6asr9ZxtoEHx_VhdTySc.roa
File: O9vQJSH6asr9ZxtoEHx_VhdTySc.roa (raw, json)
Hash identifier: +u6abyOE4yPUD4BpjtRz8nDbOiLJuhXCLCpV41XyKQY=
Subject key identifier: 3B:DB:D0:25:21:FA:6A:CA:FD:67:1B:68:10:7C:7F:56:17:53:C9:27
Certificate issuer: /CN=2efc8763b6992cc5d47b7a3db3d4d4727048d1c7
Certificate serial: 01882086756C6281BA883E00F8D6EA9F52B1
Authority key identifier: 2E:FC:87:63:B6:99:2C:C5:D4:7B:7A:3D:B3:D4:D4:72:70:48:D1:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvyHY7aZLMXUe3o9s9TUcnBI0cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8bf5d7-d417-4266-b1ff-90a64dd52606/1/O9vQJSH6asr9ZxtoEHx_VhdTySc.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 62.233.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:75:6c:62:81:ba:88:3e:00:f8:d6:ea:9f:52:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2efc8763b6992cc5d47b7a3db3d4d4727048d1c7
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bdbd02521fa6acafd671b68107c7f561753c927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:4a:78:52:9a:77:fa:3e:a0:c0:24:3d:07:
6d:95:d4:22:d3:a6:11:66:ae:91:b9:f2:af:6b:ba:
9a:aa:e4:1d:1a:ad:eb:75:ee:7a:cf:3b:e2:10:a5:
a8:0e:cd:ed:d1:96:02:7f:d3:17:a5:f4:65:97:11:
20:b0:40:07:d6:a8:0f:4c:66:54:6d:b4:95:02:cc:
09:fc:3e:ee:cb:80:48:44:1d:b7:d3:a8:de:c4:e1:
da:a6:7c:49:c9:3e:48:82:f4:b0:f4:bf:c1:0a:dd:
eb:e5:5f:d7:8c:d3:c8:ac:aa:7f:e5:b2:90:ab:30:
f4:41:9e:9c:8f:e1:b2:7f:6f:e7:cc:05:10:b0:8d:
3b:d2:69:96:51:57:76:02:46:02:48:2c:6f:46:56:
26:a4:60:02:8b:e2:5a:6d:66:17:c0:89:96:fc:cf:
cf:9d:65:86:73:2f:4c:2e:91:99:e3:9b:70:fc:af:
55:5d:87:e6:e9:3c:b2:98:26:9f:de:2d:bb:40:82:
4a:16:8f:b9:68:50:1f:a6:e3:f6:b8:30:d2:a6:b7:
c2:02:52:44:f7:d3:42:23:36:ef:48:9c:0e:fd:16:
47:a0:e6:e7:82:4c:ce:cc:c2:ac:42:73:f7:6a:e9:
b7:4d:bb:b5:d2:90:a7:59:01:3d:7d:a5:dd:bc:f6:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DB:D0:25:21:FA:6A:CA:FD:67:1B:68:10:7C:7F:56:17:53:C9:27
X509v3 Authority Key Identifier:
keyid:2E:FC:87:63:B6:99:2C:C5:D4:7B:7A:3D:B3:D4:D4:72:70:48:D1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvyHY7aZLMXUe3o9s9TUcnBI0cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8bf5d7-d417-4266-b1ff-90a64dd52606/1/O9vQJSH6asr9ZxtoEHx_VhdTySc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8bf5d7-d417-4266-b1ff-90a64dd52606/1/LvyHY7aZLMXUe3o9s9TUcnBI0cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.32.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ea:e6:f5:cf:80:01:48:c1:cf:95:d9:1c:2d:22:98:4f:2b:
6e:4e:97:47:35:a0:76:6b:a6:de:51:13:68:04:7b:6f:1f:f7:
5d:00:12:bc:11:3e:6d:54:9f:b1:56:7d:b0:00:75:a1:5d:62:
69:0f:19:9b:46:7a:5d:a3:e3:94:36:61:bd:2c:eb:a0:91:e5:
03:07:2c:55:3e:fd:4b:33:29:9f:6d:53:48:85:b3:a4:14:8c:
6f:4f:6d:cc:d8:53:50:49:72:11:9c:68:78:19:47:8d:8a:eb:
72:7c:8e:c7:85:bb:89:ed:5f:ea:9b:ed:1b:e6:60:ff:99:aa:
d2:68:2c:bb:c5:05:2f:59:6e:60:e0:6e:dd:c9:b1:fd:09:b2:
13:48:ee:30:8b:24:f3:e2:01:68:d2:45:16:b9:02:53:6a:74:
1a:5b:10:16:14:bc:1e:f5:c0:6f:2f:38:eb:35:75:df:58:9e:
89:d0:53:ef:1a:c1:66:83:89:5f:b6:59:ed:ce:05:7f:cf:3f:
10:67:91:95:58:15:b1:43:3b:56:c8:e8:43:f6:8d:5d:91:95:
02:fb:75:bc:27:da:88:0a:48:2b:de:0f:dc:8f:8d:1a:7c:4d:
e2:22:d4:32:be:fe:b8:49:e9:5d:1c:f1:99:11:17:5c:95:78:
ab:15:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:53:51 2025 by rpki-client