Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8bf5d7-d417-4266-b1ff-90a64dd52606/1/hK8v0BIC-bAHR0tGluE9T2R-lMs.roa
File: hK8v0BIC-bAHR0tGluE9T2R-lMs.roa (raw, json)
Hash identifier: gOG0xeZ0izXoD0XpiK6WRRb9WHyu6bUY8s7rbbcDah0=
Subject key identifier: 84:AF:2F:D0:12:02:F9:B0:07:47:4B:46:96:E1:3D:4F:64:7E:94:CB
Certificate issuer: /CN=2efc8763b6992cc5d47b7a3db3d4d4727048d1c7
Certificate serial: 0185718335C9AD23B490E272153686A38D5F
Authority key identifier: 2E:FC:87:63:B6:99:2C:C5:D4:7B:7A:3D:B3:D4:D4:72:70:48:D1:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvyHY7aZLMXUe3o9s9TUcnBI0cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8bf5d7-d417-4266-b1ff-90a64dd52606/1/hK8v0BIC-bAHR0tGluE9T2R-lMs.roa
Signing time: Mon 02 Jan 2023 08:05:02 +0000
ROA not before: Mon 02 Jan 2023 08:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 62.233.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:35:c9:ad:23:b4:90:e2:72:15:36:86:a3:8d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2efc8763b6992cc5d47b7a3db3d4d4727048d1c7
Validity
Not Before: Jan 2 08:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84af2fd01202f9b007474b4696e13d4f647e94cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:4e:fe:22:94:ef:fc:2e:43:e5:24:d2:f0:
41:4f:ab:66:aa:d2:42:37:b6:52:09:4c:ae:0f:ba:
ed:4a:f2:31:2b:53:41:61:2b:88:df:40:1f:f0:a4:
d5:7d:54:96:d2:01:d6:f4:ff:11:5a:dc:34:b3:fa:
bf:fb:a4:7f:03:23:ba:ef:f8:f0:23:4c:13:0f:40:
ae:85:7b:08:54:47:6c:5e:20:fb:46:75:96:b2:28:
6f:24:c6:6e:0c:88:7e:d3:1d:9b:39:46:51:4b:52:
e5:d7:aa:30:72:20:59:e6:82:fc:fb:94:96:93:8c:
e6:77:e2:a1:1f:46:98:5b:6f:31:ea:82:c2:1e:4a:
91:26:04:59:c3:4e:39:35:4a:36:60:6c:f9:d1:89:
e1:87:35:7e:02:78:5e:de:54:c2:5a:1b:ad:6c:d9:
39:e1:10:61:53:76:3a:66:00:66:61:2a:66:b9:7d:
b6:9e:55:cd:55:89:da:8e:d1:77:29:1f:e8:f9:fc:
ae:57:2d:3a:a1:8a:c9:83:74:ae:20:0f:59:0e:2d:
59:de:55:81:91:be:f4:78:da:25:4a:be:3e:36:90:
4b:00:09:f6:7a:76:da:42:30:47:84:14:fe:7b:ad:
0f:0b:90:aa:56:93:0c:e1:f4:67:e6:25:a9:cb:dd:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:2F:D0:12:02:F9:B0:07:47:4B:46:96:E1:3D:4F:64:7E:94:CB
X509v3 Authority Key Identifier:
keyid:2E:FC:87:63:B6:99:2C:C5:D4:7B:7A:3D:B3:D4:D4:72:70:48:D1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvyHY7aZLMXUe3o9s9TUcnBI0cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8bf5d7-d417-4266-b1ff-90a64dd52606/1/hK8v0BIC-bAHR0tGluE9T2R-lMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8bf5d7-d417-4266-b1ff-90a64dd52606/1/LvyHY7aZLMXUe3o9s9TUcnBI0cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.32.0/24
Signature Algorithm: sha256WithRSAEncryption
60:dd:ae:17:02:4f:15:7b:8f:e4:6b:4d:0b:7c:11:33:a6:11:
e7:37:e2:fd:ba:c2:36:c5:34:a9:83:f5:2c:a7:fd:c7:b7:fc:
25:9a:90:45:81:c9:42:94:76:95:32:44:9b:de:e8:c9:dd:a8:
80:53:59:a1:4f:5f:31:48:7f:c8:12:10:7e:d9:cd:07:bf:12:
25:1e:ce:cf:8f:6c:e5:ea:36:e5:bd:69:a3:ec:75:99:aa:ad:
54:f8:b7:cc:37:33:ae:74:2a:c2:df:13:4a:32:b5:5d:e3:bd:
66:4d:da:78:64:2e:77:e7:4c:2a:f0:5e:f9:56:25:4c:e2:fe:
be:25:f4:62:e4:e0:67:38:b8:9a:32:20:0d:e8:bb:bb:00:40:
42:0b:02:d8:db:70:71:47:ca:ff:5e:d2:42:d1:ca:71:1f:bf:
35:9f:2c:7c:14:01:d7:cf:97:3e:c1:fc:b5:cd:a4:1b:31:72:
2b:99:99:83:3e:d5:3d:a2:76:69:b5:89:e5:29:72:f9:7d:01:
84:3d:d3:f4:23:2f:77:13:bf:a9:4f:e2:1d:68:a4:48:f8:fa:
57:7a:a4:75:71:6d:78:fa:06:45:45:01:59:f3:ed:df:9e:b2:
0b:81:7d:3b:dd:f8:4a:7c:03:02:8b:e4:16:92:35:95:07:5a:
a7:11:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:14 2025 by rpki-client