Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/dNzpUeScS40SGAakdE8EMOqK8-0.roa
File: dNzpUeScS40SGAakdE8EMOqK8-0.roa (raw, json)
Hash identifier: ChCS0TPiqjqC3j7rrZypS24t3Ck3/GrBq9+62XOwDas=
Subject key identifier: 74:DC:E9:51:E4:9C:4B:8D:12:18:06:A4:74:4F:04:30:EA:8A:F3:ED
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 0194ACBEC5AA40B041D09FB50F2EE8F0008D
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/dNzpUeScS40SGAakdE8EMOqK8-0.roa
Signing time: Tue 28 Jan 2025 11:49:31 +0000
ROA not before: Tue 28 Jan 2025 11:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215621
IP address blocks: 62.164.160.0/21 maxlen: 21
116.199.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:be:c5:aa:40:b0:41:d0:9f:b5:0f:2e:e8:f0:00:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Jan 28 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74dce951e49c4b8d121806a4744f0430ea8af3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:7d:8a:bd:28:e5:28:f2:da:f3:af:4e:49:
1b:b0:f7:87:ef:24:ee:3b:bb:52:be:57:e1:62:e6:
22:96:9a:a6:de:0a:c4:61:70:da:5e:46:97:15:c5:
6c:df:8b:ff:0f:5d:56:ab:99:63:05:a5:bc:f8:f2:
75:5c:8c:5f:f4:7a:e5:57:75:6b:5c:13:23:1e:75:
5b:a8:61:67:4f:28:a8:a8:70:b9:31:11:f7:f0:98:
02:0d:58:1d:9c:54:cc:51:eb:fd:43:e3:51:57:b0:
36:02:12:7f:79:aa:64:1c:01:fd:df:ee:ee:d0:3c:
06:84:e3:da:80:07:ed:08:b8:f7:87:aa:b5:97:f5:
c0:04:1e:8b:fe:1f:bb:2b:5e:29:e0:a7:4d:84:1f:
ed:9f:0c:4c:55:fb:45:f8:3d:4b:3e:d6:a0:56:2f:
90:3d:83:8f:60:68:6e:37:aa:d9:b9:41:24:e1:b7:
b5:82:1f:a7:8b:a9:c2:34:24:c2:07:f2:70:6b:01:
3d:ae:98:d1:dd:29:56:81:4e:f4:26:66:6f:b1:7a:
d5:6f:5d:c5:ed:13:96:13:1f:55:e4:8a:42:f5:9b:
47:9e:eb:a7:06:8e:a1:b9:fd:22:d0:01:8c:26:6e:
2c:3f:bf:94:a9:24:40:f1:5f:b8:2d:04:c7:52:c4:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DC:E9:51:E4:9C:4B:8D:12:18:06:A4:74:4F:04:30:EA:8A:F3:ED
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/dNzpUeScS40SGAakdE8EMOqK8-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.160.0/21
116.199.224.0/20
Signature Algorithm: sha256WithRSAEncryption
77:66:f8:07:d0:c5:8f:56:86:0c:80:94:c2:e0:42:7f:27:1f:
da:6d:a9:1a:eb:a3:9c:72:cb:4e:bf:70:93:d0:0a:45:92:bc:
c1:53:61:32:94:53:c2:45:c4:f4:ae:9b:21:b9:f5:60:1e:03:
9e:4f:9c:52:c8:3e:be:e8:8e:9d:eb:01:14:3b:c0:2b:91:ee:
50:d4:18:44:67:c7:3a:36:ee:b1:62:0a:b9:08:d1:2f:03:47:
cc:1d:37:69:ad:b0:9f:55:c5:30:f3:26:da:e0:81:67:35:b5:
6a:3e:99:d6:3e:94:f0:00:b0:93:1c:9a:2c:41:11:f3:8c:3d:
79:4c:8f:78:56:8b:c2:c2:b3:e3:53:8d:2a:53:ad:66:5a:7b:
11:aa:c3:e8:9d:4e:56:e3:f2:84:ba:e3:a2:01:93:a8:86:ae:
bf:09:5b:42:a6:ee:91:2e:f3:1b:ae:ef:ff:9d:81:50:a4:ec:
0f:91:13:f2:ad:ce:dd:94:50:1d:77:19:75:a6:4b:6e:71:8d:
e8:35:69:30:9b:3c:4e:4c:4a:78:c0:9f:9b:0e:6b:20:15:6b:
71:b6:cb:9e:93:0a:f1:56:7e:a4:c5:39:65:0c:55:20:a8:0a:
a9:6a:45:7f:f1:25:19:01:e6:23:be:6d:c6:95:d4:81:ff:8d:
14:61:30:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:45 2025 by rpki-client