Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/4X1gm-eL3D0m0E48l8OJ3Vq0EOA.roa
File: 4X1gm-eL3D0m0E48l8OJ3Vq0EOA.roa (raw, json)
Hash identifier: jqBYDsxpjIMa2DgXlrVWmiC0wkXG5ZIo9FrnPZ6fKb8=
Subject key identifier: E1:7D:60:9B:E7:8B:DC:3D:26:D0:4E:3C:97:C3:89:DD:5A:B4:10:E0
Certificate issuer: /CN=0a7091134470f04ede2bcfb1af0f58ac2b5f12f3
Certificate serial: 6A57F7
Authority key identifier: 0A:70:91:13:44:70:F0:4E:DE:2B:CF:B1:AF:0F:58:AC:2B:5F:12:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/4X1gm-eL3D0m0E48l8OJ3Vq0EOA.roa
Signing time: Sat 01 Jan 2022 01:50:46 +0000
ROA not before: Sat 01 Jan 2022 01:50:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 62.106.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6969335 (0x6a57f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7091134470f04ede2bcfb1af0f58ac2b5f12f3
Validity
Not Before: Jan 1 01:50:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e17d609be78bdc3d26d04e3c97c389dd5ab410e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:0b:7c:7a:93:86:ab:25:51:fc:2b:7e:ed:
31:af:6d:04:f2:bc:ec:4e:f2:fa:b0:eb:12:1d:45:
c4:5f:f3:40:34:81:6a:7e:59:40:f5:59:cf:f5:6a:
2c:e0:1e:2f:8d:31:a0:99:e1:c6:65:09:c9:d2:c7:
a7:15:9d:2d:16:c6:76:3b:cc:f0:c0:4a:f5:00:fd:
c0:ba:79:24:69:38:55:b5:ec:c7:5e:8e:4f:a8:71:
cc:4e:ca:30:ee:fb:53:7d:a6:6d:0f:2a:ad:f0:33:
f4:1d:5b:bd:82:3b:4f:22:97:89:70:68:05:4c:69:
77:d3:3c:a7:d6:65:77:81:60:26:23:2c:db:64:d3:
43:2e:71:ff:d7:58:31:72:be:39:86:ca:19:7a:7c:
67:50:63:28:9a:75:45:53:2b:a1:30:0e:52:f3:de:
9f:64:71:45:69:90:69:27:30:7d:05:37:b6:97:de:
2c:a7:31:2c:26:cf:c5:e6:c4:4e:89:0c:eb:58:5f:
00:af:6d:72:d3:96:f4:35:de:4d:c7:68:5f:0e:5c:
ef:78:4a:d9:b7:72:de:33:9f:39:4a:25:49:77:26:
16:f7:96:26:46:ba:67:d3:30:29:d4:02:23:5e:30:
7b:27:1b:ae:ec:9b:0d:2a:70:21:92:1f:12:f1:f9:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7D:60:9B:E7:8B:DC:3D:26:D0:4E:3C:97:C3:89:DD:5A:B4:10:E0
X509v3 Authority Key Identifier:
keyid:0A:70:91:13:44:70:F0:4E:DE:2B:CF:B1:AF:0F:58:AC:2B:5F:12:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/4X1gm-eL3D0m0E48l8OJ3Vq0EOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.94.0/24
Signature Algorithm: sha256WithRSAEncryption
79:81:15:5c:e8:27:cb:13:c0:39:bd:bd:46:02:10:d5:44:bd:
93:55:97:08:b9:1c:ba:93:fa:c4:87:4f:cf:2c:dd:44:d1:63:
27:91:2c:c0:5f:01:6e:f1:d6:9b:e7:92:20:02:b0:81:12:93:
02:d4:84:dd:74:fe:22:0a:16:30:15:ef:23:44:3b:fd:ec:d6:
91:e4:55:5d:c2:a5:e6:c4:be:ce:d6:3c:bd:8a:c8:88:5d:84:
14:34:d2:2b:ac:b8:5a:b6:f6:5c:8a:5c:e1:e7:02:66:58:c8:
33:b5:79:df:46:de:24:da:21:7f:e8:bd:a1:44:c9:36:37:33:
63:05:5e:40:04:95:1f:a7:12:de:00:34:38:21:7d:af:db:2d:
bb:f7:92:33:34:44:a5:4d:9a:dd:db:08:e1:8d:50:e9:c7:6e:
66:15:b3:9d:64:4c:4d:16:fd:f7:e1:dc:68:87:a7:a8:d8:9e:
42:9b:9d:12:e4:b3:6b:b3:ac:25:54:c1:ee:7d:d6:43:c5:fe:
43:e7:bd:65:c3:13:43:cb:ea:0b:23:17:99:ad:bf:12:71:08:
17:4e:9e:10:6c:29:c0:16:06:b8:86:a1:e5:1b:5d:86:d4:78:
6a:98:15:de:1e:6a:6f:57:a9:fd:a3:44:99:d7:ae:ab:f2:15:
8a:79:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:47 2025 by rpki-client