Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/f02xuW50J3t9p3sU5kWPfIB_adQ.roa
File: f02xuW50J3t9p3sU5kWPfIB_adQ.roa (raw, json)
Hash identifier: iPHZ1XpkiPzicP62c+f/x0doG8DeO78eW6ORgJljZZY=
Subject key identifier: 7F:4D:B1:B9:6E:74:27:7B:7D:A7:7B:14:E6:45:8F:7C:80:7F:69:D4
Certificate issuer: /CN=b6bb794ce87aa867c8a757342f80d0da5fe81594
Certificate serial: 7BA6
Authority key identifier: B6:BB:79:4C:E8:7A:A8:67:C8:A7:57:34:2F:80:D0:DA:5F:E8:15:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/f02xuW50J3t9p3sU5kWPfIB_adQ.roa
Signing time: Tue 05 Apr 2022 16:25:47 +0000
ROA not before: Tue 05 Apr 2022 16:25:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206402
IP address blocks: 62.68.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31654 (0x7ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6bb794ce87aa867c8a757342f80d0da5fe81594
Validity
Not Before: Apr 5 16:25:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f4db1b96e74277b7da77b14e6458f7c807f69d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:7b:c2:ea:09:ec:7a:86:72:19:72:f7:c6:
c3:22:9d:2b:1e:4f:18:73:d8:86:84:d5:48:3d:78:
db:17:94:d7:12:1f:49:73:c1:20:52:75:28:1d:ee:
53:39:04:ac:bf:8c:15:84:dd:07:5a:72:bc:e0:e4:
d7:4d:f5:37:9a:01:c4:50:7b:ff:6a:3b:0f:1a:a8:
33:9a:6e:a1:ee:53:6a:79:db:2c:c8:d9:0e:13:b3:
b8:3f:ed:2a:4f:39:72:8c:ec:62:55:02:44:f0:f9:
f1:b6:fe:eb:87:c6:70:60:a5:22:d5:a9:5d:f9:18:
1d:8b:a6:3a:9d:f5:a7:df:d9:12:62:d8:f6:5b:0f:
5b:f2:6e:a1:d0:20:f6:ab:50:b4:01:0e:58:4e:d6:
f1:a0:e2:b0:00:c4:09:08:f1:0d:71:49:46:32:38:
2b:49:e3:27:a9:88:f1:93:aa:0c:2d:33:ce:f8:46:
95:08:5e:84:1f:3c:17:18:cf:90:26:1f:8b:bf:95:
e9:c1:02:e4:6b:3a:1d:70:fd:75:a7:af:0d:2c:2f:
2d:51:9d:00:27:3a:48:30:69:1b:96:92:b1:ac:a6:
0b:c8:58:0f:14:2c:f4:58:91:70:0c:fd:d2:2a:c9:
b4:c3:0d:d1:a2:c1:3c:11:8d:cf:44:fe:e2:3e:04:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:B1:B9:6E:74:27:7B:7D:A7:7B:14:E6:45:8F:7C:80:7F:69:D4
X509v3 Authority Key Identifier:
keyid:B6:BB:79:4C:E8:7A:A8:67:C8:A7:57:34:2F:80:D0:DA:5F:E8:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/f02xuW50J3t9p3sU5kWPfIB_adQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ae:04:97:8b:92:8b:f3:35:6b:68:51:19:2f:50:65:be:59:
be:37:e3:b7:b9:05:56:ac:7a:e2:fc:ca:17:3c:0d:ae:3b:76:
9a:30:e6:af:64:ad:2c:b6:d6:a4:10:d5:d1:d9:4f:9f:9a:03:
37:ad:3f:3e:f6:df:71:8b:98:de:f5:1f:f3:59:6f:64:24:a3:
17:5b:d9:2a:e5:54:9b:45:20:3c:2e:9d:c2:da:21:c6:96:0b:
4c:85:f3:58:60:09:cd:1c:1e:84:2d:87:36:76:6e:3f:f0:5e:
aa:a7:10:d3:ec:e5:69:ba:28:f6:1c:20:80:cc:33:da:d1:4e:
f9:b2:4d:b9:5a:81:50:90:66:e4:6e:5c:fc:39:0f:62:30:6a:
8f:f2:4d:96:98:7a:fa:0b:8e:a9:76:68:d8:47:80:24:48:34:
cd:da:5f:da:35:cc:af:4d:6a:38:10:52:3b:60:40:8d:ce:ce:
bd:dd:65:b0:c4:95:0c:1e:f0:8a:76:f4:05:e0:77:c8:0c:5a:
a9:8d:69:59:a7:cf:55:4a:94:74:b2:44:e8:ae:7c:9d:10:10:
41:53:6a:a8:6e:e1:0f:30:90:7d:73:93:57:a0:60:20:57:ed:
3b:c6:3f:49:94:90:cc:2e:1f:cf:cc:f8:df:11:ef:22:aa:7f:
12:e7:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:28:30 2025 by rpki-client