Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/O-5F8n-juBk2nYl1gci_-XOB28Y.roa
File: O-5F8n-juBk2nYl1gci_-XOB28Y.roa (raw, json)
Hash identifier: q4H/W5/riiS15ohKwn5Jvpq3eN+EVAlqCfqt3wMvB5o=
Subject key identifier: 3B:EE:45:F2:7F:A3:B8:19:36:9D:89:75:81:C8:BF:F9:73:81:DB:C6
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0195D270E97B181CB32B450B14C74FD0C772
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/O-5F8n-juBk2nYl1gci_-XOB28Y.roa
Signing time: Wed 26 Mar 2025 12:32:49 +0000
ROA not before: Wed 26 Mar 2025 12:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 62.233.59.0/24 maxlen: 24
188.191.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:70:e9:7b:18:1c:b3:2b:45:0b:14:c7:4f:d0:c7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Mar 26 12:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bee45f27fa3b819369d897581c8bff97381dbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:7f:7b:27:3e:79:47:ae:48:4d:5e:00:34:
f9:cc:3c:bc:f6:52:10:e8:1a:94:45:ab:b2:10:3b:
b2:74:73:47:2a:ae:15:4f:e4:9e:2b:e2:58:2e:b8:
d3:76:9c:d1:e8:29:69:ed:23:ad:b5:f1:f1:e2:51:
5c:b3:56:12:34:70:3c:f6:26:da:bf:e2:c6:ae:3d:
5b:77:7c:21:af:c3:3e:e6:ce:63:46:d5:9f:61:26:
c4:ae:72:4a:5a:90:2c:b2:e1:16:b1:39:c6:d1:e6:
28:62:3c:f1:c5:db:53:7a:99:8a:7e:5f:ab:b1:37:
bc:5d:f9:e0:ea:3b:fb:3d:52:f9:00:54:8e:ea:86:
b3:a6:43:29:f0:7e:b0:87:a5:fd:89:1d:0f:c9:35:
b9:cc:d4:b4:dd:36:98:44:29:9f:ac:df:76:a7:d4:
cd:01:41:8d:5e:2b:ae:70:8a:7c:d9:bd:f6:f4:a7:
2c:ec:eb:7c:51:54:ff:81:db:45:cb:36:a5:1a:4e:
2b:73:de:9d:5a:df:b0:0d:f7:17:a1:d5:bc:87:ef:
e6:9f:63:45:74:de:cb:34:c1:de:3f:a6:07:ef:ea:
17:95:6d:9c:1b:66:46:a2:a8:6b:f0:27:78:57:ae:
7a:c2:66:e9:23:20:6a:ba:78:1b:71:3d:78:d3:2d:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EE:45:F2:7F:A3:B8:19:36:9D:89:75:81:C8:BF:F9:73:81:DB:C6
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/O-5F8n-juBk2nYl1gci_-XOB28Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
188.191.104.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b4:a2:dc:3f:a6:ca:0f:fb:20:89:4b:f9:b9:ce:cb:f9:bf:
5b:d7:3c:05:b9:ed:86:13:92:4b:72:97:0a:fb:05:db:32:52:
88:37:57:47:52:fc:6d:19:fd:cb:8b:d4:65:4f:c5:39:61:c0:
69:28:a5:5e:3a:1d:d9:4d:ee:f1:ba:1c:81:a7:f7:70:75:ea:
d9:49:ff:89:da:b3:0a:d4:e9:75:eb:a4:21:4d:dc:b4:23:28:
99:ee:38:f4:ea:0c:ee:85:5a:2f:97:0b:24:bf:fd:33:2c:98:
75:04:2b:64:a6:fc:30:fa:07:30:16:f7:91:90:18:2c:16:19:
0a:47:47:89:51:43:79:02:fc:70:2a:08:c4:79:f5:db:fe:5c:
75:3f:52:fe:1f:5f:ac:80:12:a6:c7:ac:53:82:0a:58:2b:f2:
53:ae:8e:63:a3:87:34:46:ca:9e:30:0f:39:a2:23:ea:0e:1d:
ae:c1:6d:db:82:97:17:a2:92:92:2c:86:70:fa:e0:0a:20:76:
36:80:42:75:31:e6:3a:bc:85:b7:68:ec:67:c3:c6:8d:76:80:
46:b3:b5:2d:89:0f:30:5d:5e:49:8b:5e:ac:4c:84:b8:f4:a8:
c5:59:6d:d6:db:b6:18:0c:36:44:03:db:26:fd:07:60:fc:95:
f3:6b:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:44 2025 by rpki-client