Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/r8ytgsic4_7SuQjYaow4WSfaVjw.roa
File: r8ytgsic4_7SuQjYaow4WSfaVjw.roa (raw, json)
Hash identifier: ToN2D3jyQtDasRpvVEGEg1FM8h5lcAmWzwD1hO2ELP8=
Subject key identifier: AF:CC:AD:82:C8:9C:E3:FE:D2:B9:08:D8:6A:8C:38:59:27:DA:56:3C
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0195CD407A32E58894EAD5BFB3D537BDABEE
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/r8ytgsic4_7SuQjYaow4WSfaVjw.roa
Signing time: Tue 25 Mar 2025 12:21:49 +0000
ROA not before: Tue 25 Mar 2025 12:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.233.59.0/24 maxlen: 24
185.227.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:40:7a:32:e5:88:94:ea:d5:bf:b3:d5:37:bd:ab:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Mar 25 12:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afccad82c89ce3fed2b908d86a8c385927da563c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:5f:80:72:dc:e4:c9:d6:5c:d3:0c:58:39:
c3:e0:78:83:77:0e:9f:04:27:b9:c7:b0:1a:25:d9:
58:13:e4:51:b4:e5:c6:1d:db:21:af:d3:fc:33:a8:
0f:d1:e8:75:3c:a6:4d:4f:b8:a3:d1:68:4d:0a:da:
09:70:b6:2f:13:fe:36:a8:02:11:8b:f7:c3:ba:7a:
43:58:ee:a7:44:b5:24:d4:13:74:4d:b1:f9:12:cc:
44:7f:a2:e9:23:95:2f:06:06:35:8f:7d:0d:cc:35:
f6:f6:bf:54:9b:45:a0:4a:6b:c2:9b:68:13:26:7a:
da:1a:db:f9:a6:04:bd:88:2d:dc:64:4b:39:86:65:
f8:d3:6f:53:98:f4:01:9b:77:71:41:5a:67:17:d8:
54:ac:fa:4e:b6:d7:5a:4c:a8:be:9d:46:21:c7:a2:
54:49:d2:ee:f8:d7:fe:90:3d:a3:1f:04:d0:b6:9a:
33:bd:91:d4:2a:3e:4e:c6:97:1f:32:43:5d:28:13:
ee:00:6d:bf:21:e4:40:46:aa:ed:90:b4:31:99:cb:
80:c9:31:21:a7:fa:b6:ba:d5:dd:c2:36:dc:ff:54:
e8:1d:83:9d:f6:c1:71:be:9a:b0:3b:90:0b:28:88:
3c:8a:9a:ad:67:26:51:6a:12:51:d0:4f:d2:f8:c1:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CC:AD:82:C8:9C:E3:FE:D2:B9:08:D8:6A:8C:38:59:27:DA:56:3C
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/r8ytgsic4_7SuQjYaow4WSfaVjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
185.227.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e2:e2:7a:0e:a3:b1:a7:70:27:67:1f:02:f5:95:6c:69:78:
fd:22:91:65:c6:96:41:c6:4e:44:c2:8c:b4:20:0b:57:22:0b:
48:32:14:bf:14:0a:b3:b8:99:49:79:99:7c:79:1e:0b:d3:26:
94:20:0f:87:30:62:98:00:8b:40:bb:95:01:91:ea:67:86:bd:
01:e1:27:4b:49:85:26:dc:69:62:a5:bd:3e:0a:f0:a5:c9:19:
24:45:cb:f3:83:bc:30:a3:01:d5:c6:0d:b6:3c:b8:b1:19:59:
8a:95:23:9b:15:cd:24:82:d5:4e:fb:df:9a:8f:9c:d5:71:f9:
c9:0b:0b:99:bb:04:e4:c6:52:5d:95:22:13:f3:9b:7f:01:e7:
2e:38:31:ad:f4:bd:a6:90:4d:1c:df:0b:70:d9:1e:cb:34:da:
d1:a2:a3:ce:82:65:43:21:64:06:ed:85:9c:b6:8e:91:23:6b:
a1:fb:89:49:69:ac:c5:52:f7:36:17:3e:21:07:7f:e5:66:d0:
f8:4e:8a:38:6e:4c:98:0a:e4:05:47:01:6a:76:2e:0d:59:30:
7e:da:68:15:7c:9d:95:fa:3d:7f:74:75:cc:c0:94:64:c7:7e:
32:e4:0c:89:1a:e8:37:0a:57:11:07:73:a6:b7:ff:68:0f:8a:
9f:2a:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:28 2025 by rpki-client