Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/j5kHQCaEenP__bZPNS2iggfKEms.roa
File: j5kHQCaEenP__bZPNS2iggfKEms.roa (raw, json)
Hash identifier: cmUGu4gmc/TtA7RdSXpFeJC6xcORf7vhxxcbpSARkYc=
Subject key identifier: 8F:99:07:40:26:84:7A:73:FF:FD:B6:4F:35:2D:A2:82:07:CA:12:6B
Certificate issuer: /CN=c7feaeab4d5c1c02291ddfbe8812a61426454fea
Certificate serial: 0186DFC83D102A94CC654DE1034E2501FB36
Authority key identifier: C7:FE:AE:AB:4D:5C:1C:02:29:1D:DF:BE:88:12:A6:14:26:45:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_6uq01cHAIpHd--iBKmFCZFT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/j5kHQCaEenP__bZPNS2iggfKEms.roa
Signing time: Tue 14 Mar 2023 11:01:27 +0000
ROA not before: Tue 14 Mar 2023 11:01:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211005
IP address blocks: 62.3.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:c8:3d:10:2a:94:cc:65:4d:e1:03:4e:25:01:fb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7feaeab4d5c1c02291ddfbe8812a61426454fea
Validity
Not Before: Mar 14 11:01:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f99074026847a73fffdb64f352da28207ca126b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:56:7d:08:23:a8:cf:bd:da:d2:1d:3b:bf:
f7:80:33:b8:79:52:44:a7:bf:cc:2a:d1:02:87:ec:
2f:89:0b:80:eb:42:35:f7:59:bd:1a:b2:52:04:fd:
9d:fc:2d:43:45:81:ba:f6:c7:b4:29:9b:ab:34:23:
67:9d:d9:cf:f2:b1:47:79:7b:15:ab:8c:84:b4:30:
ed:7b:95:62:2d:e6:2e:90:09:c7:7f:c1:49:5c:a7:
ad:8c:de:12:38:52:52:c9:b1:9a:d8:94:50:a3:b3:
2b:2a:1e:d4:59:e4:98:44:5c:b7:be:ca:c4:7a:15:
6a:27:14:a2:ee:fd:00:31:2e:fb:5d:b3:91:e0:34:
e0:26:d1:57:d2:24:f7:74:2b:f8:68:93:cf:78:17:
8c:a9:99:96:b1:06:71:c3:49:8b:07:da:bf:61:25:
1c:4f:1f:5f:f1:07:70:bd:a8:e4:80:c1:24:19:a5:
90:90:62:d9:5a:5d:a9:bf:c9:62:06:cd:6a:70:df:
35:37:d5:3f:f0:7c:a1:6d:31:7b:07:9e:5e:ad:b8:
f4:a6:9e:49:86:e0:02:a3:24:e6:5c:40:a8:c1:df:
db:07:5a:b1:59:84:c1:be:6c:d6:8f:be:32:af:dd:
e0:f3:af:77:e5:86:f8:b2:b4:d7:61:dd:fe:dc:49:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:07:40:26:84:7A:73:FF:FD:B6:4F:35:2D:A2:82:07:CA:12:6B
X509v3 Authority Key Identifier:
keyid:C7:FE:AE:AB:4D:5C:1C:02:29:1D:DF:BE:88:12:A6:14:26:45:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_6uq01cHAIpHd--iBKmFCZFT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/j5kHQCaEenP__bZPNS2iggfKEms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3b0823-cb69-4f8e-8f08-78d554c18e8a/1/x_6uq01cHAIpHd--iBKmFCZFT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.37.0/24
Signature Algorithm: sha256WithRSAEncryption
72:16:26:81:4b:5b:db:23:11:d1:99:3c:2a:68:93:10:20:8d:
18:54:40:13:68:88:14:12:71:1c:24:88:8f:c2:4e:66:14:e7:
ca:fb:0f:f3:da:bc:52:80:da:5c:4f:a2:60:4e:8f:cc:95:c3:
b4:32:b7:a4:e3:b1:b3:04:62:b3:a9:15:fb:33:fa:25:e3:d8:
cb:eb:26:86:2b:e7:b0:83:e6:19:bd:d7:d8:5d:5a:84:bf:68:
94:fc:36:a0:82:41:f3:99:93:e0:f0:5a:c8:bb:ea:0e:94:70:
5d:98:0b:a6:40:3c:35:32:36:f3:fe:42:ab:ef:a1:e4:70:e4:
79:79:31:bc:83:b6:c3:f1:bf:b1:92:de:53:6f:14:6c:e0:8d:
9a:ee:7c:41:c9:1d:5d:a6:6c:26:5f:be:0a:9d:ec:2c:29:a6:
54:ac:10:b3:21:f8:af:2f:4d:89:4b:01:59:76:9c:83:44:55:
99:1c:a6:8f:d0:97:e0:9b:1a:89:c5:1f:41:29:d3:55:d0:ad:
c0:90:46:57:4d:86:18:8f:3f:f9:f6:be:83:4e:77:bc:3f:81:
c6:14:c4:c0:ac:c6:2b:a6:3d:50:96:70:d2:6c:ed:ed:bb:72:
ad:ee:e1:98:ea:cd:ac:67:24:a2:eb:ab:1a:6d:76:10:6d:d6:
2f:0a:02:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:09:52 2025 by rpki-client