Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/ZWoNgJE2wgijpcZVE2FXEnob9TE.roa
File: ZWoNgJE2wgijpcZVE2FXEnob9TE.roa (raw, json)
Hash identifier: /CyCkOMSrvVJiU9CgaQ0DAKHX084njb7odOco7S2qJs=
Subject key identifier: 65:6A:0D:80:91:36:C2:08:A3:A5:C6:55:13:61:57:12:7A:1B:F5:31
Certificate issuer: /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial: 0181D889443C7E98160D42090DF3B0624893
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/ZWoNgJE2wgijpcZVE2FXEnob9TE.roa
Signing time: Thu 07 Jul 2022 12:01:23 +0000
ROA not before: Thu 07 Jul 2022 12:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211332
IP address blocks: 62.3.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:89:44:3c:7e:98:16:0d:42:09:0d:f3:b0:62:48:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
Validity
Not Before: Jul 7 12:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=656a0d809136c208a3a5c655136157127a1bf531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:81:56:68:7e:94:27:a4:4e:57:db:fd:95:
33:93:ab:61:35:b2:c2:11:6c:17:be:83:c1:33:2c:
5e:05:41:9f:18:28:09:fd:8b:a3:23:b8:0d:38:af:
11:22:d8:97:db:65:5f:af:9b:08:4f:62:e3:4a:51:
b2:c5:e4:35:57:7f:f2:6e:d0:06:9d:ef:a6:6f:de:
d0:74:6e:fd:73:16:fe:7a:4a:e0:7b:81:01:11:03:
19:ae:ec:36:9e:de:0a:b9:8c:c4:6f:88:5e:9b:c2:
b7:be:4c:b9:dd:f2:51:50:ad:b4:5b:06:50:4f:9c:
89:00:4a:3d:68:40:90:45:f4:ea:77:4b:64:9f:77:
84:3f:db:a8:ce:8d:81:84:bf:08:85:8b:75:66:b3:
1b:04:8f:f6:63:bc:97:48:5a:f1:89:f0:9b:bf:6f:
ee:86:bf:a1:e6:bc:68:98:f2:ae:c6:a3:78:be:b4:
46:d5:20:a4:bc:5d:f2:c5:40:b1:e2:c9:dd:e7:f7:
7b:2a:68:55:63:ad:05:52:9e:c1:68:a3:f1:2a:cd:
e2:0c:46:c4:40:44:89:8f:f8:21:1f:c4:d9:7d:be:
0e:c0:fa:bb:6c:a7:2c:85:49:4c:ab:88:af:a0:dc:
49:42:11:c2:a0:3c:bb:36:45:3b:22:00:3f:7f:99:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:0D:80:91:36:C2:08:A3:A5:C6:55:13:61:57:12:7A:1B:F5:31
X509v3 Authority Key Identifier:
keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/ZWoNgJE2wgijpcZVE2FXEnob9TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.26.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:b6:25:a4:1a:58:f2:95:ce:68:08:b1:1e:f0:2b:53:b6:41:
c9:5b:17:61:94:68:c9:74:6a:2a:56:dd:32:31:55:e5:83:6c:
fc:dd:b4:a5:58:c6:05:ae:8c:3e:f1:ea:07:59:1c:82:be:68:
d6:5e:9f:14:9c:7d:f4:a0:a8:cc:ce:a2:14:12:12:f4:b8:76:
98:ed:31:43:19:1c:49:71:de:ba:ce:48:8a:99:23:e8:3e:39:
d5:1a:bc:7e:88:a2:d6:57:1c:9f:40:64:88:21:98:3d:8e:7e:
5d:7e:c3:15:1d:fe:7d:3e:37:a9:a4:ad:b0:4b:ee:3e:67:08:
70:f7:0b:e0:65:be:0b:25:f9:d5:3f:01:2b:22:2e:07:98:58:
8c:f4:4b:10:1d:61:d2:7e:3b:24:65:b8:f6:da:be:98:26:df:
ac:3d:8a:df:ab:dd:35:1d:b9:8a:92:83:d6:ec:72:01:ee:f6:
97:e9:c4:78:f4:eb:16:2a:79:e2:50:35:2b:c9:0f:bb:42:85:
4d:71:94:30:7a:29:2c:0b:76:b9:c0:df:1b:5b:73:c4:cb:90:
82:1f:f6:de:f2:16:06:65:e7:25:1c:ca:a6:39:fd:b4:44:e7:
c5:35:79:44:73:a5:82:a3:b9:df:45:fd:c2:25:d8:7c:bc:41:
bf:72:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:08 2025 by rpki-client