Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/294F80d0pyuOm6BfUgoaFMikAvM.roa
File: 294F80d0pyuOm6BfUgoaFMikAvM.roa (raw, json)
Hash identifier: JRPROpHxUf8QG+jNSCTeW6SSHCCOJl3B2SZjl8zhp5I=
Subject key identifier: DB:DE:05:F3:47:74:A7:2B:8E:9B:A0:5F:52:0A:1A:14:C8:A4:02:F3
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01959E1EFE08D484F0F04B949D9FA23CC476
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/294F80d0pyuOm6BfUgoaFMikAvM.roa
Signing time: Sun 16 Mar 2025 08:43:06 +0000
ROA not before: Sun 16 Mar 2025 08:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 62.72.180.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9e:1e:fe:08:d4:84:f0:f0:4b:94:9d:9f:a2:3c:c4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 16 08:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbde05f34774a72b8e9ba05f520a1a14c8a402f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:6f:04:a5:4b:6a:43:8c:4d:9a:5e:6b:b9:
ae:76:db:b9:e5:1a:b2:ba:ce:da:40:cd:bb:ac:86:
e2:6c:08:47:33:22:a6:41:54:d2:1a:5b:5d:2f:52:
f6:f2:e4:ba:55:42:4c:e0:73:58:01:fd:66:c4:90:
b4:3f:ab:d3:28:75:6f:2f:1a:bf:5d:65:57:22:10:
d3:09:e1:45:bb:a2:06:9b:10:1c:f4:d3:9d:44:a7:
d7:a3:51:db:3c:e0:57:b3:e8:4d:21:49:f3:1d:c5:
cf:32:6b:04:4a:9e:13:2a:9a:48:f5:8a:f6:08:fb:
10:45:40:e9:00:30:30:86:b4:01:7d:c0:0c:b6:2b:
b3:72:fd:8e:92:b9:c4:df:7d:38:af:7f:8c:ff:69:
c1:ee:b3:8a:44:fc:13:61:30:1b:f2:dd:ad:e3:96:
70:d3:3d:56:9c:eb:8f:9a:da:e6:ae:80:56:80:07:
37:95:c7:be:de:c8:7b:69:d1:ce:31:56:10:42:3b:
43:33:73:e7:22:94:91:33:76:7e:4c:88:de:a4:b9:
b4:49:44:91:d7:2e:27:95:33:8b:aa:cc:f7:0c:e3:
71:af:85:9e:58:14:a3:8f:84:f0:2a:b5:ae:4c:50:
8b:03:21:4e:3b:81:5d:44:bf:e5:48:ed:e9:8a:09:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:05:F3:47:74:A7:2B:8E:9B:A0:5F:52:0A:1A:14:C8:A4:02:F3
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/294F80d0pyuOm6BfUgoaFMikAvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.180.0/24
176.57.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:dc:c1:52:ec:37:17:ac:9b:bf:e7:c9:5a:70:70:cb:3b:30:
01:44:e5:3a:14:e4:0b:f1:4d:61:9c:00:2c:67:ec:1e:4f:91:
c4:01:fb:77:ac:35:3e:6a:85:b5:4b:f5:e5:f7:bb:97:e5:9c:
04:9c:73:31:eb:f3:ca:d8:e9:21:4b:53:5e:88:fc:e8:cf:1d:
83:64:53:ef:85:ba:7c:8d:a1:ef:1c:cb:b3:47:83:b1:88:30:
ef:24:8f:12:bb:a5:7d:66:05:ca:1c:0f:ac:96:17:7a:b1:ba:
e4:e4:a3:d0:c7:01:e1:9d:ad:52:b1:b0:1a:a3:2d:b8:d8:ee:
53:10:41:fb:8f:ac:86:27:31:9c:af:41:fb:9e:ef:a6:12:39:
c2:2e:c0:7a:aa:c1:01:6e:c0:a0:6d:99:4d:f3:9b:0a:eb:ab:
2b:b8:61:94:84:24:48:3a:6b:31:47:5c:2f:eb:56:c5:b9:05:
bd:ac:39:3a:78:b2:35:c6:3c:86:0e:2f:46:e9:d4:ac:ff:84:
3a:a7:5d:fc:8a:4b:61:cf:eb:f8:c7:75:a2:c2:54:7e:98:15:
15:4c:4d:74:b1:18:3d:3b:aa:2f:02:06:58:d7:73:69:8d:46:
6d:20:90:89:da:1a:2a:54:74:2c:43:b6:7e:17:e5:25:03:95:
41:08:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:59:26 2025 by rpki-client