Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/W5gLui2hXZ7sJI9UIKmvD2JTYpU.roa
File: W5gLui2hXZ7sJI9UIKmvD2JTYpU.roa (raw, json)
Hash identifier: V/XfEAPaTzOxXEzXQ9Ey7h7BlTmoHc+eL3OCteRrtGo=
Subject key identifier: 5B:98:0B:BA:2D:A1:5D:9E:EC:24:8F:54:20:A9:AF:0F:62:53:62:95
Certificate issuer: /CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Certificate serial: 019424B27D74F9A12A8FD08DC88C8D1FEE76
Authority key identifier: 6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/W5gLui2hXZ7sJI9UIKmvD2JTYpU.roa
Signing time: Thu 02 Jan 2025 01:47:44 +0000
ROA not before: Thu 02 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 62.182.102.0/24 maxlen: 24
62.182.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7d:74:f9:a1:2a:8f:d0:8d:c8:8c:8d:1f:ee:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b980bba2da15d9eec248f5420a9af0f62536295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:3c:37:1a:e3:c6:80:7b:5c:17:ae:86:af:
b7:fd:f2:3d:9a:28:ed:78:50:dc:10:4a:97:c9:ee:
cd:f2:73:07:30:27:f4:a4:c4:25:7b:c6:86:b7:21:
2a:9e:93:f3:b0:cb:48:a1:90:02:8b:a6:74:70:02:
2f:80:48:d2:a3:29:39:55:ac:d9:cd:8a:92:41:0e:
23:3c:d1:51:8e:c2:c4:3a:af:54:aa:3c:17:d5:9a:
05:2f:bf:d6:53:9d:93:01:35:68:bb:42:70:1a:82:
09:6a:dc:2a:a2:e3:d0:24:16:b2:48:9c:9b:f4:b9:
4d:b5:89:ca:55:ab:53:94:2e:ff:86:07:cd:10:ca:
c0:f6:9e:92:9b:35:fe:a4:e9:88:b0:f6:77:b0:dd:
a6:a1:ee:0f:07:e3:69:08:bf:69:be:d2:43:c0:4c:
de:5f:29:c3:61:de:0a:fa:c0:75:78:11:49:d4:81:
2b:52:0b:77:01:74:78:13:e8:67:11:45:18:e1:23:
99:76:07:ad:0d:25:d2:df:9c:a7:8a:5d:85:79:61:
fe:ee:c0:b0:dd:84:4a:96:80:8d:db:01:90:ca:e9:
9d:dc:6b:50:7c:75:0b:ea:dc:a7:53:61:01:fe:3a:
01:11:71:ef:84:3c:b1:95:86:ae:fa:4a:0f:f0:95:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:98:0B:BA:2D:A1:5D:9E:EC:24:8F:54:20:A9:AF:0F:62:53:62:95
X509v3 Authority Key Identifier:
keyid:6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/W5gLui2hXZ7sJI9UIKmvD2JTYpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.102.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:47:4c:97:87:07:0a:ad:cf:28:2e:4b:3f:09:e5:4b:d0:18:
5a:38:fb:af:bf:15:5e:ad:e6:84:b7:80:6e:1b:b6:6b:ae:fe:
10:9c:22:8d:b3:16:1f:2c:58:69:61:0d:86:d3:7f:33:db:cf:
5e:9a:97:3f:3a:ae:95:b0:e8:a8:de:31:0e:ae:a9:f6:cc:02:
be:ae:82:79:b8:be:11:60:e7:3f:73:53:e2:76:8e:92:9d:37:
63:c4:f8:1e:7f:7a:c6:29:66:37:04:45:2c:db:08:a5:7f:92:
7e:cc:49:ea:d0:8f:0b:0b:dd:4c:aa:07:37:e2:80:8a:08:bd:
5a:a6:fb:c5:53:f4:56:27:af:17:4d:9c:cb:9b:3a:7c:4c:60:
8e:da:59:f2:eb:d2:e5:42:f9:26:30:83:3a:dc:b4:19:0b:2c:
0e:78:78:dc:ac:5f:54:73:72:4e:04:ef:06:fc:ea:4e:7a:ee:
85:71:80:cd:f1:15:9f:89:ba:f1:2a:15:c6:a7:d3:93:47:a0:
96:3f:7c:f8:45:b3:4d:32:cb:d7:87:f4:04:e1:17:f0:8c:87:
d9:d8:cc:69:92:42:ff:f3:af:96:44:c9:d7:85:fe:dd:6b:13:
83:33:2b:e6:f6:25:39:b2:83:8b:d7:b5:3a:7d:bf:a9:90:81:
3e:13:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:12 2025 by rpki-client