Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/A6mU_fy2dvWAW9y9y6qPym3VUYU.roa
File: A6mU_fy2dvWAW9y9y6qPym3VUYU.roa (raw, json)
Hash identifier: B8MQ+q91TtenzRFP6rUUzrDHFdogGVA1RdvfKnJNkfY=
Subject key identifier: 03:A9:94:FD:FC:B6:76:F5:80:5B:DC:BD:CB:AA:8F:CA:6D:D5:51:85
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 019424B3BE18946BBE3B5CDD6C8C9756FE9D
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/A6mU_fy2dvWAW9y9y6qPym3VUYU.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44491
IP address blocks: 62.182.8.0/21 maxlen: 24
2a00:5180:1::/48 maxlen: 48
2a00:5180:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:be:18:94:6b:be:3b:5c:dd:6c:8c:97:56:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03a994fdfcb676f5805bdcbdcbaa8fca6dd55185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:9c:5a:39:b4:05:dc:f0:ba:04:a7:ab:15:
17:16:13:f5:4e:78:37:e6:ee:4a:17:b7:d4:80:52:
28:ff:d4:00:96:c0:3a:0d:21:7c:bf:39:92:39:52:
65:4e:ec:a8:11:8e:07:e2:17:5b:92:38:bd:d9:82:
38:ef:f2:94:3c:0e:eb:e3:0a:ca:2f:3f:02:9e:00:
ac:51:8d:41:9c:33:2b:e3:a9:83:de:ef:81:d0:ee:
87:88:ae:63:2d:b0:2e:ac:85:4b:7f:13:95:06:7e:
45:f0:81:1e:ab:27:a8:b7:45:c7:80:fb:27:2d:5d:
b9:05:2c:74:0d:9b:f7:ad:7f:21:69:14:e3:43:2d:
9e:0d:cd:08:2f:96:08:55:4e:57:18:36:e9:1c:be:
13:64:6d:d7:03:bd:60:9f:63:69:ad:a4:ed:98:db:
13:1b:be:9b:2c:ef:13:66:7f:43:03:22:78:6a:29:
b4:91:c7:41:ec:fa:5a:11:ea:e9:f9:78:8c:c6:df:
9e:23:93:bc:02:19:73:16:d9:22:ad:67:ba:6d:54:
67:30:42:4e:c1:a1:64:85:c6:3e:83:b3:b5:60:c5:
bb:6e:60:f0:98:e3:28:10:36:90:0f:01:dd:77:4b:
9f:ee:cc:17:f3:75:a8:30:3f:29:78:ac:07:c2:09:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A9:94:FD:FC:B6:76:F5:80:5B:DC:BD:CB:AA:8F:CA:6D:D5:51:85
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/A6mU_fy2dvWAW9y9y6qPym3VUYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.8.0/21
IPv6:
2a00:5180:1::-2a00:5180:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:9c:29:09:66:d0:19:f6:03:f2:b4:0c:41:70:9e:d2:4c:0c:
83:76:df:84:f5:40:e5:8d:08:b2:7d:46:2f:ce:db:91:6f:a9:
86:0d:a2:d8:26:43:27:a0:31:84:c5:0e:b8:4c:ba:73:31:44:
bd:dd:99:cb:77:9b:af:29:a2:f5:d9:54:c6:f6:ca:58:fb:f9:
a1:e9:91:52:2d:17:ef:11:c7:b9:e6:6a:1e:11:e5:0a:0f:2e:
66:12:47:45:6e:0a:b8:cd:40:9f:90:82:f5:8c:43:bb:9f:ec:
29:bc:3c:85:24:6f:f6:2a:1e:f3:ae:78:7f:b7:5b:87:7b:b5:
53:a0:04:12:57:71:67:2d:1e:d1:8d:71:7e:cd:c4:3e:75:de:
d2:b6:ed:22:64:12:3c:98:e4:0b:d2:91:43:00:96:8d:2e:78:
b4:35:74:05:90:0f:1e:a9:6e:24:00:21:c8:c1:b2:22:19:80:
04:d2:b6:98:54:f1:67:21:dc:75:bd:52:82:69:27:61:ce:7a:
29:44:6f:09:7c:73:30:f9:36:61:6d:ea:57:2f:4b:a4:16:dc:
fb:3a:c9:ef:df:75:15:32:86:2a:7c:bb:8d:6b:a4:1d:0a:37:
1d:d7:a7:21:cd:59:71:dd:d0:80:75:3a:9b:76:85:62:f7:f4:
90:39:19:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:45 2025 by rpki-client