Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/fZ9Qvm03MACcF4E4Q9MwKvPNQnA.roa
File: fZ9Qvm03MACcF4E4Q9MwKvPNQnA.roa (raw, json)
Hash identifier: gsQs+tdDTZ+uP2RTF72QeyvwQZj7DkX5BmTdxb404qw=
Subject key identifier: 7D:9F:50:BE:6D:37:30:00:9C:17:81:38:43:D3:30:2A:F3:CD:42:70
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5AF47B9E7E1383D7956E75C0B7470
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/fZ9Qvm03MACcF4E4Q9MwKvPNQnA.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39552
IP address blocks: 62.160.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:af:47:b9:e7:e1:38:3d:79:56:e7:5c:0b:74:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d9f50be6d3730009c17813843d3302af3cd4270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:6f:0c:32:4d:02:2f:f4:a6:a7:88:24:44:
cf:24:af:37:58:a2:d2:45:9a:25:fd:cf:24:13:e8:
92:dc:1a:be:f1:be:2e:fb:de:54:bd:fc:71:c0:93:
a0:1c:61:e0:20:f0:ac:9f:b8:4f:a6:8e:d4:46:75:
e2:34:08:f7:03:95:58:44:a9:44:13:c1:05:08:8c:
01:ba:d5:88:dd:2f:1d:42:de:21:da:83:a6:46:ff:
12:a9:3b:05:58:c8:68:af:80:83:a2:87:b7:3c:a5:
a2:a0:69:5b:69:f1:70:64:d8:fd:88:cf:45:54:a2:
1e:cc:bd:e8:ac:f2:dc:68:58:6e:cc:15:3a:5c:81:
a0:42:aa:ad:c5:7f:ee:ff:b6:a3:03:53:92:09:38:
00:38:d9:4f:57:82:43:8b:70:1a:97:59:c6:58:cb:
38:7b:81:3c:0f:c9:17:46:af:7b:1f:8f:a2:da:c7:
5c:6f:49:51:f8:e2:31:31:7a:8e:9c:fd:86:39:6a:
91:74:3b:b5:46:e4:0e:54:fa:89:5c:e8:9e:fe:94:
36:50:06:2d:f2:80:25:19:2f:bc:ed:95:67:33:ca:
6c:54:4e:c6:93:ee:6a:5d:ef:55:16:32:41:fe:89:
d4:bf:85:18:38:41:7d:93:e8:3a:8c:c0:c3:6a:7d:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:50:BE:6D:37:30:00:9C:17:81:38:43:D3:30:2A:F3:CD:42:70
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/fZ9Qvm03MACcF4E4Q9MwKvPNQnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.160.183.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b5:b4:b7:ab:28:eb:76:bf:85:db:c4:d8:39:cf:64:cb:d8:
68:b2:57:e2:20:11:7c:b7:be:ba:8c:5e:e5:89:f9:d9:07:4e:
87:1c:0e:96:d1:85:6b:6c:79:32:cc:c3:09:2d:ca:19:ab:eb:
db:23:fc:2f:64:b6:7e:7e:ef:a5:7c:29:e7:03:fe:b5:67:a0:
fe:b5:f0:a3:c8:61:a2:f6:e7:2f:cb:cc:c4:53:4f:19:8e:65:
1f:8d:45:71:8a:90:12:d5:95:15:08:d6:0d:67:6e:d8:72:32:
ca:a5:1b:e7:1a:40:57:1a:72:c4:cf:2c:cb:84:79:95:61:ed:
6c:50:ba:bb:26:24:cd:e4:1d:69:5a:e0:4a:6b:4d:78:f0:96:
f5:f3:34:8e:bc:99:54:6d:5d:69:98:a1:0f:a5:68:00:69:eb:
28:42:aa:11:fa:42:2e:79:92:f6:c3:c5:d2:e0:04:3b:2a:90:
70:e0:2d:72:47:b9:26:bc:bd:c8:74:5b:74:32:29:41:6e:a5:
66:4a:92:93:b3:96:01:0b:e4:7b:e8:a8:95:6b:e0:3a:89:59:
1c:85:bf:f1:e6:37:08:23:61:d6:09:92:ec:86:0f:9d:08:6c:
25:3a:55:2d:7f:3e:94:ca:9e:c6:e6:ad:f1:cd:b2:cd:11:15:
f4:ef:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:25:52 2025 by rpki-client