Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/4jc-hjmRdk1lfvqW7pD1yH-62U4.roa
File: 4jc-hjmRdk1lfvqW7pD1yH-62U4.roa (raw, json)
Hash identifier: XSAnQTXL+OqTbYfqP3b+oavGmS2YLnrjLCx2Rcq3FVg=
Subject key identifier: E2:37:3E:86:39:91:76:4D:65:7E:FA:96:EE:90:F5:C8:7F:BA:D9:4E
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01947FA4B02839BDB55647018B6AA1F94145
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/4jc-hjmRdk1lfvqW7pD1yH-62U4.roa
Signing time: Sun 19 Jan 2025 17:38:06 +0000
ROA not before: Sun 19 Jan 2025 17:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 62.171.230.0/24 maxlen: 24
213.18.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7f:a4:b0:28:39:bd:b5:56:47:01:8b:6a:a1:f9:41:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 19 17:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2373e863991764d657efa96ee90f5c87fbad94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:a3:06:18:51:4d:c5:b1:25:1b:6f:fc:e5:
7c:30:4b:00:ee:69:00:13:60:c9:43:68:8c:31:6c:
cc:34:4e:d0:2d:32:23:76:3f:4b:e5:e6:41:ff:e8:
45:4e:14:3b:58:5a:93:3e:bc:3a:06:82:7f:95:1a:
be:23:7f:1a:94:d7:39:0b:22:79:4b:11:cf:39:de:
bc:8e:5b:94:fb:2c:df:73:91:f6:b9:36:61:94:5d:
43:21:94:87:17:f3:7a:2f:2d:0d:6c:c5:bc:ba:47:
d4:b6:e4:99:4c:fb:cb:6f:08:2a:6b:46:51:ed:20:
8e:f3:81:7d:0c:24:aa:4a:79:b2:b9:a5:d3:d3:f4:
e8:d6:31:83:3d:4a:e3:a6:ad:7f:d8:18:92:00:98:
8b:04:ff:5b:64:86:bf:c9:d3:c1:14:db:6f:86:82:
55:30:5c:dd:cd:c3:b5:cc:1a:b6:6b:a6:10:a3:53:
1d:45:f6:f4:91:35:18:5f:66:f1:b6:d5:f9:f7:9d:
29:c2:ca:1d:0e:e6:d6:03:d8:04:23:89:63:be:e1:
47:49:96:eb:c9:24:29:01:a7:aa:3c:94:45:42:03:
05:36:0c:ee:a9:0d:ad:e5:53:81:dc:7e:07:27:3e:
3b:23:32:79:9f:56:2b:6c:5e:61:74:78:9b:6b:ab:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:37:3E:86:39:91:76:4D:65:7E:FA:96:EE:90:F5:C8:7F:BA:D9:4E
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/4jc-hjmRdk1lfvqW7pD1yH-62U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.230.0/24
213.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
27:06:08:03:97:53:15:bc:91:5f:96:1c:48:b4:c8:40:f1:84:
7b:a2:3d:6f:78:5a:31:f2:b6:0e:3f:f5:3e:b5:c4:a6:f5:1c:
b0:f8:a2:2e:cd:6e:d7:93:50:a2:3e:4b:a8:6a:bb:3a:9f:41:
d9:c9:db:fc:80:75:03:9b:99:f9:5e:76:34:40:75:0b:a8:f1:
c5:7c:f2:dc:be:f2:73:c5:30:db:3a:2a:62:b9:33:df:3d:cb:
b8:44:88:40:57:ea:0d:95:cb:e5:09:d4:b4:b1:61:fa:a0:b5:
c1:83:62:6a:6d:89:56:80:6e:69:1b:db:79:d6:0b:4a:54:36:
cb:04:76:2d:92:eb:79:4b:e7:1e:3f:39:fb:34:08:a2:ea:6a:
31:81:b9:f9:aa:6c:10:f9:17:b0:df:5c:58:c0:33:3b:f0:6f:
b4:73:e9:c6:c6:8d:8a:61:6b:a9:bd:5b:be:5e:dc:58:3e:b1:
2a:8a:d3:29:ac:9b:50:71:8e:eb:7d:ba:54:f9:41:4f:e2:a4:
0c:b5:5b:3c:9b:19:eb:d3:32:e3:fc:24:e7:03:1f:b9:31:46:
f5:f8:b0:07:71:a7:dd:fc:e8:dc:c8:70:34:45:51:39:9b:78:
23:b2:2d:cb:50:21:bf:34:50:b4:ab:49:8c:06:45:98:8e:cc:
c2:86:c3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:49 2025 by rpki-client