Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/dC_SVH25idqutIbLIZNkW6czqHU.roa
File: dC_SVH25idqutIbLIZNkW6czqHU.roa (raw, json)
Hash identifier: 9Mu85+e8f/QGGIlA+OHY5iElXCixblFhqRYbDBSSZ7g=
Subject key identifier: 74:2F:D2:54:7D:B9:89:DA:AE:B4:86:CB:21:93:64:5B:A7:33:A8:75
Certificate issuer: /CN=b17d969208e19f2fcb9d0ce0be8f72995081d6b7
Certificate serial: 01856D5417F302EDA484584556DA57934731
Authority key identifier: B1:7D:96:92:08:E1:9F:2F:CB:9D:0C:E0:BE:8F:72:99:50:81:D6:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX2Wkgjhny_LnQzgvo9ymVCB1rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/dC_SVH25idqutIbLIZNkW6czqHU.roa
Signing time: Sun 01 Jan 2023 12:35:05 +0000
ROA not before: Sun 01 Jan 2023 12:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50041
IP address blocks: 62.204.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:17:f3:02:ed:a4:84:58:45:56:da:57:93:47:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17d969208e19f2fcb9d0ce0be8f72995081d6b7
Validity
Not Before: Jan 1 12:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=742fd2547db989daaeb486cb2193645ba733a875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:e2:9e:a1:0f:47:d3:3e:56:b3:ff:ad:c1:
5c:30:f5:eb:84:5d:c1:3b:7a:9d:08:bb:fe:6a:a9:
78:40:ed:e8:28:7a:6d:2e:b6:2f:50:76:9d:6a:f7:
77:98:ad:d1:f6:ea:03:3c:c5:21:48:fd:44:a9:19:
89:9e:70:d7:c5:09:b1:a7:04:9d:4b:2f:bb:ea:49:
b6:66:3f:bb:f8:a5:eb:70:87:80:49:77:31:d6:21:
cb:53:2b:3f:dd:f6:2b:97:5c:af:6f:dc:f2:b4:38:
22:6b:1a:fc:41:a4:9e:c2:f2:bc:8d:7c:82:c2:2d:
58:c4:04:f6:ad:32:a3:5b:b8:98:83:ce:26:bd:59:
cd:f2:32:f9:af:24:74:25:94:22:d5:3a:43:9e:82:
5e:20:c5:df:f1:6a:b9:0f:b5:52:43:45:98:19:cb:
32:93:94:12:04:46:1e:b8:03:33:3d:32:e8:b0:16:
08:7a:29:b8:cc:b1:33:9b:fd:fb:8e:e0:c3:9b:9d:
7c:a1:a5:4b:38:90:da:ba:83:2a:95:81:a0:2b:2b:
e0:0d:21:82:87:e1:80:df:94:66:d1:9e:d6:ca:67:
7a:d0:15:29:32:48:79:7d:5a:4a:e5:59:4b:59:2e:
e3:3e:31:22:bc:55:21:63:60:de:bc:81:c9:9a:2c:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:D2:54:7D:B9:89:DA:AE:B4:86:CB:21:93:64:5B:A7:33:A8:75
X509v3 Authority Key Identifier:
keyid:B1:7D:96:92:08:E1:9F:2F:CB:9D:0C:E0:BE:8F:72:99:50:81:D6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX2Wkgjhny_LnQzgvo9ymVCB1rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/dC_SVH25idqutIbLIZNkW6czqHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/sX2Wkgjhny_LnQzgvo9ymVCB1rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ef:b0:d0:6d:13:e6:c8:20:c2:93:bb:40:ce:86:37:4a:19:
48:da:a6:2b:88:75:40:47:83:72:3f:3b:1f:2e:28:ed:34:c6:
7a:4c:c5:e3:39:1a:f0:a5:66:42:a2:7b:16:a8:60:97:b0:61:
95:67:ab:67:d6:5d:4b:f9:0e:a1:61:c9:2f:c6:c6:8c:72:81:
51:6e:73:00:ef:eb:bc:2b:6b:62:0e:fe:b3:68:6c:2c:8d:2a:
48:ea:73:7a:5a:71:f7:1a:05:87:be:ce:65:70:bf:f1:de:b7:
0a:a7:7c:89:ce:8b:7f:1b:c9:ea:f6:bd:ca:dc:e5:cf:65:1c:
db:1b:76:e7:eb:15:01:bf:37:27:e4:d4:52:f1:d5:28:0a:fe:
5d:0c:e9:6a:ff:a8:fb:99:d4:95:2a:b5:ff:e0:02:aa:7a:0f:
19:7f:d7:0c:62:42:a9:92:6f:22:d4:31:d4:93:bf:4c:e8:25:
72:5b:60:18:57:02:b6:da:76:0a:9c:0a:2f:30:3b:29:8f:67:
ec:12:28:18:1e:a0:82:ce:6e:e8:2d:10:86:60:78:0f:43:6c:
08:23:4c:5c:80:bb:05:e5:c6:96:9b:ce:c2:5d:eb:d9:6c:86:
e1:55:f8:85:15:e9:10:83:d1:e8:6a:66:d4:49:16:87:a0:c3:
22:dd:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:54 2025 by rpki-client