Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/LF6dF_VT3QtcYPznHVqeLHnLYbY.roa
File: LF6dF_VT3QtcYPznHVqeLHnLYbY.roa (raw, json)
Hash identifier: bxEhbvWwJ1lPZWvcpTDbbFtyf4z4sIVRNx+TGcckJYA=
Subject key identifier: 2C:5E:9D:17:F5:53:DD:0B:5C:60:FC:E7:1D:5A:9E:2C:79:CB:61:B6
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B8676B89CF3D3F1082F096998383F
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/LF6dF_VT3QtcYPznHVqeLHnLYbY.roa
Signing time: Thu 02 Jan 2025 09:49:28 +0000
ROA not before: Thu 02 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203206
IP address blocks: 62.228.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:86:76:b8:9c:f3:d3:f1:08:2f:09:69:98:38:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c5e9d17f553dd0b5c60fce71d5a9e2c79cb61b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:40:3b:68:82:d9:91:30:07:8a:de:f4:c9:22:
07:b6:eb:3c:0d:0b:a3:97:a2:a9:1d:9a:16:8a:98:
30:c5:c2:68:83:2a:0f:c1:57:92:01:ca:50:aa:b8:
11:36:92:2e:bb:3d:0c:a7:b9:18:00:ea:36:51:e3:
cd:9e:85:48:d3:09:a5:d5:25:41:d9:01:dd:b5:85:
a3:11:c7:4f:93:1a:44:b4:6c:1c:7d:10:ee:27:ca:
35:e9:0b:37:a8:51:22:52:4e:23:5d:df:95:02:08:
73:a5:68:67:1c:b5:00:60:40:14:3d:73:30:f7:c5:
27:b7:54:43:d1:c5:16:9e:05:f8:28:12:be:ed:e6:
64:91:d2:39:dc:51:6a:89:96:06:35:3a:40:9a:9a:
5f:63:32:70:d3:ec:b8:bb:63:d7:3b:7d:19:00:9a:
11:9c:27:57:d7:fc:16:31:69:b8:f4:96:44:f8:89:
51:39:89:f7:6b:2f:80:78:b2:78:32:78:53:46:e9:
0a:f1:88:3c:4a:82:cd:32:05:7f:ce:34:45:09:41:
5a:3d:52:4f:11:5f:2c:b1:3f:3c:25:17:ee:43:77:
10:6d:54:91:cd:ab:90:ce:2e:45:f1:c6:82:6c:5b:
d4:32:0d:ed:6e:1f:cb:25:5c:7a:9e:78:e3:50:24:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5E:9D:17:F5:53:DD:0B:5C:60:FC:E7:1D:5A:9E:2C:79:CB:61:B6
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/LF6dF_VT3QtcYPznHVqeLHnLYbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1b:7d:1e:01:60:9c:76:86:38:cd:0b:69:68:e0:58:53:8c:
b2:48:05:5d:70:5c:67:34:37:6a:15:3e:1c:99:1c:fd:2e:4e:
37:8d:5c:fe:38:51:7e:b2:68:33:e9:18:40:a3:85:bf:ee:86:
4d:97:2e:ac:b5:6a:34:4c:57:d2:ca:76:87:d8:32:c1:d7:64:
28:06:7a:10:84:39:5e:63:92:a1:23:5f:6b:6a:9a:4f:d3:48:
80:b0:b5:77:31:0d:0e:d4:c1:53:7a:65:82:d1:c4:69:52:47:
5b:a4:65:de:fc:cc:be:fe:47:4d:ff:60:02:2a:9a:42:1e:c5:
b5:6b:c5:03:62:24:0c:3b:81:49:ed:ac:38:d4:59:a2:f2:a0:
15:1f:8e:fe:bc:a3:cb:7d:a0:94:9f:d0:32:5d:c5:e1:43:88:
19:43:d6:c5:ca:79:7c:df:15:d9:0b:32:6b:ec:c1:14:bf:6f:
30:20:a4:09:62:07:8a:2d:3c:51:0c:d1:b5:da:ee:ba:d2:79:
1d:80:5e:b1:78:d0:56:b3:20:52:92:e7:60:a9:49:32:45:08:
fd:cb:c3:66:23:14:13:7f:00:73:ab:7f:47:2a:e7:78:03:41:
fa:e7:05:4d:26:74:4b:6d:b6:9b:e1:9c:61:4d:71:21:c3:9a:
46:db:a1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:13:45 2025 by rpki-client