Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/VYoQKf5s-KqqrBacz9y-o4_GDiY.roa
File: VYoQKf5s-KqqrBacz9y-o4_GDiY.roa (raw, json)
Hash identifier: UH0yetw/jt23rWa1xemX8fv6/k46KisKMpR12GlubxQ=
Subject key identifier: 55:8A:10:29:FE:6C:F8:AA:AA:AC:16:9C:CF:DC:BE:A3:8F:C6:0E:26
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B82B871EECDA9CE64F8013C29D96A
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/VYoQKf5s-KqqrBacz9y-o4_GDiY.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51228
IP address blocks: 62.228.254.0/24 maxlen: 24
62.228.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:82:b8:71:ee:cd:a9:ce:64:f8:01:3c:29:d9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=558a1029fe6cf8aaaaac169ccfdcbea38fc60e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:8b:b7:50:af:0d:76:30:f6:28:a0:48:31:
96:a3:d3:c2:ee:ef:22:23:dc:22:00:cc:cc:47:ee:
9c:ad:19:1b:72:d9:23:a1:0f:be:b2:eb:5a:06:c9:
dd:be:10:7a:1f:45:da:e5:9f:71:91:55:4d:96:5a:
8e:d3:bd:15:e3:27:72:27:8e:4b:72:58:1e:5d:05:
74:6e:d8:f4:21:67:75:0a:88:87:66:fc:39:a4:dd:
fa:ef:e6:d2:97:9b:45:2f:be:08:79:ac:87:7e:c0:
73:82:99:aa:54:fb:6b:49:f0:a4:e9:e4:2f:b1:b4:
70:88:b4:ad:fa:f8:7c:26:63:f6:32:c5:9c:af:a1:
39:f7:4a:1a:db:77:5f:a3:45:9a:56:4a:6f:2e:a0:
cb:69:46:b4:e9:f6:6a:97:77:1f:4c:db:94:6a:43:
96:83:29:ce:83:d4:37:7e:ca:7a:f9:57:b3:5f:b0:
a4:dc:01:65:da:d4:86:38:11:0a:03:2b:f2:21:bb:
43:64:2e:e0:1a:de:1b:e9:9d:46:6f:2e:a2:04:67:
29:4c:a2:20:d2:4b:96:0f:55:0b:58:2a:13:50:01:
f5:ee:62:44:e1:85:8e:f4:ef:c9:c4:1c:b2:ac:31:
96:8a:a5:49:2e:cb:a7:47:78:a5:44:74:ac:13:f1:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8A:10:29:FE:6C:F8:AA:AA:AC:16:9C:CF:DC:BE:A3:8F:C6:0E:26
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/VYoQKf5s-KqqrBacz9y-o4_GDiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.254.0/23
Signature Algorithm: sha256WithRSAEncryption
61:33:9f:cb:ec:9d:10:f4:e1:37:ea:3c:2e:1d:fe:47:e0:62:
5b:1b:8f:da:a1:92:53:98:c4:c6:f7:f8:67:6f:c4:0e:17:d1:
52:92:ae:d8:8d:0b:91:cd:8e:cf:f1:88:07:84:77:a6:73:17:
da:19:71:6e:de:fd:4a:40:d5:ee:ce:01:cf:27:15:20:86:fa:
fc:dc:52:72:39:0c:d5:57:f4:16:76:77:49:b1:15:20:e8:d0:
42:98:35:83:8e:47:61:65:6a:18:e3:c6:67:54:6e:3e:bf:a5:
0c:2c:25:9e:73:b9:ea:11:62:6d:33:bd:c7:d9:ae:7f:ac:11:
8e:c9:fb:f9:fe:50:61:e7:1b:8c:de:f7:5b:41:70:89:d3:44:
52:ad:78:81:50:63:cc:4c:4b:a8:40:82:8a:fe:6f:92:fb:da:
bd:80:fc:5d:64:b6:d5:a5:bb:d2:48:70:54:4b:c4:0f:58:a0:
80:6b:8a:60:e1:5b:d1:49:12:9e:36:12:4c:8f:aa:96:be:9c:
70:a6:d7:a2:9f:df:38:ed:44:14:c6:68:e8:98:7d:5a:4c:bd:
3c:c0:00:84:ef:60:d4:cf:e8:2a:c7:09:45:f6:f5:4e:8a:e5:
3b:12:fc:38:d3:24:f5:e4:68:92:94:36:50:99:a5:8b:cd:3c:
ad:71:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:18:32 2025 by rpki-client