Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_B-JnyUPZQzEiIpewQUHY23Dk8A.roa
File: _B-JnyUPZQzEiIpewQUHY23Dk8A.roa (raw, json)
Hash identifier: NxgiPM6W1BurD6b6luiHd21TWQRNu1avToG9bjOQC9U=
Subject key identifier: FC:1F:89:9F:25:0F:65:0C:C4:88:8A:5E:C1:05:07:63:6D:C3:93:C0
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B877207E204B846B84F21BC00B96F
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_B-JnyUPZQzEiIpewQUHY23Dk8A.roa
Signing time: Thu 02 Jan 2025 09:49:28 +0000
ROA not before: Thu 02 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205972
IP address blocks: 62.228.238.0/24 maxlen: 24
2a00:1358:c002:5600::/56 maxlen: 56
2a00:1358:c100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:87:72:07:e2:04:b8:46:b8:4f:21:bc:00:b9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc1f899f250f650cc4888a5ec10507636dc393c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:db:bd:ca:a8:bb:4a:d9:93:d2:90:13:29:
c2:d9:a5:56:01:16:f5:28:16:b4:a9:04:79:e2:ab:
9c:cc:38:b9:4e:6f:db:0f:d9:7d:69:d4:0b:fd:63:
11:7c:f9:92:66:d1:9e:72:9f:9e:ab:d9:19:17:5b:
2e:67:de:14:fa:99:ef:5e:09:fd:46:09:e3:98:ff:
62:8e:9d:e2:8b:22:70:4f:f6:91:90:b4:db:6d:29:
a8:00:22:d0:00:e3:35:b6:83:6b:b1:19:a1:a2:4d:
c9:0a:75:43:cd:e8:73:e4:68:79:81:08:21:8f:a1:
73:ed:6e:c0:18:06:a4:2a:bb:9f:4d:78:cc:ea:0f:
dc:03:ac:eb:73:f1:a6:7d:52:f7:80:b4:27:70:1b:
7a:e3:2a:18:bc:d8:3b:0e:00:da:1c:97:6c:31:56:
b4:a4:8b:68:48:52:68:cb:f2:24:d7:72:1b:90:75:
bd:b7:4b:60:7e:5d:56:6c:04:a3:eb:eb:de:98:03:
55:a7:69:13:77:88:39:27:22:ce:08:bc:8f:72:3f:
0a:4c:21:8f:db:2c:3d:ce:4f:7c:d4:ec:94:c7:3e:
80:f2:33:ec:21:2e:22:62:36:fe:01:86:c3:e4:fb:
85:c0:40:d5:16:3e:01:68:f6:2d:ee:c4:0b:e0:0b:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1F:89:9F:25:0F:65:0C:C4:88:8A:5E:C1:05:07:63:6D:C3:93:C0
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_B-JnyUPZQzEiIpewQUHY23Dk8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.238.0/24
IPv6:
2a00:1358:c002:5600::/56
2a00:1358:c100::/48
Signature Algorithm: sha256WithRSAEncryption
34:b0:90:00:cc:f6:4e:2d:dc:1e:24:89:42:d9:e8:0f:15:f5:
35:2d:27:24:a4:c6:72:07:69:af:f9:f8:e4:f8:3b:6b:3c:2d:
57:36:68:7c:2c:2b:65:8e:63:b6:87:cb:df:91:cf:23:50:8f:
a1:b4:24:73:cc:cb:80:41:4b:80:c0:34:d5:91:a3:33:0c:36:
e7:85:8a:e3:a7:9e:ae:7c:1e:db:28:f2:ad:1b:2a:b6:eb:2d:
17:9e:97:24:1e:d4:e7:3b:50:ff:c8:c1:97:bd:1f:dc:3b:3e:
76:d1:54:fc:0f:a8:ab:34:d2:22:b9:15:02:79:86:ea:c1:13:
6a:a1:64:97:cf:55:61:9d:ff:8f:16:bd:18:12:db:68:40:30:
ce:bd:c5:fd:3a:a2:b9:c6:95:94:18:b4:60:9f:a4:20:be:e0:
2e:b4:90:0f:20:7a:f2:f1:26:24:91:8d:e6:50:cf:b8:40:06:
35:91:6b:4f:28:50:ad:13:ed:ca:cc:50:19:d6:7e:c9:bc:60:
ee:e2:a8:75:67:59:08:aa:74:6c:07:70:af:be:6a:fb:82:9c:
f7:27:e3:ac:6f:64:fe:13:d6:5a:e7:bf:01:97:5e:b6:45:c2:
4a:03:b9:a3:c0:d3:da:59:1a:5e:6f:13:a3:f3:8b:b5:b0:18:
38:a0:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:11:22 2025 by rpki-client