Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/jRfP4yhxZ6gmXikGgT5hanUmtTI.roa
File: jRfP4yhxZ6gmXikGgT5hanUmtTI.roa (raw, json)
Hash identifier: szuMEcU8of5ZSWw/BlllGKgEXTfJgvQ45tZ2Ke7a4ME=
Subject key identifier: 8D:17:CF:E3:28:71:67:A8:26:5E:29:06:81:3E:61:6A:75:26:B5:32
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B80700C5793FEFF752EAEFCEFC423
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/jRfP4yhxZ6gmXikGgT5hanUmtTI.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 62.228.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:80:70:0c:57:93:fe:ff:75:2e:ae:fc:ef:c4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d17cfe3287167a8265e2906813e616a7526b532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:61:65:92:61:ed:77:d1:89:60:4c:44:a0:
18:75:18:cf:22:76:2c:c3:fa:95:25:f6:52:25:df:
21:0e:b9:bc:00:ca:28:04:be:67:69:0e:f6:a8:99:
1c:e6:92:59:a7:8d:4f:49:65:39:e2:ad:2e:8a:28:
9d:d4:9a:55:0c:49:ee:eb:55:23:23:2f:b5:db:26:
6f:b6:48:54:7c:e2:86:37:ea:78:41:a9:7e:3a:38:
10:30:cf:4b:b6:6b:c3:2e:2f:31:56:70:06:0a:a3:
d4:31:c5:4f:db:e9:70:35:6b:84:6e:0b:51:24:0e:
06:52:24:fd:71:c6:04:01:e1:bc:8b:4a:eb:d1:57:
6d:ed:f9:e3:21:55:a4:55:39:27:d3:53:e4:2f:bf:
50:80:67:14:e3:62:3b:c3:7c:25:ea:bd:ef:9e:f4:
f0:27:8e:d4:d7:42:e9:9c:72:ab:18:ef:86:de:f1:
1a:e6:ac:29:4c:34:0f:05:8b:25:3c:d9:d5:25:76:
2d:96:fe:16:a5:42:34:3a:bd:79:9d:c2:b2:f0:ca:
15:ed:ea:09:51:a4:e0:bb:e2:9d:ce:1a:f4:11:17:
c7:75:0c:51:8e:fb:46:92:3a:2c:71:48:4b:51:44:
d6:9f:39:24:4d:75:09:69:88:0c:91:57:01:93:95:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:17:CF:E3:28:71:67:A8:26:5E:29:06:81:3E:61:6A:75:26:B5:32
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/jRfP4yhxZ6gmXikGgT5hanUmtTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.230.0/24
Signature Algorithm: sha256WithRSAEncryption
41:81:b6:36:a0:40:07:f1:99:b9:ea:6a:6c:ec:ee:14:2b:49:
db:52:21:91:5a:96:ca:b4:ce:83:9e:a4:95:59:b9:c3:2d:a4:
72:ea:dd:61:ca:d6:f2:6b:ce:a7:1e:8c:fd:a2:f1:29:09:9a:
9b:19:d8:2f:8c:33:eb:44:7f:da:cf:49:e9:3b:00:0d:b8:5c:
dc:a8:2e:3e:8f:b1:2c:6c:d4:a9:dd:64:58:08:96:f6:54:86:
bd:5b:47:49:11:25:f1:fc:fa:8b:21:60:77:9b:02:23:78:59:
5b:bb:b0:31:57:12:58:5c:0b:78:3f:4c:18:5e:c9:7a:e4:0d:
59:13:11:b9:3e:15:57:f5:f0:f6:d3:c5:f5:15:d7:63:67:55:
d7:c6:81:00:1b:51:bd:ab:6b:a1:7f:bc:b3:95:1d:74:f8:7d:
a3:58:e8:f7:f3:33:01:65:a9:53:9c:a9:d2:bf:cc:5a:dc:49:
46:d1:96:77:13:f3:cc:f1:a3:d8:ed:84:ec:0f:3f:71:0f:3e:
88:5b:45:e0:70:89:2a:51:e4:22:46:52:a1:33:d6:0f:b7:77:
fc:01:16:9d:31:95:e6:61:ff:a8:a3:bc:19:13:ae:5b:0f:aa:
5a:f2:31:9a:7d:10:69:d4:cd:dc:eb:a3:a2:c1:b0:80:fd:66:
ae:c3:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:28 2025 by rpki-client