Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/xkBewuEMiuEaRl6tlZgkZIiJIpo.roa
File: xkBewuEMiuEaRl6tlZgkZIiJIpo.roa (raw, json)
Hash identifier: dz2/11ogK5tMzMH1ftdVfoVFsbvw27yY273l023m5PI=
Subject key identifier: C6:40:5E:C2:E1:0C:8A:E1:1A:46:5E:AD:95:98:24:64:88:89:22:9A
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B84292BB56FA4B92339F707EED3AB
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/xkBewuEMiuEaRl6tlZgkZIiJIpo.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200649
IP address blocks: 62.228.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:84:29:2b:b5:6f:a4:b9:23:39:f7:07:ee:d3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6405ec2e10c8ae11a465ead959824648889229a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:dc:f2:e9:65:ac:fb:54:1a:15:43:44:6c:
a4:8c:2e:97:8c:e1:c6:ae:33:99:af:e5:63:6a:9a:
98:9c:15:a6:48:64:ca:e4:0c:5b:27:6e:18:ce:f8:
73:13:b1:7d:d2:bf:d2:10:1e:fe:38:30:ab:1f:f7:
b8:85:86:d3:bd:05:ee:78:8b:19:0f:7c:bf:9d:84:
d0:db:f6:2b:22:17:b7:5c:52:37:5b:5b:75:71:d5:
02:10:a8:60:f1:5b:b2:2b:ac:72:69:21:66:d4:0b:
3f:2b:ed:01:f5:bb:b5:1b:ac:e2:18:55:cb:dd:2a:
cd:cc:cc:ab:29:e6:57:45:4a:81:3b:41:ee:6c:de:
72:9d:da:b8:05:49:4a:7c:f7:3b:a6:93:e3:c3:6f:
9d:c6:94:4b:ef:9e:21:40:03:d3:63:e6:b2:9e:5b:
69:eb:df:41:cf:d0:d9:c9:db:f8:29:5f:cc:6c:9b:
6e:53:a2:54:ff:5a:66:fc:5e:e9:66:bf:94:12:c5:
ac:8e:20:9e:d5:5f:6d:43:23:84:33:2f:dc:54:ed:
9a:e1:ea:6f:02:bf:0e:a2:7b:60:9e:99:33:8b:ec:
cf:45:f9:43:38:6a:55:61:1c:a9:24:37:79:36:46:
06:e3:c5:2a:3d:27:e1:7f:a9:f8:dc:1b:db:42:20:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:40:5E:C2:E1:0C:8A:E1:1A:46:5E:AD:95:98:24:64:88:89:22:9A
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/xkBewuEMiuEaRl6tlZgkZIiJIpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.243.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f5:dc:3b:01:2a:70:32:03:61:5e:7d:31:6a:49:da:f3:6c:
40:53:ca:8e:3b:e6:2d:3b:7f:7a:e5:1c:2e:48:b9:50:04:e0:
76:b5:f5:cb:7f:6d:7f:4d:14:31:61:da:85:26:a8:d3:03:9e:
40:9b:81:8e:77:db:a3:53:63:9b:62:a6:04:55:6b:7b:91:5a:
7e:02:e5:d0:9a:3b:5b:9b:f5:8f:6e:14:0e:7f:2a:cf:a2:0e:
c6:fe:55:27:43:db:00:f2:98:ef:7c:4d:10:47:ad:8d:ca:90:
b5:f9:2a:0a:26:eb:98:29:3c:19:f7:f9:d0:f5:cc:fe:3c:89:
7a:f8:a0:11:ec:a9:28:2f:c3:9d:c1:df:5c:39:bf:a4:80:bf:
75:8c:f9:64:51:5b:5c:ad:0a:09:05:f4:a9:78:98:38:ba:d2:
e2:5b:0c:87:6c:25:49:d7:0f:e0:70:c2:93:82:a1:96:61:b0:
b5:50:42:15:71:b9:67:ec:20:9a:0d:c8:4a:00:0c:d0:2f:8d:
58:4c:70:ae:1f:0a:10:0e:d5:20:b4:30:bd:3d:0f:21:79:55:
4b:ae:89:43:6a:5f:b0:73:2d:07:be:0f:dd:55:4e:75:e9:2d:
b9:7e:72:2c:98:5f:dd:6a:dd:5b:7e:f1:fe:ae:8f:ba:78:16:
14:1c:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:17:26 2025 by rpki-client