Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/UTqb6sM7_nDGXxtyBNqtONc-Ld0.roa
File: UTqb6sM7_nDGXxtyBNqtONc-Ld0.roa (raw, json)
Hash identifier: P1Xe/cGY6hzSkPdsDoPmlGhfNhs6j7sOr5vnBuHK6c4=
Subject key identifier: 51:3A:9B:EA:C3:3B:FE:70:C6:5F:1B:72:04:DA:AD:38:D7:3E:2D:DD
Certificate issuer: /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial: 01856E0AF7F9ED38866B7189FAC73D257D07
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/UTqb6sM7_nDGXxtyBNqtONc-Ld0.roa
Signing time: Sun 01 Jan 2023 15:54:50 +0000
ROA not before: Sun 01 Jan 2023 15:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f7:f9:ed:38:86:6b:71:89:fa:c7:3d:25:7d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Validity
Not Before: Jan 1 15:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=513a9beac33bfe70c65f1b7204daad38d73e2ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:9e:0b:06:5d:5c:5b:df:80:ac:e5:69:95:
5a:98:7c:0e:f7:50:eb:2d:7c:3f:58:06:7a:2f:85:
04:7d:a2:4e:ec:d2:aa:92:b5:a4:b1:1f:6a:b6:40:
71:31:8d:6f:5e:78:13:b3:47:5d:75:84:21:60:4c:
b0:30:e5:71:16:fe:d3:a5:e0:4d:76:6e:5c:a1:c9:
d2:91:ea:92:ce:ae:cc:80:33:38:45:32:f7:45:3b:
eb:39:5c:b3:cd:64:ca:46:e3:1c:b1:bb:a5:71:af:
42:35:31:5a:7b:b0:84:e6:c1:2e:0c:14:da:68:04:
2e:e8:70:dd:f8:f0:2f:60:fe:5d:9c:14:91:04:fd:
bb:1a:01:12:a8:5a:e8:40:55:2e:8e:71:ed:4b:23:
ef:81:a5:56:9d:37:d1:ab:57:b4:d9:94:b5:ba:08:
e0:a0:c0:27:ad:41:52:69:a6:3c:39:ce:3e:05:4c:
82:7e:ff:b0:24:31:61:ab:1e:d1:6e:8a:ab:c7:f9:
a8:60:29:b8:ec:18:14:be:52:99:bd:6e:8b:37:a2:
ec:1a:34:df:23:ac:8b:ab:f0:50:a1:38:cc:64:9d:
da:31:31:77:44:74:b7:71:13:0d:e7:85:01:14:14:
c3:1e:95:28:96:64:2b:9d:09:37:7e:d0:cf:ce:3c:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3A:9B:EA:C3:3B:FE:70:C6:5F:1B:72:04:DA:AD:38:D7:3E:2D:DD
X509v3 Authority Key Identifier:
keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/UTqb6sM7_nDGXxtyBNqtONc-Ld0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
85:48:28:ae:0e:65:3d:c4:f5:ab:08:ff:d5:a7:32:0c:c4:6d:
12:2b:04:26:25:3a:3e:62:44:79:98:e5:b9:9f:b7:93:0a:90:
06:40:3f:d3:a6:30:fc:30:05:1e:6a:95:db:c5:1c:6e:7e:9a:
52:b7:84:d7:84:cf:27:20:d6:62:1e:0d:fe:b9:01:b3:39:34:
a8:99:a0:18:74:8c:6a:f2:01:b9:b2:7d:58:a1:53:e8:7b:27:
81:24:a9:b9:61:dc:ef:7b:f2:b8:b2:d9:d1:35:31:c1:dd:84:
9e:70:2d:38:2f:b6:06:26:d8:5f:df:8d:26:11:62:89:29:36:
f4:b3:a2:5d:7d:53:53:d2:ee:7c:a2:45:9b:5f:60:de:83:72:
bb:55:d9:4a:42:5b:fc:0f:28:4d:c8:38:4a:bd:61:99:eb:9d:
f1:d2:8c:18:02:a7:b6:f2:ad:ca:8b:24:90:93:2c:43:0e:2a:
8b:46:3d:77:01:4b:55:cc:9f:b7:48:e8:2f:4b:57:0e:e8:80:
87:12:db:19:83:3c:d1:bc:b6:e0:5f:d2:46:17:ec:50:06:2a:
7e:4e:ee:8f:50:10:69:11:a1:75:c0:ae:c9:f0:f1:d2:70:fd:
f4:2c:95:cf:88:03:12:63:be:2a:fe:ea:97:6e:86:6a:96:b0:
2e:35:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:06 2025 by rpki-client