Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/dOb6T3OXGQhPHEiptZe57ohMT40.roa
File: dOb6T3OXGQhPHEiptZe57ohMT40.roa (raw, json)
Hash identifier: GPGKsltxe4+qDNQ/6wiIDNbmlS41MFY6pNidlYOqIB8=
Subject key identifier: 74:E6:FA:4F:73:97:19:08:4F:1C:48:A9:B5:97:B9:EE:88:4C:4F:8D
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 0194244483EEDA49F7E01BAA3749ECE74F37
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/dOb6T3OXGQhPHEiptZe57ohMT40.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 62.233.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:83:ee:da:49:f7:e0:1b:aa:37:49:ec:e7:4f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74e6fa4f739719084f1c48a9b597b9ee884c4f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:da:e9:b1:7e:95:ac:7f:36:fa:fb:aa:10:
9d:8b:b0:05:c6:d7:bd:b6:6b:76:c3:39:0b:dd:52:
32:c5:51:78:8d:80:47:84:02:d7:d8:2b:c4:01:7b:
3e:44:47:15:26:f2:42:8e:55:6a:a0:2c:5d:12:6a:
a0:e5:1c:20:ea:ed:d1:63:c2:48:f7:a6:e6:5f:74:
20:20:b7:27:de:6b:39:df:3c:bc:10:15:c0:af:69:
ba:1f:20:63:e4:52:16:f5:db:84:e0:e5:2f:68:03:
34:33:d9:60:bc:40:9b:79:24:8d:5e:8a:4c:39:d2:
bf:14:bf:b5:f0:f1:6b:99:ef:68:f8:b0:3e:ab:19:
72:0d:8d:84:0f:b1:eb:f1:09:81:56:59:c5:ed:a2:
a6:da:d8:2c:94:5d:21:a6:7e:40:3e:07:9b:3b:47:
86:0b:a5:c0:53:be:ac:74:4e:68:2e:96:3e:0d:0a:
72:38:e6:ec:c7:fb:97:41:54:d9:a8:40:9f:2e:12:
d6:9e:bd:25:4f:48:d4:e7:79:02:a2:66:9b:6a:ec:
a3:9f:13:c4:c5:15:a8:e7:4f:58:66:86:89:ad:74:
0c:fc:46:fc:99:3a:08:61:43:37:ee:42:67:76:70:
48:cf:a9:4c:df:f5:a2:28:61:22:77:73:a5:01:6b:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E6:FA:4F:73:97:19:08:4F:1C:48:A9:B5:97:B9:EE:88:4C:4F:8D
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/dOb6T3OXGQhPHEiptZe57ohMT40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.39.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f9:31:a8:65:b8:eb:0e:0d:6f:93:8f:83:55:04:38:7b:b6:
57:08:61:ef:2d:01:d7:92:ab:9a:91:e5:9e:81:4a:d6:46:6b:
8c:5f:d0:ca:47:55:13:c6:a8:25:ea:f7:60:ab:76:a7:7e:61:
f2:e1:9f:15:2a:6f:b9:52:c7:61:43:28:c1:e7:16:c3:f4:af:
8c:9b:8f:16:05:53:87:cf:0d:7e:c5:cf:73:a6:91:0b:d2:2d:
7f:79:e1:72:13:69:03:dc:69:f0:54:c0:4c:8f:09:ab:b1:9b:
19:d7:35:f5:fd:e0:8e:9f:4c:59:ff:58:7c:22:0c:f8:47:5d:
1f:3a:75:8e:90:87:1e:a4:a9:bc:93:00:8c:aa:ec:0e:6d:08:
9e:87:d7:d9:5e:35:ed:ea:cf:92:be:32:3b:79:c8:d9:c7:ae:
bb:d1:44:1e:31:df:11:47:7e:13:d4:bc:e6:c5:b6:88:38:e6:
32:c1:a2:2b:48:ae:cc:6f:25:6c:e7:0d:af:ac:d1:4a:28:a2:
0e:9b:39:87:db:52:46:ad:44:6d:e9:4b:25:8f:ae:e6:e4:87:
a6:36:78:a0:57:fd:55:95:c4:da:b1:92:1c:d5:61:57:e0:95:
1d:a8:a4:e5:39:5b:e9:dd:37:cb:7f:73:97:af:c5:86:d5:06:
51:53:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:44 2025 by rpki-client