Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/E8WUj9Lx_6QdVNneKnUMsvyeFkI.roa
File: E8WUj9Lx_6QdVNneKnUMsvyeFkI.roa (raw, json)
Hash identifier: qHwGJapWBDxF9u52/7mlwc31i/ji6qBqMm+unwq863M=
Subject key identifier: 13:C5:94:8F:D2:F1:FF:A4:1D:54:D9:DE:2A:75:0C:B2:FC:9E:16:42
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018D1B28CC1E87D4EA50458C5CDC20F57EB4
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/E8WUj9Lx_6QdVNneKnUMsvyeFkI.roa
Signing time: Thu 18 Jan 2024 06:01:14 +0000
ROA not before: Thu 18 Jan 2024 06:01:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216253
IP address blocks: 62.233.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:28:cc:1e:87:d4:ea:50:45:8c:5c:dc:20:f5:7e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 18 06:01:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13c5948fd2f1ffa41d54d9de2a750cb2fc9e1642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:f8:74:d9:90:e5:8f:05:5f:69:5a:5d:a1:
69:bc:01:5e:fd:5b:e6:7f:e6:0c:4b:f0:a8:7c:df:
5a:92:c7:b5:6c:de:8a:e0:e0:19:40:68:55:09:0a:
55:4a:62:02:fa:6a:33:f6:42:34:5c:09:3a:a8:25:
96:e5:bb:75:9b:33:7e:84:7f:7e:a1:c8:4a:a6:02:
d2:a9:d5:43:d7:51:ef:6a:3a:ed:d2:27:ec:b1:6a:
0a:d6:29:68:70:ba:c4:3b:c4:29:e2:78:ed:bb:e8:
2d:d3:8c:f6:45:84:6a:69:12:8a:cf:5a:a1:d2:06:
cb:d4:be:78:34:33:f5:88:dd:6d:45:47:02:1d:62:
b5:f9:f4:e5:f3:53:cd:ed:ed:7d:f0:34:70:a6:6d:
b5:73:51:de:b2:ab:95:64:77:06:4d:da:ae:46:a7:
be:c0:d3:54:f9:4f:ba:c4:37:13:4a:f2:bb:cb:94:
6e:10:29:c6:e8:16:39:82:a1:61:ab:f0:27:3e:8c:
0c:54:0f:9c:9c:b1:af:9c:a1:06:83:29:a8:d8:14:
66:6d:7c:a7:18:ee:42:ef:bf:e2:b3:22:38:60:8b:
f6:dc:a7:f9:ab:2a:aa:56:1f:8c:2a:fd:da:7a:62:
aa:39:47:7d:30:bf:96:6b:1c:39:1b:83:35:41:bb:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C5:94:8F:D2:F1:FF:A4:1D:54:D9:DE:2A:75:0C:B2:FC:9E:16:42
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/E8WUj9Lx_6QdVNneKnUMsvyeFkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.36.0/24
Signature Algorithm: sha256WithRSAEncryption
70:69:1d:9b:7a:56:00:f4:93:e4:65:30:9e:37:da:e0:75:1d:
a3:3d:dd:a4:da:fa:a9:4e:e8:77:14:36:83:a8:d9:51:ed:1c:
ad:1e:aa:03:44:e1:2d:b9:9d:e8:c3:06:0a:a1:96:c5:ef:a4:
79:f7:a3:6b:7a:62:d9:ca:58:28:84:1c:71:b2:85:f7:11:a4:
b4:d4:1c:9c:10:00:b9:63:db:1d:b5:55:41:44:46:43:d5:28:
28:56:2a:19:32:82:e6:4f:47:50:2c:e0:9a:5c:1a:e1:96:8f:
dc:24:45:2e:df:c2:7e:b3:5c:31:de:36:da:0f:66:77:fc:34:
bc:b1:c0:3a:54:05:f1:62:89:6c:69:29:d5:49:59:2f:30:1c:
2c:51:29:c4:97:f8:60:63:a5:26:53:7e:a0:27:f9:a3:ca:a8:
ce:19:cd:7f:05:a7:49:59:5a:f6:af:b9:a3:bd:81:74:94:37:
a6:7d:9b:30:70:75:ae:05:f3:0a:fb:a1:5a:38:b9:ff:99:0f:
2f:92:a6:28:6b:4c:18:5d:16:f5:17:6c:0b:94:11:d1:0c:8c:
86:63:27:9d:62:7f:a8:c0:cd:52:fc:96:c8:9a:b6:a8:c8:a9:
91:3f:3b:3a:a8:8d:ca:cb:e0:52:d1:dd:83:41:89:27:28:96:
30:b5:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:43 2025 by rpki-client