Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Ju4TE0Do45F3_xd1BsQ_7bnzoxo.roa
File: Ju4TE0Do45F3_xd1BsQ_7bnzoxo.roa (raw, json)
Hash identifier: 9jLkighzDSTRcfJGZNkRcSTPX467dcg1LQMrucLnEF8=
Subject key identifier: 26:EE:13:13:40:E8:E3:91:77:FF:17:75:06:C4:3F:ED:B9:F3:A3:1A
Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial: 01941FFA926A2D172308A37EE8FAC56A361B
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Ju4TE0Do45F3_xd1BsQ_7bnzoxo.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 62.229.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:92:6a:2d:17:23:08:a3:7e:e8:fa:c5:6a:36:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26ee131340e8e39177ff177506c43fedb9f3a31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:2d:6f:30:25:22:0b:c7:99:2a:9e:04:70:
3e:ed:e7:40:36:71:48:5d:54:21:76:bd:0a:34:f2:
19:6b:54:ab:ff:7b:13:6f:c8:43:83:85:6e:a5:60:
ed:82:2f:c6:18:39:8b:9c:a2:41:c5:a8:05:da:76:
76:83:d3:be:52:82:1b:d9:ea:ad:14:b9:92:5e:f2:
b1:62:9d:3c:36:bd:93:b5:91:36:0e:4e:30:a9:43:
d6:f6:6d:e7:d7:6f:51:38:d5:bc:da:23:5d:10:d2:
01:79:81:c3:b4:7c:e8:87:8b:96:e4:0e:64:18:24:
94:7b:13:db:a6:b6:90:b3:a2:5a:8f:c4:4a:fe:93:
3d:f9:cf:ef:83:1f:c9:ef:f1:eb:4b:54:2b:bb:37:
b9:7b:d7:79:30:43:24:35:97:bd:1c:b5:2f:0f:ab:
ca:d9:cf:b1:cb:67:27:c9:99:e4:70:52:80:a6:17:
be:23:dd:8a:a9:f6:a1:43:af:80:d0:cf:0f:c8:28:
56:42:7f:55:a1:24:13:d8:f2:36:b2:82:b6:89:77:
2e:ad:19:07:7a:45:e5:a7:33:5c:4e:cb:33:1c:65:
aa:ea:e4:16:6b:d6:c5:93:3b:97:da:ed:76:40:67:
21:19:90:1d:dd:df:45:4f:d0:67:6a:3d:26:09:a6:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:13:13:40:E8:E3:91:77:FF:17:75:06:C4:3F:ED:B9:F3:A3:1A
X509v3 Authority Key Identifier:
keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Ju4TE0Do45F3_xd1BsQ_7bnzoxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:8f:ff:9c:49:e6:9c:61:0e:60:1c:62:25:80:38:b7:64:c4:
a1:65:f4:4a:66:8b:56:1e:c7:e3:1a:06:7e:cb:a5:86:b6:d4:
e2:08:98:52:af:12:e3:41:bf:de:97:d3:3f:bb:74:64:d5:9e:
71:f4:fb:38:2f:0e:93:d5:df:d5:3d:79:7a:0f:3a:aa:f9:d9:
22:61:91:03:3c:b7:5f:36:53:b3:3b:2b:f5:c0:cd:6c:4c:2b:
6a:95:1c:cc:27:64:22:7f:eb:58:56:5c:04:48:78:77:01:1c:
df:39:2d:ed:48:75:fa:03:58:b6:f6:1e:62:17:57:8a:7c:8d:
1b:38:63:f9:07:ed:c3:a2:ac:ec:f4:8d:92:99:af:4d:80:2a:
f2:c5:b2:a3:92:01:f5:09:1b:34:39:63:dd:4c:ef:a6:02:bc:
07:89:8a:7b:ff:03:95:13:98:8e:2d:0d:07:13:c7:39:55:6d:
29:a3:60:dc:ad:2e:99:00:32:e7:69:f3:cb:67:93:ff:ec:b3:
a4:0b:26:81:19:b5:0c:00:6a:28:5f:27:cb:74:10:ca:03:1d:
16:ff:be:1f:41:87:48:1b:1e:71:48:1b:92:18:46:f4:5f:31:
e1:59:00:d7:9e:15:b8:a5:0c:1f:97:91:cb:ac:05:64:5c:9b:
8d:3b:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:49 2025 by rpki-client