Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/r-s3_XcZB44nIOnMHwTe4qkjAIM.roa
File: r-s3_XcZB44nIOnMHwTe4qkjAIM.roa (raw, json)
Hash identifier: +6Wjvt2NPNd/UyP2nylu2f+cXRPqnK1b+aMdfYHNG3U=
Subject key identifier: AF:EB:37:FD:77:19:07:8E:27:20:E9:CC:1F:04:DE:E2:A9:23:00:83
Certificate issuer: /CN=308e4f050668d45e3918384500b175a87680199c
Certificate serial: 01856D13B26E714E1FC23868647506902630
Authority key identifier: 30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/r-s3_XcZB44nIOnMHwTe4qkjAIM.roa
Signing time: Sun 01 Jan 2023 11:24:45 +0000
ROA not before: Sun 01 Jan 2023 11:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 62.204.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:b2:6e:71:4e:1f:c2:38:68:64:75:06:90:26:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308e4f050668d45e3918384500b175a87680199c
Validity
Not Before: Jan 1 11:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afeb37fd7719078e2720e9cc1f04dee2a9230083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:c1:e9:df:3e:7a:1f:9c:1a:06:9e:6a:33:
32:1d:40:03:40:b3:a6:61:6e:2a:58:d1:33:2f:53:
19:79:b6:cd:58:59:cc:80:b6:fa:d9:24:3f:69:31:
58:ca:6c:fe:80:27:cb:6e:ec:53:8d:e8:55:6e:b4:
5b:46:78:4a:6b:ac:62:ae:96:4c:57:67:dc:32:94:
af:4b:be:84:dc:ec:cb:4c:c9:09:ed:5a:41:72:c6:
3b:01:92:ac:f4:f3:a2:a9:e8:c0:fa:44:0a:c9:32:
e7:ec:a7:94:b5:e9:73:cb:8c:57:94:c7:fd:5e:a4:
db:bf:42:65:02:82:31:f3:aa:dc:96:c2:3f:f8:19:
9f:9d:1c:46:4c:cf:76:b7:d5:c5:52:de:5a:11:5f:
c3:05:a5:77:7f:76:9e:df:54:39:47:5e:40:78:5c:
5d:df:42:4e:bd:f2:6d:ad:86:8f:7a:2f:e8:8e:3c:
b1:80:52:50:2e:f7:c6:b9:7c:5a:cb:91:68:96:dc:
8a:12:4f:0a:5b:fd:fa:2c:a5:10:d0:a2:e4:a2:5a:
5b:ea:14:0f:9a:62:81:d4:b3:22:ab:d7:03:d2:bd:
11:1a:bc:4f:d7:61:2f:5a:4e:ec:b9:61:66:84:d0:
be:a3:f4:2f:38:ef:ce:8a:f8:16:d3:5c:9c:5b:58:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:37:FD:77:19:07:8E:27:20:E9:CC:1F:04:DE:E2:A9:23:00:83
X509v3 Authority Key Identifier:
keyid:30:8E:4F:05:06:68:D4:5E:39:18:38:45:00:B1:75:A8:76:80:19:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI5PBQZo1F45GDhFALF1qHaAGZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/r-s3_XcZB44nIOnMHwTe4qkjAIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dded9c-8548-44ef-919e-5fc72bbbc192/1/MI5PBQZo1F45GDhFALF1qHaAGZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
50:90:15:94:7b:bd:2f:97:24:95:4c:5b:0f:d7:b8:e5:09:31:
81:c8:ea:f7:14:eb:e1:8d:19:75:11:b6:f1:f8:fa:09:83:e3:
8e:08:d0:dd:02:7e:0e:4a:01:5c:42:57:e8:34:69:4d:d7:51:
79:ae:6c:3e:18:d8:0d:fa:54:29:b2:85:0f:d0:f7:e7:a8:68:
b0:5d:05:99:42:88:cc:65:32:43:f6:5f:8f:9e:d0:a2:db:e7:
86:42:5a:0b:9b:67:73:1c:dc:dc:e5:21:16:85:da:07:68:54:
8a:34:d8:59:8c:2d:3b:85:c6:c2:13:8d:8f:71:3c:83:ea:98:
b3:99:25:f8:7a:8c:ed:47:3f:7e:55:b4:55:ac:24:a5:a6:0b:
b2:a3:a1:4c:2a:c3:99:d2:7d:a4:40:63:cc:32:c1:5b:75:64:
64:1c:bf:d5:c3:f5:bc:85:44:2f:3c:e5:9c:d3:a7:91:89:3e:
15:1b:c6:f0:05:19:a9:b9:8f:3e:97:05:d1:82:38:8f:64:ce:
ae:13:5c:fd:55:a6:d6:38:08:2f:3c:3b:ee:cb:ed:98:15:d1:
ce:13:24:2c:10:18:18:0e:e8:a8:e6:cb:08:14:75:2a:6b:c9:
d6:30:33:c0:25:43:6c:d2:af:12:2c:b8:11:61:34:1b:68:57:
b3:3c:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:11 2025 by rpki-client