Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/ajuoeFVs3Wv6piEKCQm-YDbacGU.roa
File: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (raw, json)
Hash identifier: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=
Subject key identifier: 6A:3B:A8:78:55:6C:DD:6B:FA:A6:21:0A:09:09:BE:60:36:DA:70:65
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019422FC0302AD46267168ED7A910A98DBCF
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/ajuoeFVs3Wv6piEKCQm-YDbacGU.roa
Signing time: Wed 01 Jan 2025 17:48:48 +0000
ROA not before: Wed 01 Jan 2025 17:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50304
IP address blocks: 62.176.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:03:02:ad:46:26:71:68:ed:7a:91:0a:98:db:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a3ba878556cdd6bfaa6210a0909be6036da7065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:81:75:87:52:2c:81:3e:07:44:ca:2e:dd:
03:81:39:12:bf:e3:63:06:a9:04:ef:fe:5b:37:a8:
98:7c:1a:09:69:03:a2:e1:0c:41:4a:5b:15:38:b3:
3e:bd:19:96:3c:35:cd:fa:bc:34:65:8b:e8:f5:52:
20:7a:6e:63:46:84:4a:13:52:ee:dc:d4:2e:8e:2a:
9b:e6:2d:5f:9d:cd:92:39:ec:8e:11:70:bd:39:b6:
8a:53:38:e5:00:fc:94:08:81:9c:6a:df:cc:6a:f2:
4d:68:d9:d0:46:fe:d5:0d:c1:26:a3:ff:63:e7:bf:
d4:1b:9a:5c:4a:90:d5:98:e6:08:e7:59:9f:6b:30:
51:a6:cc:18:6a:bb:9e:69:f8:8f:cc:3d:d4:4c:da:
2f:45:df:18:ae:4b:25:bb:ee:8e:5e:18:c3:93:bf:
c3:e6:9f:0f:9d:ad:82:d7:97:0c:e0:bf:b4:6e:d8:
64:3b:38:51:f4:3b:21:5a:b1:e9:58:7f:cf:d6:77:
16:15:0e:8f:98:9c:ce:1a:a9:82:03:77:60:f7:f4:
1d:06:63:b0:e0:ac:da:4d:31:23:5f:d1:44:48:2a:
87:40:86:e0:6e:bc:28:de:d9:e1:da:8c:33:30:5d:
07:7b:b7:88:66:b5:92:0d:75:aa:c7:0e:0e:8b:1e:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3B:A8:78:55:6C:DD:6B:FA:A6:21:0A:09:09:BE:60:36:DA:70:65
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/ajuoeFVs3Wv6piEKCQm-YDbacGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.216.0/21
Signature Algorithm: sha256WithRSAEncryption
42:21:23:cf:cc:b4:40:05:ef:a6:98:2e:9a:9b:49:fd:c2:0e:
a8:19:01:87:23:13:b6:43:ac:78:7d:52:75:68:03:7d:54:10:
b3:07:6f:1d:9a:8a:36:1c:c7:e1:f2:fb:a3:54:46:dd:d2:57:
8d:bc:b0:16:01:4f:71:1a:85:24:0a:68:b2:e8:08:51:2d:94:
de:2c:4e:bd:c8:2a:7d:98:c0:51:cd:49:cf:55:e8:41:24:a1:
7c:ff:f2:cd:8d:be:39:ed:8f:e6:4b:12:ba:b7:61:21:88:7c:
d2:ff:3e:16:d2:14:ca:6f:04:38:41:2e:c1:44:98:52:35:21:
f4:6a:15:1e:a9:92:c6:da:c6:fc:0c:39:e9:2c:c3:1d:97:47:
f6:63:bb:15:af:d3:f7:ba:f8:c2:8f:c7:2a:b0:39:cd:7f:a5:
1d:d6:ef:5d:4c:f2:4f:13:1a:a3:96:20:19:61:ba:33:d1:a5:
75:28:09:8f:16:54:38:c3:dc:40:b8:db:09:6d:ee:11:a3:7b:
b6:07:5b:56:f0:0b:b1:a3:79:8f:da:59:74:cc:95:9e:03:e8:
00:b9:86:88:32:0b:8c:a2:55:78:23:9e:d7:b6:76:2f:40:97:
06:b6:5d:aa:a0:ff:71:c9:48:de:a1:26:9b:43:89:b5:e8:20:
ba:be:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:10:06 2025 by rpki-client