Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/4YDoaITPVcbs2Fr2XCZSx0OCKdQ.roa
File: 4YDoaITPVcbs2Fr2XCZSx0OCKdQ.roa (raw, json)
Hash identifier: nADHrAAxeD4D4ceD5FY+V6jGbgbWwFK6L+7SRYOXbeI=
Subject key identifier: E1:80:E8:68:84:CF:55:C6:EC:D8:5A:F6:5C:26:52:C7:43:82:29:D4
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 018E862AF141F0D6A1D73688285D500E03BF
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/4YDoaITPVcbs2Fr2XCZSx0OCKdQ.roa
Signing time: Thu 28 Mar 2024 17:45:44 +0000
ROA not before: Thu 28 Mar 2024 17:45:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 62.233.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:2a:f1:41:f0:d6:a1:d7:36:88:28:5d:50:0e:03:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Mar 28 17:45:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e180e86884cf55c6ecd85af65c2652c7438229d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:95:0b:d7:e5:29:4c:20:4b:11:e4:70:04:
8e:2e:5a:2c:28:b9:e7:83:32:17:7e:bc:f8:74:d8:
b7:f2:e7:81:0c:3f:74:f9:e7:61:57:a7:ae:1c:bc:
a8:ba:d0:25:46:07:b7:ac:ca:f2:d5:08:a1:e9:e1:
2a:9e:b9:85:0e:5c:77:cc:71:25:e9:86:46:f8:31:
c7:e4:59:9c:23:82:d5:e6:1d:c4:42:c0:c6:1c:a7:
27:28:78:16:02:e5:0c:a8:91:4e:3f:27:51:1c:5e:
7e:45:d6:9b:5f:43:01:b7:f3:6a:b8:d1:bb:63:91:
48:cb:b7:eb:24:3c:92:bb:6b:63:fc:aa:77:2e:01:
b1:9d:73:3a:6d:4e:4b:ff:59:7b:0f:e1:a9:cc:80:
44:0e:72:e4:e8:ed:de:17:2c:9c:f2:2d:48:5e:e6:
f8:c4:2e:ff:06:d2:fe:c2:b3:04:2b:5e:dc:8c:d6:
f6:b2:65:c6:6f:17:24:bb:9c:5f:68:86:87:84:c6:
99:34:d7:70:e8:95:9f:0c:1f:72:a4:4b:a6:cf:ae:
6f:24:4d:a1:64:4d:7a:97:28:65:47:df:aa:85:bc:
4f:4b:d9:b1:a4:3b:6c:1f:ff:6a:63:49:81:a5:44:
de:68:25:5c:68:23:6f:eb:5f:6f:ac:9b:f4:fd:fb:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:80:E8:68:84:CF:55:C6:EC:D8:5A:F6:5C:26:52:C7:43:82:29:D4
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/4YDoaITPVcbs2Fr2XCZSx0OCKdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
97:28:f1:40:23:24:6d:8b:7b:b6:77:ed:be:d6:b8:5b:98:1f:
c4:06:f5:1a:b8:29:02:5a:85:b7:db:85:8e:dc:33:ff:a4:30:
dc:39:28:23:8a:44:8f:63:13:eb:e3:15:0f:c7:91:43:07:9e:
71:9e:80:25:fa:a7:cd:20:7e:f1:75:84:d1:16:ce:7a:fc:50:
5f:ca:76:70:7b:0b:f6:7a:00:ea:83:c4:38:d9:0d:14:d8:22:
72:bb:b9:57:f0:2b:41:cb:7c:ad:e3:e5:7c:31:f6:b4:19:08:
bc:96:61:fd:7c:65:cc:98:e6:1f:39:0c:c8:b2:66:53:96:eb:
b9:af:74:e3:9f:72:02:10:1c:04:b9:83:fd:22:0b:c0:4c:6f:
b7:00:c3:d4:41:de:2c:ba:4e:f7:93:da:25:9e:bc:56:4e:56:
25:1a:52:66:7e:44:c4:fc:66:92:68:72:02:c0:74:03:38:76:
89:f5:22:19:bd:a5:93:64:6a:bb:f0:4e:6e:c0:a4:11:86:97:
c1:bd:2a:c3:34:de:77:f7:bf:6c:74:25:52:20:3a:57:08:81:
5d:35:fb:13:56:4f:92:22:ac:d1:b9:2c:06:d0:4d:f3:30:5e:
5f:aa:a9:5a:20:98:c0:56:44:d6:1f:27:0b:3c:df:80:a9:12:
60:4f:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:31 2025 by rpki-client