Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/fnsSx1RN8DGQwMdiNVIUGiJjHPk.roa
File: fnsSx1RN8DGQwMdiNVIUGiJjHPk.roa (raw, json)
Hash identifier: BFIeJVAi8xbwgAO9Pw57SWPWZ4C/gi/XM4pBZ4DV+mI=
Subject key identifier: 7E:7B:12:C7:54:4D:F0:31:90:C0:C7:62:35:52:14:1A:22:63:1C:F9
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 018E664D98719BE54E8A01415842F05FA967
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/fnsSx1RN8DGQwMdiNVIUGiJjHPk.roa
Signing time: Fri 22 Mar 2024 13:15:44 +0000
ROA not before: Fri 22 Mar 2024 13:15:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 62.233.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:4d:98:71:9b:e5:4e:8a:01:41:58:42:f0:5f:a9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Mar 22 13:15:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e7b12c7544df03190c0c7623552141a22631cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:8f:b8:f7:fe:0b:59:8b:7f:db:2c:ea:6e:
34:2c:58:2a:ee:e6:cb:2b:1d:05:35:f3:9c:0e:4d:
48:89:6e:15:fa:5e:6f:e3:12:82:a4:55:90:cc:de:
df:18:3e:8e:0e:a0:c5:24:1b:49:b0:c1:98:f3:b3:
78:85:6a:3e:98:b0:14:70:bc:0e:47:ce:a6:ff:8b:
0a:30:5d:80:25:c1:8a:cf:3e:03:03:87:e0:7b:55:
f3:b4:ec:cf:29:fb:86:37:d6:87:40:9d:79:f7:0e:
b5:60:3c:3b:9e:93:86:81:5f:03:ea:fb:5f:bd:66:
e8:94:be:60:ce:30:9d:bb:19:88:48:57:c1:6e:4e:
69:3b:20:fc:ab:87:9a:0f:42:e1:d8:e5:8d:c4:8c:
4c:00:c1:45:e6:9a:14:92:a5:eb:88:ee:25:e7:9c:
66:e5:67:5c:b7:d2:9f:7e:30:e8:6d:4f:f9:b4:e9:
fd:ff:b5:cd:df:84:cf:d2:25:57:08:8c:73:c5:9b:
8c:ef:e0:e8:aa:4e:86:36:8e:ea:b8:37:b6:5c:a1:
09:7b:b7:81:13:5d:ff:6d:c8:be:21:1d:8c:13:5e:
07:fe:ff:f8:ca:80:1c:28:6d:37:38:7a:9e:9b:6f:
1e:6d:96:6f:66:78:b0:ff:23:8a:d3:de:43:51:c8:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:12:C7:54:4D:F0:31:90:C0:C7:62:35:52:14:1A:22:63:1C:F9
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/fnsSx1RN8DGQwMdiNVIUGiJjHPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ea:59:46:cb:16:3b:bc:14:e0:68:d0:fd:11:00:3f:69:fe:
4a:22:ae:84:bc:93:2a:0d:45:c9:af:a3:f5:16:8f:4f:3d:47:
fe:07:c1:0a:ba:6f:d5:23:dd:57:38:d4:83:35:a8:2e:15:6c:
25:1c:e6:d9:79:50:cc:50:58:f0:6b:9c:32:dc:a0:1a:f5:e0:
4f:ed:92:9e:7f:da:36:48:c9:ab:d0:a6:3d:25:c3:72:a7:27:
2d:42:4e:53:46:8e:82:2d:16:ac:b1:12:d0:38:a7:f4:4d:6a:
3c:13:2e:a8:66:05:e5:4b:69:fb:2f:87:4d:9e:9d:fd:e7:26:
b5:77:5e:d2:33:7d:76:4b:c5:7a:95:dd:49:53:76:f7:e2:9d:
2d:4b:1f:12:dc:a2:ba:c9:a0:fd:f3:c8:cc:2c:85:a3:1b:b5:
f3:d5:1f:77:46:bf:ab:fc:be:db:9d:6a:23:f0:76:f7:45:ef:
23:63:98:78:11:ec:a5:91:a0:33:ca:f6:12:c3:6c:a5:fb:0f:
66:45:7d:d1:cf:2d:4a:3d:54:4c:f2:5b:d9:f0:94:4e:a5:2c:
3e:b2:7c:6f:70:fd:44:49:77:84:80:65:71:c7:ab:90:f2:e0:
12:8a:59:78:f7:2d:9d:07:72:6c:f2:7c:f3:a2:b9:7a:c0:0d:
ef:c5:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:57 2025 by rpki-client