Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa
File: iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa (raw, json)
Hash identifier: LNWcJcYvVHSoTAScNXiZdlhb/qYL7H8xTSxcF3h+E20=
Subject key identifier: 89:5D:16:BF:9C:00:00:0B:B0:4D:9D:20:58:F5:DC:3D:26:DF:0A:77
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019423D7370B475CAA8ACF2851023AD62E3F
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 62.233.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:37:0b:47:5c:aa:8a:cf:28:51:02:3a:d6:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=895d16bf9c00000bb04d9d2058f5dc3d26df0a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:5e:b4:c4:95:b6:37:8d:41:28:61:80:cf:
36:e7:e0:9b:4a:a8:a0:87:5c:55:f2:a1:45:0e:7b:
c8:f3:7f:b9:ba:a2:f2:c5:bb:8d:c1:d3:d9:2d:c6:
50:a4:7e:64:4a:f6:7a:c5:97:0b:11:02:b1:af:f0:
62:a7:0c:9f:e2:0e:cf:e2:65:0b:0a:0e:ef:cd:03:
36:45:52:aa:85:3f:0e:a4:05:7f:fa:94:ac:9c:78:
99:27:76:c1:53:83:7f:e5:7c:e4:ec:94:12:a6:ce:
c8:f2:d4:7b:3f:e8:fd:81:9c:46:1e:b8:26:24:ea:
8e:6d:9e:91:2d:e7:c4:66:8e:b6:8c:c4:14:6f:be:
7a:6b:3a:73:75:8f:b7:a8:17:56:04:03:1f:d8:11:
17:0b:33:bc:26:cd:62:bd:dd:00:d1:f5:00:cb:5d:
c3:41:cc:5c:f6:0d:73:88:18:96:a1:a5:13:05:06:
82:eb:1f:e1:6f:7a:16:53:e2:8a:e7:38:29:84:00:
08:11:80:a8:58:28:56:a7:47:28:9e:07:8c:53:dc:
e8:7a:a8:24:30:3d:82:24:3c:25:0e:45:cc:24:57:
58:79:ca:72:5d:c1:cd:cb:d3:93:3e:b3:d0:46:9c:
5d:79:f9:ba:28:5f:8a:19:b8:41:ea:b5:26:ba:17:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:16:BF:9C:00:00:0B:B0:4D:9D:20:58:F5:DC:3D:26:DF:0A:77
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:50:07:78:a7:c5:c5:34:dc:21:c0:ef:da:2f:40:38:b8:f5:
d8:66:b0:30:1b:3d:bb:66:84:a8:c5:fc:42:4f:ab:2f:e7:97:
4f:e8:9a:d9:2b:5d:d4:c5:b2:2f:c0:f4:ef:4f:d9:0d:b4:2c:
d8:ec:ed:26:db:8b:3d:02:88:2e:0d:41:50:a6:3c:82:10:65:
2e:d1:ae:80:8b:34:cc:c0:5c:71:92:4a:13:dd:9e:b1:06:4a:
f4:6e:77:62:09:0e:d6:39:ab:c2:74:0a:da:ee:79:c3:34:84:
25:3a:ef:93:d8:0b:cd:34:d9:c6:b0:04:d3:29:34:c5:76:fa:
5d:9f:ad:d1:ee:a1:83:36:4a:f2:ec:4d:bd:38:1c:e4:53:ab:
87:f1:cf:51:03:73:e2:11:53:76:85:c7:4a:4e:af:25:5b:13:
4f:b5:bc:72:e4:e6:ba:a4:ce:51:e8:63:a2:3b:a1:d7:92:fb:
d4:f0:57:ee:73:bf:08:0a:eb:79:9b:28:1b:54:bf:d2:0d:26:
69:cc:0f:a6:f5:cb:ff:fc:ba:1a:90:52:26:20:34:19:f6:66:
b8:34:3d:f8:41:48:6e:88:59:83:9e:a2:88:de:28:55:43:66:
c5:73:b7:45:95:2f:34:90:7d:59:36:19:ba:ba:2a:db:f8:fb:
ec:9b:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:11 2025 by rpki-client