Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/ACt3U68VCYA4u4z9N2IICwiMSjc.roa
File: ACt3U68VCYA4u4z9N2IICwiMSjc.roa (raw, json)
Hash identifier: EPw+bIw/Qaf3HjCZ2hK5l/O9XRJufhuRuXvkDl345Ac=
Subject key identifier: 00:2B:77:53:AF:15:09:80:38:BB:8C:FD:37:62:08:0B:08:8C:4A:37
Certificate issuer: /CN=a76e0453e24186ac489641124630e37517aa22e4
Certificate serial: 0185513AC500A2E50A2B1085311A50458747
Authority key identifier: A7:6E:04:53:E2:41:86:AC:48:96:41:12:46:30:E3:75:17:AA:22:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p24EU-JBhqxIlkESRjDjdReqIuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/ACt3U68VCYA4u4z9N2IICwiMSjc.roa
Signing time: Tue 27 Dec 2022 01:38:03 +0000
ROA not before: Tue 27 Dec 2022 01:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 62.3.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:51:3a:c5:00:a2:e5:0a:2b:10:85:31:1a:50:45:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76e0453e24186ac489641124630e37517aa22e4
Validity
Not Before: Dec 27 01:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=002b7753af15098038bb8cfd3762080b088c4a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:c0:c4:0e:28:ef:5a:bc:fa:fa:d0:87:e8:
97:9d:27:39:fe:d9:f6:86:3d:c7:5a:3e:31:05:15:
0e:ec:33:f8:d4:e7:46:30:4a:a9:27:25:3e:15:45:
4c:a3:7e:3c:dd:a8:bc:06:e3:4e:70:f4:a5:bc:46:
69:31:75:6c:86:c5:47:9e:1d:dc:c4:21:17:fa:1f:
4f:16:76:da:7a:0a:fc:e2:0f:97:4c:21:54:6c:5d:
08:c2:fd:f5:42:27:a2:80:0a:6f:34:56:70:0e:e3:
e2:4b:6a:04:d5:05:65:6e:54:65:92:11:3c:9f:33:
2d:99:73:2e:60:52:ce:f0:da:83:f5:1f:f0:b2:3e:
8d:71:91:ac:10:4a:d6:79:86:44:a0:50:ef:70:4f:
46:b0:c1:bd:47:fb:7d:2c:51:cb:10:6e:41:18:35:
35:76:f1:71:cc:74:cb:e5:cc:71:1e:ad:85:fd:c8:
d9:ad:26:74:38:04:4f:89:5e:ab:3f:e7:18:4f:bf:
07:a5:da:56:59:62:d6:ea:d1:c7:7b:59:d0:e2:d5:
ba:18:a5:9f:bb:72:51:6e:fd:49:27:a7:9e:af:e1:
9d:d1:3f:be:4e:57:eb:c7:75:96:aa:c5:0e:3b:a1:
0b:c5:af:69:28:ab:40:3e:a1:9f:9b:94:d5:7b:5a:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2B:77:53:AF:15:09:80:38:BB:8C:FD:37:62:08:0B:08:8C:4A:37
X509v3 Authority Key Identifier:
keyid:A7:6E:04:53:E2:41:86:AC:48:96:41:12:46:30:E3:75:17:AA:22:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p24EU-JBhqxIlkESRjDjdReqIuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/ACt3U68VCYA4u4z9N2IICwiMSjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/269e16-26a9-4b19-8df6-cfbb77f3bd72/1/p24EU-JBhqxIlkESRjDjdReqIuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.12.0/24
Signature Algorithm: sha256WithRSAEncryption
06:04:7e:f5:93:f1:aa:e6:e9:06:48:73:a7:35:73:da:25:35:
d8:c9:b9:98:66:8f:77:1c:5e:d4:9b:60:2f:29:dc:19:5c:db:
fb:f2:2e:d1:2a:6a:fd:0a:06:0e:ea:37:ac:0e:11:63:99:a2:
8e:0f:c6:f9:e2:52:58:62:da:b3:9b:ec:7e:12:78:74:97:ee:
c0:c3:c8:64:bb:8d:dc:33:14:43:b0:eb:e5:ec:3c:48:13:50:
97:95:3c:c0:25:1c:81:b0:63:05:bc:0c:da:87:5a:97:0e:06:
46:c9:98:5c:57:6a:5b:72:57:38:1b:2a:87:04:da:34:52:b8:
eb:02:af:18:2b:c5:63:09:1e:7b:1f:77:8f:e8:89:46:89:dd:
21:dd:7a:10:cd:34:e8:b3:5e:7f:5e:64:e0:87:d0:48:09:da:
f8:c5:6b:89:2b:41:6f:40:ab:6a:9c:53:c7:35:f4:6d:0d:6e:
8c:2f:f5:ca:28:70:4a:ce:e3:58:f9:28:54:ef:ed:95:c4:23:
d8:1b:5a:9b:68:18:e8:94:79:f7:d0:2e:10:49:11:a7:35:60:
d0:6f:3e:57:28:7e:01:fc:2e:68:07:a7:11:7b:96:26:71:ca:
4b:0f:48:c5:e7:0b:94:1b:47:2b:24:66:b1:17:be:17:8b:0a:
a9:86:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:59 2025 by rpki-client