Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/h82mjoXhqGen0O8VNyks8jIWa0s.roa
File: h82mjoXhqGen0O8VNyks8jIWa0s.roa (raw, json)
Hash identifier: 6Xv6+QslHpurWPj130rP3R11pubmG06+ycW3uOqvmWY=
Subject key identifier: 87:CD:A6:8E:85:E1:A8:67:A7:D0:EF:15:37:29:2C:F2:32:16:6B:4B
Certificate issuer: /CN=51b365732103ca64a5885e5b90f8edada08e2884
Certificate serial: 018572C38494CA9A0ED953024D28FA63BCB3
Authority key identifier: 51:B3:65:73:21:03:CA:64:A5:88:5E:5B:90:F8:ED:AD:A0:8E:28:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNlcyEDymSliF5bkPjtraCOKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/h82mjoXhqGen0O8VNyks8jIWa0s.roa
Signing time: Mon 02 Jan 2023 13:54:54 +0000
ROA not before: Mon 02 Jan 2023 13:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 62.122.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:84:94:ca:9a:0e:d9:53:02:4d:28:fa:63:bc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b365732103ca64a5885e5b90f8edada08e2884
Validity
Not Before: Jan 2 13:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87cda68e85e1a867a7d0ef1537292cf232166b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:96:21:c1:12:bd:3f:46:e6:ab:00:c6:0c:63:
e3:a9:b9:6c:bd:79:8d:25:4e:bf:21:46:18:05:81:
3a:02:03:65:e9:73:7d:51:05:6c:92:90:29:d2:16:
db:b8:2f:6f:92:7c:49:eb:5f:03:59:58:08:50:02:
54:04:19:2b:4b:b7:32:6c:14:38:4a:79:18:aa:23:
46:b9:a2:af:1d:26:a2:28:56:ee:38:7a:f1:e3:ca:
ce:84:a5:b8:58:43:84:de:19:e1:a0:ab:7d:60:d6:
e4:f5:9e:2e:bf:ff:f4:9c:6b:d0:b5:84:01:14:90:
eb:b9:6e:6c:b7:34:e4:d4:e5:77:c9:63:88:f5:bf:
8e:e7:bf:1e:66:6c:2e:7f:f0:81:2b:2f:3f:53:d6:
79:56:01:83:5e:5d:94:1b:2c:d4:f5:90:54:d1:04:
6c:67:e4:9a:14:3a:6b:41:34:a9:54:15:b3:91:e5:
1d:49:83:30:3f:34:49:7f:27:5c:9d:05:68:e1:91:
17:28:d2:65:e8:c8:f1:f9:e7:49:15:fc:22:78:8a:
3c:7d:1f:46:4d:2e:d5:65:5c:29:40:5e:02:41:77:
65:40:7c:11:e1:0a:22:06:60:ea:6c:15:4f:8b:9d:
be:db:8b:d7:69:18:bb:61:ab:ad:6a:98:a2:74:dd:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CD:A6:8E:85:E1:A8:67:A7:D0:EF:15:37:29:2C:F2:32:16:6B:4B
X509v3 Authority Key Identifier:
keyid:51:B3:65:73:21:03:CA:64:A5:88:5E:5B:90:F8:ED:AD:A0:8E:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNlcyEDymSliF5bkPjtraCOKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/h82mjoXhqGen0O8VNyks8jIWa0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/cecf9d-4044-4ab0-bbbf-8337b52e4c6c/1/UbNlcyEDymSliF5bkPjtraCOKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
23:5e:27:65:3a:06:c6:63:00:44:db:76:73:e2:06:61:d8:9a:
f6:d7:6f:19:99:63:93:a9:9c:cf:95:19:86:f4:d3:5e:f8:8b:
75:62:d6:d5:63:89:e4:b1:1f:d2:a5:de:c6:34:8c:91:b9:68:
28:b0:37:3d:7b:40:1a:55:5c:e3:3b:50:40:f8:74:cc:65:0b:
c0:4f:10:f8:8a:ee:ce:1d:19:58:93:6f:df:2a:83:6d:ee:0d:
74:cb:5e:cb:30:64:e8:b7:77:71:33:0c:52:2a:73:55:20:61:
42:34:ee:16:19:f4:c5:fd:4a:9c:a2:56:98:9e:1e:5d:d5:06:
de:95:e3:23:15:b9:2c:ef:74:b5:61:d0:53:b4:7e:c3:a1:29:
55:86:3d:cf:6d:c3:e8:9d:fd:27:18:12:b9:a6:d4:c7:da:f5:
3f:fc:3b:e4:7d:43:bf:13:f9:71:04:b8:bd:5a:64:cc:53:68:
68:5f:08:e3:84:3e:95:9e:00:a3:88:dd:e0:96:0c:e1:bd:25:
de:a7:d6:cf:c1:c1:c2:39:17:67:d9:24:20:44:c0:10:5b:4b:
bd:d1:5a:ac:df:e9:95:d7:04:ab:c0:b5:33:f2:2e:49:38:4b:
ae:b0:59:ea:cc:ad:d7:fb:cd:6a:47:e7:5c:bb:f5:d5:68:b4:
de:c5:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:54:55 2025 by rpki-client