Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/4EaNVMMy7vZ1buyS1ymiF2kElqM.roa
File: 4EaNVMMy7vZ1buyS1ymiF2kElqM.roa (raw, json)
Hash identifier: rywt7flGROan2UizLkq60w93q5IVhvo0S9hBxc5r9Xw=
Subject key identifier: E0:46:8D:54:C3:32:EE:F6:75:6E:EC:92:D7:29:A2:17:69:04:96:A3
Certificate issuer: /CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Certificate serial: 018CC26D7615849247AF10B81A92A4C35751
Authority key identifier: 02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/4EaNVMMy7vZ1buyS1ymiF2kElqM.roa
Signing time: Mon 01 Jan 2024 00:30:02 +0000
ROA not before: Mon 01 Jan 2024 00:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41171
IP address blocks: 62.106.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:76:15:84:92:47:af:10:b8:1a:92:a4:c3:57:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Validity
Not Before: Jan 1 00:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0468d54c332eef6756eec92d729a217690496a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:40:ce:7c:93:8d:e4:9b:f7:db:c2:91:60:
86:96:84:9a:79:71:a7:c1:7d:38:bc:35:d7:7c:ab:
c5:3d:25:6c:14:88:87:cd:7e:b5:27:fb:b7:9c:00:
5d:54:80:1d:58:da:7d:62:e5:1a:68:3d:62:12:38:
f1:07:08:2a:6b:43:1c:f4:98:41:ad:90:6d:bb:1e:
25:57:6b:23:94:97:96:93:84:d0:34:20:df:04:bb:
5f:39:cb:58:3b:fd:47:89:aa:68:f8:b9:53:20:83:
34:23:46:47:40:f8:64:63:3c:d8:8f:30:d0:4e:1f:
53:47:39:68:27:df:97:35:df:c3:af:da:50:a0:07:
d4:7a:e3:9a:01:b5:f8:79:7d:1f:fb:57:6d:9e:37:
ba:ce:3c:8d:54:8d:0e:39:43:d9:0a:dd:20:3a:d3:
91:98:9a:27:71:fe:9c:fd:27:84:2f:93:84:6a:77:
67:d3:a3:06:8d:c1:88:c6:34:db:94:b7:4e:48:3c:
d2:a9:f2:2f:6b:e9:02:a1:a9:79:9a:4b:d9:c8:6f:
ee:e7:66:2c:75:9c:b5:c5:b9:8c:35:30:f1:0f:8f:
cd:b9:21:f3:63:65:2d:8c:47:22:00:ce:ad:e1:bb:
45:57:cc:fb:e0:0f:04:a2:3f:7d:f0:1c:9a:3e:a3:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:46:8D:54:C3:32:EE:F6:75:6E:EC:92:D7:29:A2:17:69:04:96:A3
X509v3 Authority Key Identifier:
keyid:02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/4EaNVMMy7vZ1buyS1ymiF2kElqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e5:68:73:44:23:eb:5c:5a:c0:a6:4b:26:be:e2:05:78:74:
25:ac:bd:6c:c6:c8:0c:ce:3b:33:96:c5:3c:4d:48:80:c9:c8:
9e:52:2e:0f:0b:67:db:9e:b7:9a:af:43:ba:bf:48:0e:b4:0e:
8f:d5:f5:98:ee:5d:47:a7:0c:22:46:fb:37:5f:21:a2:35:2d:
38:33:06:8a:c6:d0:8f:53:80:69:ae:32:aa:86:e4:6b:2c:3e:
b3:68:33:a7:3c:b6:c5:21:ad:ed:19:64:cc:66:98:cf:88:66:
d5:19:b1:71:77:ef:53:4e:bd:b9:ef:5a:45:ea:8c:08:72:42:
93:41:7f:52:01:f8:d9:47:fe:3c:12:14:44:d4:0a:f4:c1:b0:
82:7c:a6:ea:dc:58:98:42:5e:52:30:86:9e:b1:df:c8:82:19:
79:36:3c:65:d2:f7:0c:a5:98:41:28:d9:e0:76:80:36:88:5d:
f0:8e:10:5c:a2:45:4f:34:e4:f0:d1:1f:c5:ab:3b:2a:b5:d1:
23:c0:ec:9b:49:1f:95:bc:db:dd:45:a9:21:d6:8c:d4:ca:49:
73:36:3e:5d:7f:36:83:c2:25:a3:2a:e8:e1:f0:ab:05:c5:bc:
75:08:9f:ae:e5:86:ca:3e:d2:31:f8:e4:1b:d4:f5:4c:e5:d2:
15:c8:17:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:19 2025 by rpki-client