Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Ce9jeS-IXhlBMTdFOItH-7FMFMk.roa
File: Ce9jeS-IXhlBMTdFOItH-7FMFMk.roa (raw, json)
Hash identifier: smtMPIa/chQ4cUyMZNqJttfV6LpKfSeq7m9M6H07lMo=
Subject key identifier: 09:EF:63:79:2F:88:5E:19:41:31:37:45:38:8B:47:FB:B1:4C:14:C9
Certificate issuer: /CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Certificate serial: 01856D01914184AEF1471EE7B4B4D7C77A27
Authority key identifier: 02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Ce9jeS-IXhlBMTdFOItH-7FMFMk.roa
Signing time: Sun 01 Jan 2023 11:04:57 +0000
ROA not before: Sun 01 Jan 2023 11:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41171
IP address blocks: 62.106.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:91:41:84:ae:f1:47:1e:e7:b4:b4:d7:c7:7a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Validity
Not Before: Jan 1 11:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09ef63792f885e1941313745388b47fbb14c14c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:24:3d:e2:9e:76:4a:fc:4a:91:c4:db:7f:14:
8e:ca:1f:bd:13:81:be:d0:62:d1:1f:5c:b6:4e:63:
ac:66:eb:1f:71:8c:e7:a9:25:e6:7f:b0:c6:af:d5:
79:6d:cb:cd:ea:99:f7:3e:e9:37:81:34:d6:a5:91:
e8:77:23:0c:0b:ba:ce:ef:d9:b5:fe:40:1e:bb:39:
da:16:b3:6b:b5:81:d5:51:55:c8:90:b9:7b:28:2b:
82:79:64:90:66:e1:dc:a6:8f:41:3d:6b:4a:a8:60:
fe:28:01:cc:ab:be:cb:23:cb:15:94:7f:ee:11:6d:
f1:67:ec:d2:a8:e1:75:fa:5c:31:fa:1e:2d:97:e4:
ba:c8:86:f1:18:04:7a:01:70:c4:98:75:a4:0c:36:
19:6a:d0:54:a1:3c:ca:46:c4:de:97:82:36:81:c8:
cc:96:6a:53:c2:b0:63:88:6a:fd:a3:37:5e:f4:76:
b8:41:0a:a9:a3:5d:c6:3f:39:6d:fa:f7:27:1c:5c:
60:3d:08:a8:80:3c:40:c8:a3:13:17:c1:0c:9a:ff:
e3:b2:6d:d5:17:37:81:66:e4:00:8a:1e:e6:7c:a1:
66:c9:1d:1d:e9:6f:ef:37:f4:44:88:d6:1f:07:ba:
04:ce:bb:e7:41:b2:f5:9f:e6:44:97:85:db:86:0e:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:63:79:2F:88:5E:19:41:31:37:45:38:8B:47:FB:B1:4C:14:C9
X509v3 Authority Key Identifier:
keyid:02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Ce9jeS-IXhlBMTdFOItH-7FMFMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.83.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f4:f6:cb:eb:61:4e:ae:70:8d:94:79:8d:da:d5:95:e4:18:
56:a5:10:1b:11:54:60:75:f6:b0:43:65:dc:73:d8:ef:f3:04:
4f:4d:38:88:27:4a:69:f8:c3:71:d8:a7:41:01:41:36:83:2d:
69:b5:70:95:28:8b:d7:35:9b:71:89:cd:4e:ed:c8:32:89:95:
8a:44:e5:3c:21:27:e6:b4:a3:a8:cd:a9:16:9a:27:a0:89:07:
ac:b4:ae:24:01:97:59:52:c3:b4:e5:32:50:bc:41:44:44:fa:
29:b8:66:ef:bd:60:90:e1:e2:de:3d:2f:4d:d4:1e:55:88:ba:
ce:32:40:67:32:3e:9b:5e:17:4b:dc:8e:83:8d:14:c4:ec:0f:
6e:2d:de:e3:e3:ce:00:c0:26:6d:f5:83:bc:b4:c3:bd:00:85:
2a:43:ef:78:a6:13:19:a0:83:2c:67:a5:fc:73:e4:d0:f1:4c:
2e:d9:76:aa:a0:99:ba:22:12:ed:1b:35:49:e2:fc:05:0b:d8:
10:38:8f:31:ee:82:22:bc:d2:0d:df:99:62:25:dc:ac:fb:b1:
09:01:83:c3:9a:07:86:5e:a3:6a:7e:f5:e3:1b:73:a7:96:9d:
b0:6b:bb:21:0b:c5:c9:29:8b:8e:b7:3d:ee:dc:54:4c:54:ff:
d2:fa:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:01 2025 by rpki-client