Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/505f6a-cce8-4f0d-80ef-4e338b16cf2f/1/RD3YT1ADVzAw7kiGPhnPqQvh2c8.roa
File: RD3YT1ADVzAw7kiGPhnPqQvh2c8.roa (raw, json)
Hash identifier: aYuBg9WZ1ZWN/VwMrkkjs6t5avpBU5yUv6yujzxrJZ8=
Subject key identifier: 44:3D:D8:4F:50:03:57:30:30:EE:48:86:3E:19:CF:A9:0B:E1:D9:CF
Certificate issuer: /CN=5e397df22e9d4829862d8cd710d6b3257b4df95e
Certificate serial: E735
Authority key identifier: 5E:39:7D:F2:2E:9D:48:29:86:2D:8C:D7:10:D6:B3:25:7B:4D:F9:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjl98i6dSCmGLYzXENazJXtN-V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/505f6a-cce8-4f0d-80ef-4e338b16cf2f/1/RD3YT1ADVzAw7kiGPhnPqQvh2c8.roa
Signing time: Sun 17 Apr 2022 12:44:08 +0000
ROA not before: Sun 17 Apr 2022 12:44:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8849
IP address blocks: 62.122.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59189 (0xe735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e397df22e9d4829862d8cd710d6b3257b4df95e
Validity
Not Before: Apr 17 12:44:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=443dd84f5003573030ee48863e19cfa90be1d9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:b7:0f:4a:ec:c0:af:d1:9b:fa:3d:a2:dc:
de:ad:16:b8:9d:6d:7f:00:4f:53:dc:27:f6:6e:75:
c1:97:18:38:e4:94:fe:a9:1d:22:17:92:a9:db:d0:
80:a4:11:8a:12:c8:fb:44:a0:02:d7:65:98:0f:e8:
a8:8e:82:9e:35:15:38:bb:f8:ac:dc:87:de:25:74:
2b:5d:03:e8:e8:ce:dd:64:59:25:1f:38:c7:8e:38:
4b:81:95:cb:b4:0f:4c:35:16:d7:73:d0:be:c3:ec:
1d:63:e7:75:01:60:58:99:4a:50:f5:35:5e:4f:c6:
0f:7c:f3:a7:70:44:52:60:78:c9:48:6b:85:bf:d2:
fc:1a:8a:5a:2c:21:8f:65:22:d6:eb:31:54:85:fe:
59:4d:00:91:2a:65:16:99:76:1f:02:c6:07:9f:bb:
75:6b:64:1e:58:76:f3:0b:0d:7c:e4:8c:d7:22:53:
15:30:df:73:e0:6e:75:d3:ff:87:d1:fb:63:2b:71:
c4:d8:a4:65:d0:87:fe:94:e5:79:9c:25:2c:c1:da:
01:dc:2d:e5:c3:ce:f7:86:f7:0b:6e:8e:68:0d:5c:
1c:ea:b8:d1:8d:79:3d:70:b9:e9:5d:28:11:36:c9:
5a:9e:59:d8:17:8e:f7:b9:37:f9:64:99:cd:23:10:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3D:D8:4F:50:03:57:30:30:EE:48:86:3E:19:CF:A9:0B:E1:D9:CF
X509v3 Authority Key Identifier:
keyid:5E:39:7D:F2:2E:9D:48:29:86:2D:8C:D7:10:D6:B3:25:7B:4D:F9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjl98i6dSCmGLYzXENazJXtN-V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/505f6a-cce8-4f0d-80ef-4e338b16cf2f/1/RD3YT1ADVzAw7kiGPhnPqQvh2c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/505f6a-cce8-4f0d-80ef-4e338b16cf2f/1/Xjl98i6dSCmGLYzXENazJXtN-V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.187.0/24
Signature Algorithm: sha256WithRSAEncryption
52:41:02:e6:89:14:0d:9f:f6:ad:66:12:a1:be:fc:71:4e:64:
4e:41:97:b8:e5:3c:ff:58:1d:42:d2:d1:29:46:a5:66:7f:76:
72:18:94:63:58:fe:8a:93:c5:5c:9d:22:d7:47:c8:d5:cb:48:
7d:7c:44:0d:00:40:e3:3f:27:f5:8d:9e:fa:05:98:99:b9:17:
05:2f:23:2d:92:cf:50:9e:d8:18:ab:fd:7a:12:2c:7c:45:f2:
a1:c9:14:dd:40:05:e9:4b:9b:08:06:a3:61:2e:2b:28:d6:45:
a2:c8:d0:e5:1d:8b:5a:88:c8:75:c0:81:d6:9d:52:d4:9b:96:
11:cf:5b:00:a0:54:a3:6d:4b:79:19:71:40:e8:ee:27:5f:af:
dd:9f:c7:03:19:69:bd:b6:91:56:98:ca:b8:b6:de:31:62:fd:
2c:f1:1e:67:c5:c6:56:ca:d6:c3:97:fb:60:23:c5:77:8f:63:
eb:4b:b4:35:bc:ee:4a:11:a8:56:70:80:e0:79:98:27:34:3d:
d3:22:f7:ae:43:c1:fa:05:f4:12:68:9b:04:1e:f3:b4:15:8d:
26:ff:1f:5c:14:d9:69:35:da:ec:d7:94:8e:c7:bd:02:38:a1:
fd:e2:8b:dc:78:42:c4:ff:3a:3e:14:c3:97:ad:4f:ec:ae:fe:
c0:4a:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:24 2025 by rpki-client