Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/eHn6AySlJiBAuuxtiCIN3RwN6qA.roa
File: eHn6AySlJiBAuuxtiCIN3RwN6qA.roa (raw, json)
Hash identifier: LgEJiOedO8COAzGV0am2pAV/Vl26Jh1hgQQo5CskTyg=
Subject key identifier: 78:79:FA:03:24:A5:26:20:40:BA:EC:6D:88:22:0D:DD:1C:0D:EA:A0
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 0194221FAEF9A0DEBF76BDF6AD9DA13D1E2E
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/eHn6AySlJiBAuuxtiCIN3RwN6qA.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 5.62.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ae:f9:a0:de:bf:76:bd:f6:ad:9d:a1:3d:1e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7879fa0324a5262040baec6d88220ddd1c0deaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:06:0a:5a:ad:82:ee:0f:7b:41:4b:66:ef:
5b:63:8d:50:d5:d6:c5:02:60:4b:38:6f:18:f3:ee:
e1:75:67:45:2a:10:af:9b:3b:47:e2:ae:11:8d:a7:
ee:82:f3:75:ac:e1:1f:03:f6:6b:9c:22:ff:7c:a3:
e0:7f:a8:93:ad:3d:b5:37:94:b4:13:ab:1c:fb:dc:
8b:36:4c:4b:a0:12:a7:91:9a:78:69:f3:b0:58:66:
73:1f:f1:6f:f6:89:5d:4b:9b:91:47:9e:44:6f:9b:
16:cb:28:80:99:68:99:ad:f0:a8:1b:bb:29:6c:f6:
0d:70:6b:28:f8:19:6f:e6:93:87:c1:eb:4a:f4:1f:
f5:e8:81:b7:66:d3:0a:cc:60:67:d5:2c:6f:34:ce:
a1:e3:1f:06:43:86:30:e2:a2:28:f7:57:74:12:6d:
81:2f:32:58:d0:18:66:62:a9:3c:ab:3f:1c:bd:aa:
0a:f7:22:6a:a9:88:48:c1:2d:48:cf:38:74:89:a3:
ac:36:46:0e:dc:d5:c3:67:ba:f2:2f:c5:52:13:05:
c6:a0:ba:ad:6c:91:bd:a4:df:5c:c4:ee:29:e0:6f:
91:33:6e:7d:09:e6:51:e6:0d:4b:7c:82:51:b8:94:
68:9a:b7:28:80:26:d9:ee:03:98:76:83:0b:72:7e:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:79:FA:03:24:A5:26:20:40:BA:EC:6D:88:22:0D:DD:1C:0D:EA:A0
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/eHn6AySlJiBAuuxtiCIN3RwN6qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.34.0/24
Signature Algorithm: sha256WithRSAEncryption
37:61:de:03:62:b4:bc:3e:44:32:ca:53:87:4d:c9:ef:74:2f:
0f:53:c3:2e:a8:df:f3:03:4d:e7:34:62:0d:d9:92:69:1e:51:
3b:f8:af:96:f7:9e:27:0b:fd:be:8e:21:d5:8f:ff:5a:83:f2:
5f:57:6c:17:6d:2f:1c:64:13:4d:b3:48:38:5e:10:7a:ff:48:
92:db:8b:4c:12:97:1a:17:76:08:20:67:75:cb:09:4a:78:57:
ec:0c:d4:1c:94:66:e1:11:b9:ce:db:e9:a9:ab:bf:66:a2:43:
26:e3:cf:8b:dd:1e:6b:26:4b:40:f5:d0:54:bc:65:2d:f7:89:
ec:a2:b5:69:94:27:36:fc:4b:d9:8c:9f:f4:fe:21:4e:da:5a:
7a:f1:1c:a7:e1:7c:80:a9:5d:fd:79:c9:59:dd:eb:98:1d:5e:
80:40:e4:99:99:81:1c:80:ce:f5:46:da:02:14:49:dd:eb:f3:
66:60:41:ca:14:01:9e:53:08:f5:5d:98:60:e8:3b:a9:08:39:
39:e1:52:82:7c:46:81:e7:c2:20:73:0e:d2:18:f0:36:2f:c2:
0e:2b:46:0a:fc:2c:f5:9f:b2:09:d8:67:65:90:4c:88:87:31:
ec:ea:06:49:6c:7b:d0:81:a2:d9:08:27:a9:c8:83:d8:aa:71:
21:10:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:28 2025 by rpki-client