Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/g8ik8LhTpez36WlLRS_uriZTLH8.roa
File: g8ik8LhTpez36WlLRS_uriZTLH8.roa (raw, json)
Hash identifier: YLceWIfaqnl3VHFv/2hpFigz+RqKWgu9tOc3uAbYAYQ=
Subject key identifier: 83:C8:A4:F0:B8:53:A5:EC:F7:E9:69:4B:45:2F:EE:AE:26:53:2C:7F
Certificate issuer: /CN=5a97979db726fe3e693db92d4fa18fd741be7699
Certificate serial: 01941F8C5A010AC566266CE8A1382C13A7D2
Authority key identifier: 5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/g8ik8LhTpez36WlLRS_uriZTLH8.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215008
IP address blocks: 62.106.85.0/24 maxlen: 24
2a13:4ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5a:01:0a:c5:66:26:6c:e8:a1:38:2c:13:a7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a97979db726fe3e693db92d4fa18fd741be7699
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83c8a4f0b853a5ecf7e9694b452feeae26532c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:4f:8f:74:05:a3:91:cf:5f:86:dd:33:ec:
13:a2:a8:9a:5c:93:4b:24:6d:8e:b4:6d:5a:41:70:
b2:ae:cc:6d:65:6d:39:1b:42:02:48:38:77:6f:8c:
27:88:cf:c2:cd:6b:4c:30:1f:54:f6:d5:83:06:7e:
90:ab:d6:c9:ae:5d:d9:ae:0f:4f:72:88:3a:63:19:
38:2e:46:f9:c8:13:4c:03:e8:fa:38:29:98:3f:6c:
d3:48:b3:c7:eb:8b:3f:a9:3e:b7:33:11:60:f8:33:
87:86:e5:61:d0:09:87:12:21:27:a6:62:99:1f:e6:
05:94:7a:8e:48:16:93:cc:ca:06:ec:30:e6:6d:fe:
3d:7a:53:8c:da:3b:b7:fc:f0:e3:35:4a:74:f3:bf:
95:b2:b0:19:16:a3:2e:0d:44:a8:a5:16:40:12:ee:
76:cb:1e:e6:ec:b4:26:77:d1:21:96:09:09:03:c7:
73:fc:f2:b8:c1:67:81:1e:36:aa:42:0d:14:9c:c2:
05:8c:f3:75:5b:57:42:98:8e:5c:56:75:77:80:c9:
14:b4:be:31:21:f3:0a:e2:52:10:46:7c:0a:9b:6b:
74:bd:10:8b:64:1b:c3:40:a1:6e:92:e4:0f:c0:a9:
8e:83:7c:a7:aa:aa:63:f4:4a:21:01:8a:28:39:1c:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:A4:F0:B8:53:A5:EC:F7:E9:69:4B:45:2F:EE:AE:26:53:2C:7F
X509v3 Authority Key Identifier:
keyid:5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/g8ik8LhTpez36WlLRS_uriZTLH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.85.0/24
IPv6:
2a13:4ec0::/29
Signature Algorithm: sha256WithRSAEncryption
84:1a:11:74:9b:49:49:a0:18:7e:a9:d0:62:6f:c1:33:f2:79:
f9:50:b6:c0:1b:0a:01:b5:46:cc:98:df:38:bd:ff:f9:19:31:
ab:54:6a:de:0d:1c:1a:80:13:7f:31:ef:73:d1:ba:7f:fd:5e:
0a:f7:aa:6f:7c:fe:40:dc:f1:05:ec:80:af:01:96:b3:d3:58:
05:d6:7d:c0:86:bf:3a:5b:22:46:c4:c2:37:e8:e7:8e:cc:ac:
9c:cd:36:1c:97:4c:a0:f5:c9:fe:f6:53:15:95:c5:de:00:25:
8e:f9:44:e6:32:f2:28:8a:6d:9a:3c:83:db:2d:8a:ee:86:a2:
b1:d1:f0:72:31:f4:c7:b7:5c:4d:1a:6e:3d:6c:1f:e5:04:cf:
73:c5:22:e6:fd:fe:8d:dc:cb:90:b8:ca:8d:db:c8:57:ce:56:
42:d8:f2:6a:14:43:ce:db:0b:81:69:91:e6:a4:5b:b0:57:f6:
67:d5:2b:0a:ab:eb:23:8f:80:9b:97:0d:79:85:f3:b0:bb:dc:
74:e2:b7:f1:28:5c:87:03:84:08:6c:1b:ad:87:d8:e7:7d:10:
81:78:39:15:2d:5e:c1:4e:76:a5:db:37:2b:a0:91:e3:0c:79:
38:30:b2:04:3a:87:e5:e3:13:9c:3a:b7:db:b9:f8:d3:17:d7:
2d:6c:cd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:44:09 2025 by rpki-client