Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/KKQA1wBINISMROwBGeXaDFk661o.roa
File: KKQA1wBINISMROwBGeXaDFk661o.roa (raw, json)
Hash identifier: ohcPpOduXnkYNKQ1xm4+JigFMXH/dPrwCADK3nipi+k=
Subject key identifier: 28:A4:00:D7:00:48:34:84:8C:44:EC:01:19:E5:DA:0C:59:3A:EB:5A
Certificate issuer: /CN=6a8e764c057e21d97e6cb83edb0ee52840b044bb
Certificate serial: C0CAF4
Authority key identifier: 6A:8E:76:4C:05:7E:21:D9:7E:6C:B8:3E:DB:0E:E5:28:40:B0:44:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao52TAV-Idl-bLg-2w7lKECwRLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/KKQA1wBINISMROwBGeXaDFk661o.roa
Signing time: Sat 01 Jan 2022 11:04:02 +0000
ROA not before: Sat 01 Jan 2022 11:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 62.233.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12634868 (0xc0caf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8e764c057e21d97e6cb83edb0ee52840b044bb
Validity
Not Before: Jan 1 11:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28a400d7004834848c44ec0119e5da0c593aeb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:4a:79:74:87:94:66:54:7d:3f:cd:8b:cb:
f9:0c:ad:f4:bf:fb:c9:3d:26:3c:a2:04:ca:a3:81:
ea:ac:c2:17:a9:9d:fc:f6:e1:03:c0:6c:07:d1:26:
f8:fb:dc:32:e3:8e:aa:f2:31:1e:09:b7:31:cc:e7:
10:bd:a1:3b:24:a8:df:af:2b:b5:84:68:44:e4:09:
08:6f:8b:9b:ce:bf:0c:3f:08:e5:a2:a3:37:5e:f3:
bb:4f:f2:c6:9b:5a:17:2d:f8:7b:a7:ad:ad:bb:5b:
ad:c4:de:96:37:30:d9:77:71:f9:96:b3:4d:9b:c9:
c1:32:b7:86:a2:a0:28:80:59:c3:37:bc:63:17:c3:
a0:4c:ae:9f:40:b7:a3:01:31:83:8f:91:bf:c1:71:
d8:d4:22:b0:91:0e:36:02:8f:b4:e3:55:79:ef:45:
dc:a1:87:13:ea:d8:16:36:de:10:3c:40:44:f2:b8:
80:0d:51:ab:6f:29:4c:da:84:c3:84:5d:d9:a1:05:
c0:d0:fe:3f:fc:0c:38:f5:4d:d1:06:c2:d8:29:5c:
7f:65:5e:8d:26:38:8c:10:99:1d:c1:5e:25:7d:98:
d6:0a:51:88:05:75:c7:ed:9c:ae:98:36:1f:4a:36:
1e:6c:d3:1d:3a:16:82:87:65:1c:b5:59:e4:c6:7b:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A4:00:D7:00:48:34:84:8C:44:EC:01:19:E5:DA:0C:59:3A:EB:5A
X509v3 Authority Key Identifier:
keyid:6A:8E:76:4C:05:7E:21:D9:7E:6C:B8:3E:DB:0E:E5:28:40:B0:44:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao52TAV-Idl-bLg-2w7lKECwRLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/KKQA1wBINISMROwBGeXaDFk661o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ao52TAV-Idl-bLg-2w7lKECwRLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:00:59:97:d2:d3:ac:b6:43:d6:42:98:ea:0a:72:2e:86:0f:
26:c7:89:f8:cf:fb:be:16:16:d6:01:90:96:40:e8:e9:40:c6:
4f:36:eb:4a:c0:50:c7:0f:60:86:33:63:33:93:fe:20:4b:a3:
19:1b:c7:b5:e5:f4:a4:d8:dd:46:31:35:ad:5d:f7:0b:ee:0f:
30:e0:83:75:25:18:2c:98:9b:64:22:c8:23:c9:a8:6b:22:c8:
4e:22:73:5d:a4:84:c7:1e:2a:8f:15:6e:cd:aa:e5:0c:bc:24:
5e:0c:a1:7e:8a:de:85:61:d8:d8:69:64:f0:b7:1b:2d:ed:ad:
e9:b2:04:19:79:26:a7:3b:40:98:41:cd:84:bc:a0:04:19:d2:
92:f4:7c:db:0d:ac:2b:95:09:06:20:87:63:a5:28:cc:a3:7b:
d4:ea:98:bf:e7:dd:43:2a:7f:32:7f:ce:cf:56:e1:ea:a9:39:
e4:75:89:21:e5:93:bd:d2:06:90:f1:7e:c1:d9:c7:d3:66:05:
30:05:b8:8b:51:50:cc:d8:50:d3:c9:a1:37:bf:77:4a:df:06:
fb:0d:a6:d9:cb:8a:cb:d8:89:39:cb:df:db:4d:dc:4a:c4:ac:
80:14:a9:42:0c:fe:c0:af:2f:61:dc:1d:47:99:6d:3f:b6:79:
46:df:c9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:19:36 2025 by rpki-client