Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ejzA7QOwn1Iy4Kh-XNc5SOnM_eQ.roa
File: ejzA7QOwn1Iy4Kh-XNc5SOnM_eQ.roa (raw, json)
Hash identifier: 65az9RTHEssWysc1z3fFYNhmJM+9moH9aqKchj9tIXc=
Subject key identifier: 7A:3C:C0:ED:03:B0:9F:52:32:E0:A8:7E:5C:D7:39:48:E9:CC:FD:E4
Certificate issuer: /CN=6a8e764c057e21d97e6cb83edb0ee52840b044bb
Certificate serial: 0187ED15DB6919093B0F58668F6B0BA1404B
Authority key identifier: 6A:8E:76:4C:05:7E:21:D9:7E:6C:B8:3E:DB:0E:E5:28:40:B0:44:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao52TAV-Idl-bLg-2w7lKECwRLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ejzA7QOwn1Iy4Kh-XNc5SOnM_eQ.roa
Signing time: Fri 05 May 2023 18:04:05 +0000
ROA not before: Fri 05 May 2023 18:04:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.233.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ed:15:db:69:19:09:3b:0f:58:66:8f:6b:0b:a1:40:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8e764c057e21d97e6cb83edb0ee52840b044bb
Validity
Not Before: May 5 18:04:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3cc0ed03b09f5232e0a87e5cd73948e9ccfde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:be:c8:83:39:0e:0b:8f:de:a8:41:54:24:
a7:f7:eb:9a:90:9f:45:e5:8f:3a:2a:ec:94:66:86:
35:96:5e:94:76:ed:c1:ac:39:75:ed:c0:cf:69:79:
54:8b:21:14:e3:9f:e9:6b:b1:c4:52:39:e1:4d:57:
c6:63:21:3f:2d:2f:fd:b9:88:0a:ad:7c:41:bb:4f:
94:84:89:e4:3f:06:d2:d6:5d:e8:8c:8b:57:1c:83:
7e:0b:55:f6:c0:12:b7:c5:43:1a:d5:f8:50:ea:f2:
b1:9c:0d:85:64:ed:75:1d:6a:8f:4f:f1:1e:36:72:
97:50:7a:1f:c8:0b:61:e3:fe:eb:2a:f1:2c:86:69:
3c:07:f6:e3:c4:a9:94:57:06:36:58:8c:12:bf:8c:
2d:cf:1e:6d:37:50:f3:71:7a:2b:57:2b:d5:f3:ce:
ff:bf:45:3b:88:d4:9f:a4:1d:53:6c:75:2c:78:19:
a5:ed:c1:79:d2:9e:7f:ff:2f:e2:51:d4:24:2b:60:
2c:3f:8f:c4:ce:bb:3c:ed:d4:4d:7b:0c:73:56:8d:
a7:9a:ea:35:77:5d:01:b6:72:72:2e:c3:ec:c7:25:
0e:58:38:59:fd:a8:90:58:12:59:99:15:ba:21:23:
54:bf:1c:43:3f:9f:d9:f3:7c:f3:e9:80:08:2a:fc:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:C0:ED:03:B0:9F:52:32:E0:A8:7E:5C:D7:39:48:E9:CC:FD:E4
X509v3 Authority Key Identifier:
keyid:6A:8E:76:4C:05:7E:21:D9:7E:6C:B8:3E:DB:0E:E5:28:40:B0:44:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao52TAV-Idl-bLg-2w7lKECwRLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ejzA7QOwn1Iy4Kh-XNc5SOnM_eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ao52TAV-Idl-bLg-2w7lKECwRLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.44.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:26:c6:5c:e9:1b:95:80:83:55:d6:6b:11:32:54:14:b3:10:
a2:bb:ff:02:da:03:b9:ef:d9:19:22:6e:2c:51:49:60:98:a0:
35:48:3b:fc:ae:4c:39:64:33:7a:93:0a:0a:2c:d7:c5:81:00:
f1:10:db:5e:a0:8e:ca:8d:e3:8d:af:a0:16:1f:ba:bf:cb:09:
61:c1:3b:20:46:38:e5:11:8a:43:5c:45:a1:33:85:56:ac:67:
8e:4b:64:68:64:f1:db:7c:b4:8d:50:df:1d:d6:df:fd:0f:04:
c9:f6:ab:b4:d3:a6:69:87:13:db:fa:8b:f1:46:2b:fa:fb:5c:
79:a7:2c:cb:6f:7d:44:8a:9f:ab:2a:a9:66:4a:fa:d9:50:c8:
12:94:9c:c6:e8:84:c1:06:71:07:f6:dc:7d:29:71:97:8e:ad:
49:d6:e9:16:6b:92:29:eb:ce:86:04:c4:a3:d9:10:ee:c3:71:
0f:35:54:3b:d7:5c:6e:64:4f:2a:32:d6:f5:41:fc:82:67:79:
89:90:73:6e:16:32:e2:35:8e:ab:a9:1f:27:61:70:53:07:8a:
12:e0:0c:80:2c:0d:8c:6a:c0:b0:78:33:9b:9a:d5:13:45:55:
be:8b:f7:a0:bb:b7:83:c4:ea:52:d1:d7:1f:0f:e5:64:98:8e:
16:f2:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:41:55 2025 by rpki-client