Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa
File: 0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa (raw, json)
Hash identifier: yrHnQMXQ6Qe+mkwHNhl6sEUBZtgafrbZ/F8WnR+E6Bs=
Subject key identifier: D0:D4:3E:58:0D:3B:8A:F1:CD:6C:10:87:07:C4:65:40:BC:40:A0:B5
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 0194244552FD14B49B170A3BD61AC8930049
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25091
IP address blocks: 62.106.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:52:fd:14:b4:9b:17:0a:3b:d6:1a:c8:93:00:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0d43e580d3b8af1cd6c108707c46540bc40a0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:8c:94:8f:e9:15:09:b4:3c:16:bb:84:3d:
94:b8:aa:a7:10:e6:76:2e:ff:b8:13:fd:80:6b:48:
9a:a9:b8:a3:8e:98:47:29:27:c3:42:f5:76:8b:87:
ea:b4:ce:7c:68:eb:09:20:76:2f:e5:63:7a:df:67:
2a:c6:fd:55:e7:f7:6f:54:e7:8b:bb:25:9a:9e:54:
d2:50:94:5c:11:7a:21:69:5e:46:14:ae:56:e3:93:
d1:d5:0a:37:f7:7f:33:db:7f:a0:5b:5f:b6:bf:5a:
0b:b4:77:f8:43:77:6a:c6:97:26:40:bf:fb:0d:06:
a4:0e:b8:d4:60:73:81:26:a4:e6:cb:d4:e9:62:2a:
87:a2:de:98:bd:e8:5e:3a:32:56:69:f4:b5:bc:78:
2c:dd:b2:db:5c:20:63:4f:fd:be:78:b1:01:91:7c:
8f:0e:cb:5d:41:a7:45:33:b8:a5:9a:2f:c9:e3:d3:
c9:74:a2:3e:59:28:1f:ec:b5:5e:b3:c1:56:73:22:
a1:10:58:65:21:ca:87:d6:9b:d6:75:a1:33:90:97:
98:0a:74:05:52:e6:10:df:a6:70:81:12:b5:0c:52:
71:d2:07:87:10:da:01:16:27:40:5a:ee:4a:5f:14:
be:14:26:90:85:cc:b5:07:07:ed:15:c8:34:2c:c6:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D4:3E:58:0D:3B:8A:F1:CD:6C:10:87:07:C4:65:40:BC:40:A0:B5
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.93.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c4:b1:d4:5d:c8:04:7c:ff:b0:78:24:8b:3d:0d:1b:1d:43:
9c:cd:6b:7f:47:47:cc:95:4b:2b:fd:85:06:29:89:c6:af:61:
8f:70:7b:18:80:32:31:97:1e:dc:6c:e3:0a:91:f6:3c:34:c5:
08:31:89:d5:06:1d:d0:6d:61:d0:b6:31:19:09:fe:10:3a:0e:
76:14:4d:08:5a:17:68:ab:f0:31:5f:62:63:1c:c5:2f:d8:d8:
ee:8f:59:63:c3:ec:b6:9f:bc:45:0d:9c:4b:42:4b:50:74:72:
dd:e7:a1:f7:a3:c0:70:43:ff:c0:01:95:42:c8:fa:38:f4:a3:
2b:39:f8:20:6a:fc:1c:07:4e:cf:3a:78:5e:54:40:59:ad:6d:
10:96:e7:b3:dd:35:ea:06:21:c6:6b:30:1b:00:fe:b6:ef:d6:
cb:dc:db:cc:14:6b:e5:37:04:d8:56:bc:fc:2b:68:c7:6b:1b:
f6:d6:83:d1:81:55:b1:8a:1a:e0:ba:d8:c2:17:85:d0:b1:4d:
59:01:7a:1e:b3:af:0e:ba:7a:3d:7e:a0:3c:3f:92:e6:30:d0:
38:dd:d8:9b:4c:bb:59:a5:4c:48:a8:b5:6e:3f:4f:ca:77:65:
01:1c:1b:2b:74:8e:de:f8:fc:67:e1:e2:1f:ad:f7:7e:98:22:
b6:37:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:23:44 2025 by rpki-client