Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/sHEfYJS-Y-0pu9YD7CwUgxN7CRU.roa
File: sHEfYJS-Y-0pu9YD7CwUgxN7CRU.roa (raw, json)
Hash identifier: 5eFbj+Dzb32erxEILM7IJYL9kZTYZ/xNcxKvFJMXj+k=
Subject key identifier: B0:71:1F:60:94:BE:63:ED:29:BB:D6:03:EC:2C:14:83:13:7B:09:15
Certificate issuer: /CN=8d6ff72d9bbc5eef67360bc717c54b2ba1b0b3e4
Certificate serial: B52F15
Authority key identifier: 8D:6F:F7:2D:9B:BC:5E:EF:67:36:0B:C7:17:C5:4B:2B:A1:B0:B3:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jW_3LZu8Xu9nNgvHF8VLK6Gws-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/sHEfYJS-Y-0pu9YD7CwUgxN7CRU.roa
Signing time: Sat 01 Jan 2022 06:57:32 +0000
ROA not before: Sat 01 Jan 2022 06:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 62.106.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11874069 (0xb52f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6ff72d9bbc5eef67360bc717c54b2ba1b0b3e4
Validity
Not Before: Jan 1 06:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0711f6094be63ed29bbd603ec2c1483137b0915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:ed:d8:c2:ea:aa:97:18:36:74:fa:98:de:
74:f0:68:54:32:bb:c3:2c:02:ef:28:21:4f:b0:45:
c3:2a:6c:82:ed:f0:84:3b:0c:68:fb:70:9f:aa:c7:
04:e7:f9:c0:00:c5:3f:19:2b:61:3d:75:50:23:4b:
0c:29:fd:f4:f5:f4:37:7a:8d:43:87:c7:69:f2:cf:
b5:f7:bb:f9:9e:3b:36:d5:76:49:dd:52:aa:4a:9d:
38:6b:90:e0:26:e1:f0:b8:be:c8:f5:5e:6d:c9:c7:
d0:52:01:04:d7:ae:89:c0:fb:e3:11:e8:c7:95:83:
8c:b6:68:4a:f9:e8:fc:ca:e9:2d:5a:65:01:4c:08:
15:5a:b2:82:1e:5c:4a:c4:f7:19:b8:6d:d3:8a:0f:
ff:2c:76:75:11:74:b9:db:a2:0c:34:c6:63:de:8a:
c3:d3:5c:4b:d8:27:d8:b4:f8:67:0e:51:7d:e7:e7:
88:90:b4:70:4d:d0:c7:38:15:11:af:e5:99:5d:f5:
f5:bb:04:97:7a:39:b9:13:07:b6:cc:0e:78:81:d8:
58:3a:34:d6:a5:63:0c:35:49:62:aa:e8:f2:98:5d:
d1:a6:e3:87:ba:4e:a8:8a:37:05:44:2d:b6:fb:0d:
f2:87:81:7b:40:d0:9b:79:cb:f2:fa:f7:6b:00:cf:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:71:1F:60:94:BE:63:ED:29:BB:D6:03:EC:2C:14:83:13:7B:09:15
X509v3 Authority Key Identifier:
keyid:8D:6F:F7:2D:9B:BC:5E:EF:67:36:0B:C7:17:C5:4B:2B:A1:B0:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jW_3LZu8Xu9nNgvHF8VLK6Gws-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/sHEfYJS-Y-0pu9YD7CwUgxN7CRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/eed8dd-d596-4e48-8356-4e67d713c79c/1/jW_3LZu8Xu9nNgvHF8VLK6Gws-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d2:36:e9:54:06:be:4f:8f:55:ed:c3:f4:b9:4e:55:d2:46:
f7:5c:d4:c2:1a:55:4b:4e:5c:16:f0:74:ee:22:db:60:15:fc:
c9:74:84:38:88:09:f6:4a:2a:27:ec:42:77:49:2b:00:43:09:
55:7a:54:81:64:f3:a2:9b:21:0d:9d:7c:f4:3a:50:71:c9:55:
2b:d0:30:8d:50:58:1a:7d:f4:b4:67:b8:8f:f9:3c:a1:51:1c:
9e:bb:d7:55:19:1b:be:11:22:29:c6:e5:5f:43:fe:a1:5d:06:
04:29:b7:99:76:a3:31:18:00:ba:1a:74:41:db:2d:47:9e:fd:
33:ef:01:48:57:5d:f6:51:e0:8b:48:ba:de:ee:78:da:5d:87:
f2:a3:dd:43:79:5c:94:d2:7c:6e:1c:cd:bb:c3:81:8b:64:93:
1b:2d:b3:80:6b:85:2a:a6:06:1c:7c:f3:f5:ea:66:53:a0:cd:
48:03:3f:ca:39:bb:77:04:49:dd:18:92:f5:cf:56:30:62:dc:
a8:0f:e2:12:de:5d:31:50:2e:87:26:2c:7c:94:5f:85:d4:32:
57:01:59:53:ae:1d:da:7c:ec:be:44:c3:8a:f7:61:5b:0e:01:
9c:ad:25:f5:74:e9:f0:f5:2f:61:ad:ee:7c:a8:70:26:ce:d7:
6d:9e:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:20 2025 by rpki-client