Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa
File: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (raw, json)
Hash identifier: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=
Subject key identifier: B3:2C:3F:66:14:D8:53:5C:3B:35:2B:53:42:5E:97:12:D6:09:EE:2C
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01941F8C2B8DA5A6E6E5C38694EAFDE9626C
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42595
IP address blocks: 62.181.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2b:8d:a5:a6:e6:e5:c3:86:94:ea:fd:e9:62:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b32c3f6614d8535c3b352b53425e9712d609ee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:5e:ee:7c:dc:51:54:8c:63:7e:88:a1:ee:
c0:8a:f4:5b:7d:12:f5:0a:a7:4c:4c:50:30:83:57:
27:71:82:2c:ad:c8:8a:01:96:e6:52:83:1c:d6:2f:
4a:7e:bd:4f:f0:9f:b6:df:f5:bb:ad:52:4a:c8:eb:
04:69:7b:99:68:fc:5f:24:03:61:b8:43:b5:ab:33:
ca:c8:07:b5:e3:99:eb:be:4d:a4:25:e4:7c:ae:53:
98:4c:2a:55:bf:e2:4a:f8:d9:a4:f6:5c:de:49:53:
07:74:03:c9:c3:f4:25:a1:ad:f4:37:75:31:a0:5b:
6e:0d:c7:fe:d4:32:8a:4c:79:8f:67:72:82:e6:d3:
e6:89:45:03:09:62:ec:bb:24:94:e1:19:c3:0c:3a:
26:00:79:04:63:24:2d:1c:84:38:02:64:66:38:d9:
80:c4:d4:9e:a9:f4:ab:c2:47:b2:73:ee:8b:15:7e:
89:e2:22:ba:68:b5:a7:f6:3d:79:63:56:26:e9:3c:
a6:77:e8:45:13:b4:59:c4:cc:52:4a:fd:5b:45:e1:
0a:d3:d6:21:ec:04:84:70:fc:20:ab:92:a8:14:0e:
8d:85:97:67:dd:09:16:bd:ee:8e:d8:bf:ba:86:af:
09:d9:e0:02:f3:37:6b:ab:28:9b:75:10:98:d0:49:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:3F:66:14:D8:53:5C:3B:35:2B:53:42:5E:97:12:D6:09:EE:2C
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ae:be:a6:62:eb:5e:3c:77:b1:12:da:62:26:b1:2b:f9:bd:
bd:fe:c6:ae:1b:3c:b1:f8:61:90:54:f9:f5:92:7d:d7:28:3a:
06:f7:cb:9f:e5:cc:51:b5:e7:d0:58:f9:8c:af:66:03:df:9c:
df:b7:3c:0c:c2:34:e1:01:1a:f6:8c:b8:39:34:e5:db:94:72:
d3:23:7e:34:7a:02:1b:08:e4:4c:d3:c3:b8:52:43:30:df:f7:
01:76:68:aa:d7:7f:8c:c5:1d:87:4e:03:62:e9:84:7c:25:9a:
d4:61:8c:a5:d8:b5:d1:3a:cf:60:1d:70:92:de:a1:05:2e:55:
e5:97:8e:55:16:d2:5b:1c:a9:2f:f1:94:53:66:e5:28:9c:da:
fe:9b:c0:5c:b2:88:83:d2:b0:bb:3c:72:49:05:e8:71:12:3c:
7a:9f:7a:4b:3a:60:87:10:d9:b1:47:76:93:fa:56:26:b0:51:
9c:0e:c4:75:58:df:60:c9:4e:ac:eb:93:f4:a6:08:3c:4c:b1:
5e:10:5f:44:03:21:ae:58:d5:17:81:62:be:4e:a2:a3:c3:f5:
9e:74:1f:ff:92:01:dd:44:16:59:92:57:c1:62:fe:16:50:8a:
44:c1:19:b3:2a:59:43:45:66:5d:ac:b9:bc:11:80:18:14:ec:
fa:f7:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:58:29 2025 by rpki-client