Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/zEdOf00V8YpbfdbuVh6edhLFxOc.roa
File: zEdOf00V8YpbfdbuVh6edhLFxOc.roa (raw, json)
Hash identifier: xw2nGcLzNzC2781DBhmqoJCxxw5fW6F+mjQBcvq6T2o=
Subject key identifier: CC:47:4E:7F:4D:15:F1:8A:5B:7D:D6:EE:56:1E:9E:76:12:C5:C4:E7
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827ECA1D96B7123350A0103375B69AC
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/zEdOf00V8YpbfdbuVh6edhLFxOc.roa
Signing time: Thu 02 Jan 2025 17:54:52 +0000
ROA not before: Thu 02 Jan 2025 17:54:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35830
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ec:a1:d9:6b:71:23:35:0a:01:03:37:5b:69:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc474e7f4d15f18a5b7dd6ee561e9e7612c5c4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:4c:2c:5a:03:a3:f6:84:20:7f:e3:b5:76:
a9:59:c7:5f:65:b3:24:2f:43:af:c6:29:d6:5b:bc:
d3:49:53:26:e9:7b:03:55:23:25:ff:eb:b4:db:c2:
e4:4a:67:de:9f:c0:06:7b:c3:a1:7d:d5:8f:a1:54:
ba:45:a3:ea:49:e9:87:49:0c:c9:99:78:eb:ef:dd:
87:b7:c6:a4:c4:93:f6:8e:bb:06:0c:a4:f6:29:f8:
1f:8e:f3:84:83:69:fa:99:4d:f6:30:d0:16:b2:a4:
7e:a0:58:ff:a9:69:57:ee:40:1b:3f:9a:e7:b8:8a:
9f:3a:7f:92:5e:2b:d2:6d:23:fa:0f:f7:13:ba:61:
f9:aa:83:0c:54:ed:15:7b:5e:f2:40:84:00:71:91:
d0:9e:15:4c:96:35:09:f4:26:c9:49:ba:45:f6:7d:
29:df:08:f6:04:9f:af:b0:3e:51:5f:7f:69:92:e6:
2c:4d:52:46:30:d7:16:33:be:70:47:48:ec:9f:2c:
c1:e8:bb:30:29:38:cf:d5:c7:5a:f9:b8:26:b6:19:
a5:0d:d3:e8:44:ec:2b:92:9b:6d:06:6b:6f:83:26:
54:e5:36:ef:78:fb:1d:de:0d:49:12:c1:6e:8f:97:
41:62:1e:dc:b3:6e:fc:11:9c:55:af:5a:1d:cf:c8:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:47:4E:7F:4D:15:F1:8A:5B:7D:D6:EE:56:1E:9E:76:12:C5:C4:E7
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/zEdOf00V8YpbfdbuVh6edhLFxOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
71:57:11:70:21:d7:8a:dc:fa:04:46:34:65:dc:ad:af:63:53:
47:cd:d1:28:f2:d5:88:f1:b5:06:c3:47:16:30:15:c7:1c:38:
e1:15:cd:f8:af:bd:8e:0b:fa:7e:b0:b0:4e:5b:9e:9e:80:e3:
02:f0:d9:b5:24:d5:f1:53:05:5b:17:d3:b6:18:4c:83:52:9a:
72:75:ba:d3:eb:02:6a:c3:24:d2:00:1b:bb:e7:0f:8f:23:14:
c9:39:f9:cd:86:c8:9f:73:55:44:16:58:d9:9c:c5:9e:d8:cf:
2c:35:08:d5:54:e0:ec:ee:b6:ad:af:90:a6:50:b0:3c:c3:62:
16:e3:cd:71:97:07:55:df:0b:0f:aa:18:c6:57:ef:bf:8a:57:
40:46:b3:38:13:de:c7:52:5e:d1:ca:54:51:69:df:8f:b9:64:
5e:e2:5d:78:b8:9c:b7:b7:46:b9:79:56:a5:22:3f:3b:26:8e:
da:56:aa:73:81:f5:88:46:a0:f0:c3:c6:0a:28:2b:e2:2d:d8:
ec:fd:7e:ab:15:c1:4d:6b:a9:7e:5d:05:3d:a0:55:50:11:44:
0d:31:b3:94:e1:5d:52:38:de:82:95:be:62:95:96:7d:8b:15:
56:02:af:1f:72:26:70:9a:e0:77:ab:b9:0e:f9:9a:1b:39:b8:
be:13:61:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:53 2025 by rpki-client