Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-euoJr0vZYHk8fEgr9LcPYhfq-o.roa
File: 1-euoJr0vZYHk8fEgr9LcPYhfq-o.roa (raw, json)
Hash identifier: GDrLUd2bC1xYbvhDsl7U5yCx29U5hF6NbXI1iIokn5E=
Subject key identifier: F9:EB:A8:26:BD:2F:65:81:E4:F1:F1:20:AF:D2:DC:3D:88:5F:AB:EA
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B8FF3CBDFC7C27FE8ACCD27FE320
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-euoJr0vZYHk8fEgr9LcPYhfq-o.roa
Signing time: Thu 09 Jan 2025 09:28:22 +0000
ROA not before: Thu 09 Jan 2025 09:28:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199123
IP address blocks: 62.68.70.0/24 maxlen: 24
80.72.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b8:ff:3c:bd:fc:7c:27:fe:8a:cc:d2:7f:e3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9eba826bd2f6581e4f1f120afd2dc3d885fabea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:27:06:d5:9a:62:66:02:fe:4d:73:3d:0b:
46:5b:74:8f:2f:56:06:7a:5f:a4:31:2f:14:dc:84:
44:02:d8:25:b4:93:6c:c9:ad:dc:6d:28:ab:f3:70:
3c:c3:68:1d:33:4f:26:93:a4:00:0d:77:e7:87:f1:
a1:91:74:72:d8:25:d1:0f:c0:33:e0:56:90:e7:86:
2b:90:a0:5b:7b:7a:cb:76:9e:e5:b5:4c:75:42:a1:
14:ce:f9:f3:1d:c7:d2:6d:0a:46:5e:cd:fc:cb:54:
35:29:33:d8:33:75:b4:f5:ea:c9:f1:6b:89:0a:f7:
4f:18:e9:a6:2c:dc:cc:23:bb:c2:42:52:13:93:23:
e7:9e:b5:ea:f6:c7:6a:ea:29:37:59:c3:15:e2:2b:
35:c2:8c:9f:23:cb:23:04:d5:65:96:a2:1b:65:d1:
bc:74:72:48:63:07:7e:38:6f:97:7e:a7:80:91:32:
98:8b:49:84:77:95:ab:ec:df:7c:3f:19:1a:d1:3a:
fa:03:c8:24:d1:50:05:2b:da:0d:b1:8d:43:2a:69:
3d:84:ba:dc:93:d2:63:43:03:b3:f5:23:e1:35:7c:
a0:7c:06:62:1b:5b:b2:ff:3e:1e:db:25:42:11:a7:
63:21:1b:9d:9e:27:3d:28:d6:d9:ae:ee:f3:a2:9c:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EB:A8:26:BD:2F:65:81:E4:F1:F1:20:AF:D2:DC:3D:88:5F:AB:EA
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-euoJr0vZYHk8fEgr9LcPYhfq-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.70.0/24
80.72.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:fa:40:f3:64:ac:07:0b:5d:66:00:06:5b:29:d9:63:83:f5:
a9:6c:c9:eb:7b:40:01:a0:d5:c2:14:4e:e8:c1:80:06:60:2d:
09:a2:d5:8f:fd:2b:2a:54:9d:e9:10:5d:5a:1b:91:93:02:0d:
05:1c:7a:ca:a0:61:28:5c:ca:a2:f3:16:c0:eb:07:68:20:40:
af:c0:40:37:ae:9b:21:3c:ea:7e:32:c7:59:75:bd:aa:b0:86:
f2:dd:d6:73:07:32:55:8a:f6:a6:d1:26:a2:24:d7:50:8e:96:
fb:28:a1:57:75:87:5f:df:39:14:10:89:66:ed:ad:b2:55:4a:
56:d8:ea:1b:5f:cb:01:f4:70:00:3c:cc:f0:2f:2d:6e:91:de:
43:17:13:a9:77:74:b7:31:4d:01:ac:ae:0a:3d:0a:68:17:9e:
6d:69:27:e3:8f:f5:3b:c3:73:08:30:35:3a:10:67:aa:b7:9d:
7f:36:15:1f:af:9d:2b:7f:a4:d7:28:ad:2b:ce:63:c5:f9:00:
7d:47:6f:e2:7d:5c:c3:8a:ed:c5:c7:5a:56:d3:89:b3:fb:15:
14:53:a2:5d:59:49:97:62:9f:4e:b2:ba:9a:39:08:96:e5:ef:
73:81:4a:74:c3:d0:f7:67:e2:e0:6d:45:4c:80:a2:0c:88:55:
6d:b9:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:44 2025 by rpki-client