Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/KQttHFuzmklyx7CZeFCmBs1VLmA.roa
File: KQttHFuzmklyx7CZeFCmBs1VLmA.roa (raw, json)
Hash identifier: sAxRjBwp/C5re+3jBHRvkTOUWbZ5VEJi9tE4UCee1Vc=
Subject key identifier: 29:0B:6D:1C:5B:B3:9A:49:72:C7:B0:99:78:50:A6:06:CD:55:2E:60
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D786346CB3D051ACA0275E3DCB45A63
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/KQttHFuzmklyx7CZeFCmBs1VLmA.roa
Signing time: Sun 01 Jan 2023 13:14:44 +0000
ROA not before: Sun 01 Jan 2023 13:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 2.59.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:63:46:cb:3d:05:1a:ca:02:75:e3:dc:b4:5a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=290b6d1c5bb39a4972c7b0997850a606cd552e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:05:85:9d:7e:8b:54:5b:97:e1:9e:2a:b9:
b4:71:2c:58:33:ed:01:f5:03:ba:a7:2d:56:1a:d2:
25:16:ec:e5:ab:d3:69:1e:b7:c6:f6:bb:f4:f7:d9:
05:8c:0e:5f:76:fb:c8:9f:f3:37:fe:00:2f:66:f7:
4c:80:8e:15:68:fb:22:ea:1b:28:15:ac:1c:ff:6b:
22:f3:8b:82:63:98:2b:d4:b4:0c:53:19:01:9c:db:
88:5f:58:b9:21:d3:5d:5c:f6:d4:47:9b:63:75:87:
5b:7b:cd:97:ec:fb:db:ae:da:78:e1:72:71:4c:35:
69:63:5c:1f:c7:11:b3:f8:e5:c4:c1:9d:81:21:96:
2e:fc:33:4f:57:c9:df:68:f6:03:72:61:84:58:f8:
0a:fe:42:44:9b:a2:c6:36:ae:da:33:bd:e1:b3:47:
74:7d:37:bc:85:ed:6a:22:00:23:da:52:ff:6f:56:
20:0c:46:eb:91:41:ff:25:e3:44:c7:04:26:d9:08:
6d:c4:43:d1:b7:5e:91:05:ee:14:50:67:81:c5:72:
f3:3f:40:aa:cf:fb:ad:83:44:f3:b8:80:43:bd:c8:
27:f0:4c:e8:7a:97:ee:66:b1:eb:ae:ae:89:a8:45:
75:b6:dd:e3:4b:13:6b:0e:1a:f5:88:99:7f:c8:18:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:6D:1C:5B:B3:9A:49:72:C7:B0:99:78:50:A6:06:CD:55:2E:60
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/KQttHFuzmklyx7CZeFCmBs1VLmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.62.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d5:28:b8:ec:6a:fb:87:6d:08:9e:eb:ed:04:85:c7:d0:56:
e5:e5:a4:f1:36:f9:36:ba:f3:42:9c:b5:d5:16:f0:65:e2:ca:
f6:2f:e6:b4:2a:92:a7:b9:19:a5:33:36:fa:14:25:d5:72:0f:
b7:11:0f:9a:30:a1:fe:90:4b:f5:aa:63:f0:c7:30:75:f5:fa:
dc:f7:cc:db:9d:6e:cb:a5:c7:77:1d:9f:8e:af:3a:d5:53:05:
ca:2c:e5:db:74:82:67:c8:a2:87:68:36:7c:9a:5d:12:c5:5f:
37:3c:b7:dd:0e:5b:2b:c4:5e:73:f6:a3:40:90:53:35:37:38:
5f:5d:73:2a:88:9e:1b:c7:14:34:34:0e:08:99:b3:fa:c9:a0:
2d:2b:b7:ed:f1:dd:16:2a:45:7f:fa:fa:1b:83:19:2d:e1:ea:
06:5d:d8:86:04:47:cf:2c:4d:2b:2c:76:7e:6b:4f:4b:f2:89:
3d:00:ff:0e:12:20:ad:e6:6e:b3:15:54:b4:4e:08:53:97:ae:
eb:27:7a:bc:f5:14:e1:1e:bd:ff:9a:d9:e5:b0:93:7e:09:bd:
29:9c:87:2a:51:1b:62:42:d0:e8:60:b1:53:63:22:c3:25:6c:
5b:a4:53:ef:ed:05:d3:d5:88:6b:d9:0d:2d:13:e3:10:41:c4:
9f:9e:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:57 2025 by rpki-client