Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/RU4GSzHCm-03U0EyI7SmZM1_dzw.roa
File: RU4GSzHCm-03U0EyI7SmZM1_dzw.roa (raw, json)
Hash identifier: RXQl14lNFiIvI06I9GuMwpA1lVC1Zg/unpN2R6uJS/s=
Subject key identifier: 45:4E:06:4B:31:C2:9B:ED:37:53:41:32:23:B4:A6:64:CD:7F:77:3C
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01858E6DDAD13CC1CBDC3909358A76F9522F
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/RU4GSzHCm-03U0EyI7SmZM1_dzw.roa
Signing time: Sat 07 Jan 2023 22:50:42 +0000
ROA not before: Sat 07 Jan 2023 22:50:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 5.181.187.0/24 maxlen: 24
2.59.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8e:6d:da:d1:3c:c1:cb:dc:39:09:35:8a:76:f9:52:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 7 22:50:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=454e064b31c29bed3753413223b4a664cd7f773c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:0d:27:9b:f0:40:46:4b:c4:7f:c9:b7:d4:
b0:61:5a:91:83:a4:24:ff:07:ea:c8:11:2d:f6:4b:
46:11:68:ce:62:3d:0b:40:ed:3f:53:33:46:13:4e:
45:00:d2:21:92:a2:e6:3b:2f:1c:94:f3:4e:07:ce:
ad:f6:6e:93:b5:e3:6f:da:1f:78:60:c1:72:8b:c3:
41:98:a1:c9:78:dd:6f:7e:92:23:85:68:b2:2b:6e:
b5:29:87:0a:2c:1b:90:90:f3:b3:dd:44:19:f6:a6:
9d:2d:49:de:2f:a9:ff:9c:82:ac:8d:29:a7:5c:de:
a5:82:1c:c2:b5:cf:a5:7b:36:af:f6:a1:2f:e5:ed:
ef:fa:db:00:52:82:a6:42:e7:89:b0:0b:c1:80:b6:
d7:a1:fd:be:4f:d6:43:4a:fc:1b:a1:05:b9:5b:4b:
bf:fe:8e:e5:64:8b:c2:73:17:9a:36:96:01:66:b9:
08:95:87:aa:6d:8c:1b:03:91:c2:8f:8f:e6:51:2f:
8a:56:47:3c:09:ae:de:56:63:ef:68:26:84:7e:da:
24:2a:23:4a:76:b7:93:4f:32:99:3e:ce:87:d7:90:
c2:0d:ec:ce:5d:74:c0:ae:eb:a0:a2:36:6d:4e:53:
4d:81:78:e0:c1:ff:b3:f6:01:15:8b:55:04:e3:60:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:06:4B:31:C2:9B:ED:37:53:41:32:23:B4:A6:64:CD:7F:77:3C
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/RU4GSzHCm-03U0EyI7SmZM1_dzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.62.0/24
5.181.187.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8d:1e:e3:8e:0f:d3:4b:21:0f:5a:84:2d:14:81:e6:03:8d:
f1:2c:78:58:f6:41:dd:4e:08:c3:1e:0e:da:46:7a:88:69:61:
32:21:90:46:38:56:cc:92:6e:52:b2:90:51:99:9b:93:1c:05:
81:42:4e:99:82:77:12:75:93:b7:70:0b:71:b7:f7:14:4b:57:
26:2d:9d:c8:0c:15:53:be:d7:37:fd:b3:27:5f:96:f2:00:56:
82:2e:c9:b2:2f:6d:2b:69:59:37:0d:52:f4:f2:45:78:1b:7b:
13:a2:1e:27:70:e7:84:c9:71:5f:a1:b4:20:e9:cc:51:9f:cd:
74:56:db:2f:89:e6:ce:f1:2b:60:14:67:d0:b5:41:8d:06:37:
f9:ab:62:3f:8f:65:69:c8:fb:d2:51:59:02:43:f3:27:6e:a1:
e3:bb:38:8d:a7:13:5b:a3:b2:a9:6e:89:0e:f8:5b:ea:39:9e:
70:e1:54:85:87:f8:48:b4:86:49:79:e9:ee:58:42:de:01:e5:
8c:d6:40:23:b2:e4:00:e5:c1:e3:c1:42:a3:a2:6b:bf:89:99:
0b:ff:ee:a2:75:37:5c:00:2d:01:7d:18:8f:e5:99:dc:a0:ca:
bb:b6:ee:a1:7a:3e:16:8a:c2:e6:ee:d9:ab:88:8d:b5:bc:c7:
bb:00:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:59 2025 by rpki-client