Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/y6UzEX6vHkxyP7L_2RZkJTZij0A.roa
File: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (raw, json)
Hash identifier: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=
Subject key identifier: CB:A5:33:11:7E:AF:1E:4C:72:3F:B2:FF:D9:16:64:25:36:62:8F:40
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 019427B5B1FE33300AB5339BE8C3E21DCCF2
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/y6UzEX6vHkxyP7L_2RZkJTZij0A.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.201.32.0/21 maxlen: 21
62.201.40.0/24 maxlen: 24
62.201.41.0/24 maxlen: 24
62.201.43.0/24 maxlen: 24
62.201.44.0/22 maxlen: 22
62.201.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b1:fe:33:30:0a:b5:33:9b:e8:c3:e2:1d:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cba533117eaf1e4c723fb2ffd916642536628f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:03:55:80:27:9c:0c:80:00:01:66:0e:40:1f:
a9:e3:86:bb:a8:fa:ec:d5:c6:0b:b1:de:a8:05:c7:
f0:f9:f9:a4:d1:c3:34:1b:84:27:9f:79:a7:c9:12:
4b:f8:11:6c:63:8d:52:40:9f:31:7e:d5:48:e1:1d:
38:9d:7f:8c:e9:cd:c5:d6:7e:34:6f:cf:d5:1c:52:
ac:62:1b:dc:88:1a:ca:ba:ca:17:b4:58:1a:5f:2e:
48:32:53:3d:f2:a9:2f:de:dd:bf:fa:09:b3:cb:8d:
62:b3:8f:29:ec:bc:e5:d0:78:f9:b6:e4:8c:2b:17:
3a:d7:55:ed:ef:4d:57:57:55:12:19:69:9b:ce:3e:
b4:3b:ae:83:11:79:63:9c:42:66:6f:e8:49:c6:52:
52:90:2e:bc:77:b1:0d:86:e8:3a:60:0f:9e:66:7c:
ef:0f:24:9b:a7:fe:f5:11:a7:3f:83:af:3c:49:ca:
a0:9d:ae:36:13:e0:7a:53:68:3e:96:d9:4a:e6:ee:
3b:de:dd:9c:73:4d:f6:64:40:fc:f0:8f:ba:97:58:
fe:41:1b:22:d7:b5:97:1c:ef:68:ca:96:2c:22:cf:
2d:64:d2:42:15:03:b8:ef:fb:c2:ad:52:26:f5:39:
ab:38:d8:92:74:8a:4f:d7:28:98:f9:62:0c:00:b2:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:33:11:7E:AF:1E:4C:72:3F:B2:FF:D9:16:64:25:36:62:8F:40
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/y6UzEX6vHkxyP7L_2RZkJTZij0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.32.0-62.201.41.255
62.201.43.0-62.201.63.255
Signature Algorithm: sha256WithRSAEncryption
a8:ce:04:19:f3:62:cb:0a:a4:c2:a8:f3:d5:69:d9:63:a1:06:
72:e7:d2:07:75:8c:98:51:6d:e5:4f:18:09:36:e1:09:5b:d3:
6b:c0:51:92:d6:18:81:9d:6b:d9:92:2c:a3:b2:27:91:b7:10:
71:73:28:78:33:73:d0:8e:ea:f5:54:42:aa:26:79:7c:67:c9:
9a:28:51:3f:08:42:47:45:e6:9e:db:24:a9:57:4b:a3:ac:9f:
2a:1d:d6:6f:5e:93:fd:bc:bb:e6:10:c9:33:27:4a:b5:33:5b:
e2:38:c6:2a:fb:b8:21:fd:fd:9a:a8:35:cc:62:f4:61:84:b2:
32:7c:69:88:d3:16:86:bc:85:92:f2:d4:6b:48:f1:46:a6:38:
37:ba:5a:30:8f:c4:e3:ef:22:ca:96:21:e1:96:f1:08:0d:de:
54:f4:f9:a7:46:80:0f:20:24:a2:92:99:f8:b6:62:01:0a:ec:
4f:d4:95:10:63:6f:17:fe:5f:8f:8f:a0:0f:0b:45:81:0a:6d:
84:1b:99:2e:cd:d2:15:f3:3e:99:5f:90:3c:f4:12:28:39:c4:
73:06:df:0c:e2:08:7e:05:10:8b:ae:49:60:7d:c8:76:2d:ce:
53:ce:37:d8:c5:99:66:c3:4b:ec:fa:47:df:f6:0e:72:db:07:
b1:c0:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:56 2025 by rpki-client