Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/FVpuZdA7TEiFDurLXkc1r8V-of4.roa
File: FVpuZdA7TEiFDurLXkc1r8V-of4.roa (raw, json)
Hash identifier: w62ul4F1tHfQ4/E4vzSqU+d2Gw+jL10v9+XnToW/jWs=
Subject key identifier: 15:5A:6E:65:D0:3B:4C:48:85:0E:EA:CB:5E:47:35:AF:C5:7E:A1:FE
Certificate issuer: /CN=659479e85d98443ae916ab4be88574ead841b019
Certificate serial: 01856F0B6E2739255633FB9BACF7AC1C2972
Authority key identifier: 65:94:79:E8:5D:98:44:3A:E9:16:AB:4B:E8:85:74:EA:D8:41:B0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZR56F2YRDrpFqtL6IV06thBsBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/FVpuZdA7TEiFDurLXkc1r8V-of4.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 62.204.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6e:27:39:25:56:33:fb:9b:ac:f7:ac:1c:29:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659479e85d98443ae916ab4be88574ead841b019
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155a6e65d03b4c48850eeacb5e4735afc57ea1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:55:c9:77:e2:70:c9:95:73:ec:00:4c:cb:16:
7b:92:e8:16:b6:cc:03:2a:3f:ff:c4:30:a2:87:e9:
6e:07:c9:1e:bd:33:05:fd:cb:dd:58:67:7d:2f:44:
e6:82:6d:24:12:0a:94:ee:4f:cf:98:82:93:ab:96:
34:56:ca:8d:7e:30:be:8c:1b:a8:71:04:a7:6a:a3:
ab:a1:22:e0:6a:e2:3c:72:9f:4e:7b:4d:ef:12:54:
c9:e4:09:ff:11:99:ee:47:66:ff:02:2f:51:0c:b2:
eb:0a:d1:41:54:f9:06:09:83:92:8c:c6:68:48:7b:
9f:da:49:6f:c9:08:c4:9b:a0:f6:a3:9d:01:58:52:
11:1e:e9:f7:0d:d8:1e:40:df:7e:66:e6:ce:be:0d:
96:78:f1:74:fd:87:c9:c5:cd:17:1e:99:e2:96:51:
1d:b1:06:2b:68:64:df:b9:95:db:25:fb:ce:07:a6:
b7:98:88:fe:bd:77:e0:68:fe:1a:2b:38:df:37:66:
18:1c:f8:f8:8a:a5:64:59:5e:08:45:96:c0:e5:42:
2b:48:65:31:aa:47:d7:b0:bd:19:ee:a2:c9:3c:89:
c9:35:55:77:48:26:59:9f:cf:6f:3c:a1:3b:57:b1:
b3:99:e2:05:72:3b:5e:ea:c5:9a:b6:50:32:d8:1a:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5A:6E:65:D0:3B:4C:48:85:0E:EA:CB:5E:47:35:AF:C5:7E:A1:FE
X509v3 Authority Key Identifier:
keyid:65:94:79:E8:5D:98:44:3A:E9:16:AB:4B:E8:85:74:EA:D8:41:B0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZR56F2YRDrpFqtL6IV06thBsBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/FVpuZdA7TEiFDurLXkc1r8V-of4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f4bf12-1441-4b28-83d2-b3fbb1b0677e/1/ZZR56F2YRDrpFqtL6IV06thBsBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.52.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f7:c2:07:51:24:3d:92:64:54:c9:e4:72:93:5a:e8:cc:91:
05:ca:52:2c:5b:a2:93:35:c4:9a:9c:c2:79:59:43:04:6a:51:
0d:ff:24:61:8a:b2:b1:e5:55:06:c6:17:90:bc:1b:49:29:6b:
a0:44:64:88:ce:0f:93:ac:2f:49:1c:6d:0d:b4:6e:8e:d6:ef:
10:bf:ee:6c:14:1e:a7:02:40:cd:82:96:38:b4:93:6a:78:10:
49:fb:00:4d:cf:e1:d2:df:df:10:45:4a:a8:46:b6:cb:08:d2:
e6:bb:9a:56:53:ef:61:3e:54:89:9b:09:e3:43:ee:f3:dc:21:
7e:fe:40:56:4f:54:0f:93:5f:e6:7a:b8:d1:ba:82:93:2a:10:
3c:37:40:26:b5:43:3b:98:5a:c1:17:39:3c:c4:ac:86:8b:dc:
cd:be:20:57:7e:16:0e:ee:79:a5:b7:ea:38:30:2c:ad:58:a6:
ce:7d:d2:7e:5f:2d:ed:b6:ad:5a:16:e3:da:fe:51:c4:85:e4:
da:b0:ad:d9:b4:bf:31:ef:c5:b7:1e:d2:5e:ac:4d:ec:47:f8:
6f:22:6d:e2:db:f5:c9:71:7a:a0:14:19:95:83:4f:c6:0c:fd:
22:54:00:f7:43:a6:73:05:64:43:ff:db:5e:07:af:2f:2f:39:
f5:3e:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:45 2025 by rpki-client