Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/D-sLa7SP7XelLhZGOPS-ls06iHQ.roa
File: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (raw, json)
Hash identifier: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=
Subject key identifier: 0F:EB:0B:6B:B4:8F:ED:77:A5:2E:16:46:38:F4:BE:96:CD:3A:88:74
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 019420D655C300C95D702CF11476428DFC53
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/D-sLa7SP7XelLhZGOPS-ls06iHQ.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212865
IP address blocks: 62.65.141.0/24 maxlen: 24
62.65.142.0/24 maxlen: 24
62.65.143.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
62.65.158.0/24 maxlen: 24
94.78.2.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:55:c3:00:c9:5d:70:2c:f1:14:76:42:8d:fc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0feb0b6bb48fed77a52e164638f4be96cd3a8874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:7c:fd:27:02:47:87:c3:6c:03:4b:a0:df:
f0:28:23:2d:65:8f:cc:f0:10:a1:9c:4f:a1:e5:d2:
3a:3d:52:0f:c2:ec:ad:e0:93:db:86:ab:c1:74:08:
9e:43:b9:9c:5b:2f:b8:c2:dc:a5:42:aa:61:c8:be:
c9:68:ca:1f:05:88:1e:ce:e9:c9:5c:66:5f:d7:8b:
9f:85:1d:ad:b6:ab:e3:39:b0:3d:d7:c0:5b:91:55:
79:9a:5c:19:a6:f7:79:93:b5:52:ba:c3:81:a9:ed:
06:6f:7f:13:11:e1:ea:e9:c3:1c:ee:37:3b:f0:8e:
35:3c:1f:a0:f2:fa:c3:f8:69:e8:d7:e8:44:33:38:
2a:d8:dc:62:b4:e7:ff:6d:5e:53:43:f5:27:2c:62:
77:c0:0a:84:b2:09:f7:5a:7a:bc:60:75:1a:ea:ce:
45:06:30:7a:f1:f9:bb:5e:cf:ba:2e:c3:18:69:78:
ff:02:cd:42:f1:46:92:d2:4c:85:64:47:b0:9b:31:
50:89:0e:4f:62:0d:eb:d6:a4:87:20:be:6d:83:9f:
25:74:0e:0b:53:2a:54:f2:2f:fe:85:9c:b6:f4:da:
2d:98:51:3c:14:53:63:f9:0a:fc:0d:ef:75:20:af:
38:73:f5:a4:46:74:26:7d:14:56:c8:9d:77:9b:63:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EB:0B:6B:B4:8F:ED:77:A5:2E:16:46:38:F4:BE:96:CD:3A:88:74
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/D-sLa7SP7XelLhZGOPS-ls06iHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.141.0-62.65.151.255
62.65.153.0-62.65.158.255
94.78.2.0/23
Signature Algorithm: sha256WithRSAEncryption
97:74:b5:e6:70:bb:3d:24:e9:fc:eb:1c:56:f2:ea:cd:bc:c5:
c0:5d:7f:c7:c6:0b:fa:73:10:e1:f2:49:52:05:47:ab:7d:a3:
ba:e5:03:a9:bf:e7:32:a9:0e:11:a1:3e:eb:4e:36:4b:c0:a6:
f5:59:5f:cd:3b:be:f6:39:99:9f:0a:10:52:af:24:37:db:62:
6f:40:31:02:df:6c:ae:15:84:12:43:05:97:c1:3f:db:28:06:
2a:7f:f3:27:24:e9:9a:c3:ec:e4:09:6f:06:76:28:8f:20:2d:
f8:44:54:8c:5f:b8:6a:18:b0:54:92:95:12:f5:58:7c:67:b5:
8f:c6:56:c6:37:8e:f6:f3:04:c8:ee:a7:b3:0c:1e:da:cf:1c:
c5:1f:0e:eb:b7:2e:f5:9e:c7:ab:d4:7b:4f:09:6a:4d:96:03:
84:3d:94:9d:13:3c:4b:cc:62:06:81:d7:74:7c:e7:74:ec:aa:
35:45:94:70:a9:0f:20:47:0b:18:29:3c:b1:ff:e4:14:65:dc:
0c:29:36:59:23:6d:54:fd:32:cc:74:ed:99:ba:c3:bb:5d:4f:
2d:06:94:12:3d:d3:37:25:84:11:32:ff:8c:2a:b8:ee:46:e9:
11:b3:0b:60:53:6a:48:c7:39:9b:f1:11:87:f0:b2:87:45:2e:
d6:18:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:22:33 2025 by rpki-client