Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/JuU_bGqKm3AN0C9lN5vXyfOotng.roa
File: JuU_bGqKm3AN0C9lN5vXyfOotng.roa (raw, json)
Hash identifier: NwAOAlBtgVy/7DsyYqqy8wyDNsrT02acJyOlAkU3GvU=
Subject key identifier: 26:E5:3F:6C:6A:8A:9B:70:0D:D0:2F:65:37:9B:D7:C9:F3:A8:B6:78
Certificate issuer: /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial: 01856CAF01CAD2D47A959F49BA3CB5B6CD4E
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/JuU_bGqKm3AN0C9lN5vXyfOotng.roa
Signing time: Sun 01 Jan 2023 09:34:46 +0000
ROA not before: Sun 01 Jan 2023 09:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207579
IP address blocks: 62.122.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:01:ca:d2:d4:7a:95:9f:49:ba:3c:b5:b6:cd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Validity
Not Before: Jan 1 09:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26e53f6c6a8a9b700dd02f65379bd7c9f3a8b678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:11:56:81:79:32:e1:f1:84:12:cf:b0:78:
93:5e:fc:08:33:d6:d7:7b:89:1d:4d:a0:9e:1c:2c:
84:e8:aa:53:3d:37:c8:d5:04:43:6f:d7:a6:30:19:
67:dc:d5:39:d4:96:fa:8a:a2:3b:2a:95:62:92:7d:
39:23:9d:8d:bb:35:a3:67:2f:42:bd:ac:48:6c:61:
5a:99:3c:cf:3e:fe:45:e4:66:9a:d6:b7:7b:ef:d7:
41:6c:b9:db:9b:d8:b0:f5:f8:8f:2c:8f:5b:b2:1a:
ff:56:f8:25:88:92:1c:cd:83:1b:f2:1f:ab:38:ef:
87:a4:a8:3c:b5:30:09:4c:70:86:b5:f0:64:2d:71:
f7:9c:50:02:c0:66:9e:68:5e:01:ed:47:dc:85:78:
99:ca:01:6c:e9:6f:76:73:67:cb:87:7d:e7:48:9e:
cc:6c:df:dc:33:9c:19:c3:ea:e8:be:04:87:05:57:
54:2f:60:a3:88:c3:54:04:f3:8b:da:7a:48:3b:6d:
1b:43:75:69:ff:29:6c:62:f7:ff:68:ed:f1:ef:e9:
48:43:68:ea:f6:8d:fb:88:18:46:f0:52:c8:23:17:
32:8a:95:9d:ad:c8:12:04:3d:e3:65:d6:38:1e:14:
bb:7c:e0:a4:df:e0:da:25:5c:fc:8b:c8:c6:87:d3:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:3F:6C:6A:8A:9B:70:0D:D0:2F:65:37:9B:D7:C9:F3:A8:B6:78
X509v3 Authority Key Identifier:
keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/JuU_bGqKm3AN0C9lN5vXyfOotng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c9:70:61:3b:57:fe:d8:d4:08:96:82:9f:71:00:53:c8:cb:
dd:6e:7d:1c:8d:eb:74:3b:1b:68:7d:7c:e3:b7:bb:4f:e1:41:
e8:5d:9b:89:54:3c:27:c5:fa:e1:f4:e5:28:97:1a:d0:d7:08:
57:a6:8d:b8:ed:1b:bd:fb:4c:0e:1f:d3:56:f6:80:8e:53:52:
d1:4f:3c:cf:e8:a4:ac:46:22:05:77:fc:42:75:51:da:68:46:
f8:59:e8:69:ad:d3:26:d3:fe:7f:d8:89:13:b0:ed:75:b2:38:
ba:eb:3b:b4:f1:a6:ab:d4:cb:7e:a3:a5:59:3b:72:47:b6:0c:
b1:7e:e3:c2:6e:21:95:e3:7e:ad:f6:9f:4c:2d:f5:d0:43:eb:
c7:7d:da:78:9f:41:06:81:2c:f5:4e:c0:f8:54:10:85:95:bf:
dd:53:f4:aa:71:ee:89:da:15:96:9e:1b:2e:92:00:36:a9:4b:
fd:fb:00:eb:5a:a6:71:2f:3c:88:c9:53:71:56:f7:83:94:63:
2f:41:c1:62:92:77:c3:cb:be:78:91:62:6e:8e:c1:d4:1a:b7:
1d:8f:a4:11:8d:dc:44:12:c6:6a:27:8c:1b:fb:e0:99:3f:3a:
14:6e:55:0b:7f:0d:02:52:b8:9a:41:f5:84:7d:6d:e9:7d:e7:
27:0f:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:12 2025 by rpki-client