Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/Oo_YdjNCoKzSCMx0fcVkFQh5jHQ.roa
File: Oo_YdjNCoKzSCMx0fcVkFQh5jHQ.roa (raw, json)
Hash identifier: HsodEAaiWSbf8+iUyU5O9J2pfeKpveAuEBQoo4Hvy1s=
Subject key identifier: 3A:8F:D8:76:33:42:A0:AC:D2:08:CC:74:7D:C5:64:15:08:79:8C:74
Certificate issuer: /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial: 018678A61CA35EB5263C7F40A78275DD7FA6
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/Oo_YdjNCoKzSCMx0fcVkFQh5jHQ.roa
Signing time: Wed 22 Feb 2023 10:23:17 +0000
ROA not before: Wed 22 Feb 2023 10:23:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 62.122.230.0/24 maxlen: 24
62.122.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:a6:1c:a3:5e:b5:26:3c:7f:40:a7:82:75:dd:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Validity
Not Before: Feb 22 10:23:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a8fd8763342a0acd208cc747dc5641508798c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:20:73:83:db:ef:bc:ee:75:c8:3c:d3:6e:
ee:06:ff:8e:91:ad:ad:80:4e:8f:4a:75:fb:e1:1d:
63:dd:41:0f:4d:6d:99:38:73:8a:32:21:4b:31:c7:
0e:d1:7f:92:07:69:39:16:81:c4:ba:48:4f:c6:6c:
fc:fb:2d:cf:ed:4a:fc:21:f3:c1:9d:24:6f:e5:d8:
49:a9:b8:58:33:65:f6:53:6a:ad:e7:2a:5f:10:55:
6d:8a:62:38:69:1f:d7:d6:bd:15:d4:0f:b5:dd:34:
e2:fb:41:10:e0:2e:76:06:92:74:39:90:7e:ad:e5:
33:1e:32:da:b7:6e:2a:bb:12:c9:31:e8:f6:93:f5:
13:7f:77:4f:7d:0a:be:79:10:d3:7c:d8:a6:90:18:
05:42:1f:1f:8e:49:33:93:b5:37:36:62:8c:41:e8:
f4:6b:c4:ff:77:a8:9e:09:48:b5:7a:34:cd:04:b8:
81:21:e0:df:af:f0:96:1e:bf:ed:bf:dc:66:61:0e:
27:85:72:5b:e1:fe:da:24:37:96:34:1c:1f:fd:ef:
9e:bd:f8:3c:09:14:42:2a:72:f5:3d:e8:e4:c4:cd:
1a:d3:e1:0e:ea:44:4c:bc:28:75:cb:39:85:60:72:
73:2d:e9:fd:36:a6:0b:5e:60:22:f0:b2:19:1d:17:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8F:D8:76:33:42:A0:AC:D2:08:CC:74:7D:C5:64:15:08:79:8C:74
X509v3 Authority Key Identifier:
keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/Oo_YdjNCoKzSCMx0fcVkFQh5jHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.228.0/24
62.122.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1f:29:3b:75:2b:c2:98:eb:13:fa:64:58:e1:84:2d:fc:04:
cf:58:84:b3:3a:7b:c9:ef:d3:88:12:14:94:04:6f:68:29:0e:
36:db:f3:65:13:1e:40:5f:a2:7d:df:4f:d4:e2:5a:86:ce:03:
d1:4f:68:90:64:e6:cf:61:3b:b3:ce:10:72:f6:6f:6f:1a:01:
8d:1c:dc:b5:c1:5e:ab:2a:5a:3b:e8:09:7f:db:70:83:d5:e8:
b8:82:f0:c3:26:70:2e:9f:96:57:67:e8:14:25:46:9f:d0:fe:
55:99:d5:c6:68:6f:c4:b2:cb:90:7a:6b:5e:93:63:4f:48:f1:
eb:6f:ee:c6:59:ea:4f:ff:14:2a:47:98:8f:af:14:2b:bb:70:
0c:a5:47:68:a8:28:e4:b3:e5:ed:8e:80:1f:f9:4a:8e:11:82:
8b:e2:47:12:e9:b3:f2:e9:83:ee:e0:40:b3:57:4c:7c:6b:6a:
4b:e3:7a:7a:ee:55:b8:1b:19:8f:50:33:02:ff:76:37:2f:32:
2e:a0:55:39:3b:10:8f:fa:0e:71:69:00:ae:18:63:97:ce:06:
74:1c:14:54:b2:d2:25:6f:83:0b:37:11:2b:cc:3c:e3:43:d0:
83:ac:a9:73:78:53:31:b9:78:1e:02:ea:ba:21:4a:61:b9:64:
22:69:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:39 2025 by rpki-client