Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/VbKLZdbprIQTi58oTmhAUm5HWIY.roa
File: VbKLZdbprIQTi58oTmhAUm5HWIY.roa (raw, json)
Hash identifier: XhBbDonPaN+MpJcNtiaeuiDyXI/GXfxPz8TKV+u7km4=
Subject key identifier: 55:B2:8B:65:D6:E9:AC:84:13:8B:9F:28:4E:68:40:52:6E:47:58:86
Certificate issuer: /CN=94b21640a951055dfe9c09e345739cb820054dd4
Certificate serial: E6436A
Authority key identifier: 94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/VbKLZdbprIQTi58oTmhAUm5HWIY.roa
Signing time: Tue 15 Feb 2022 08:48:41 +0000
ROA not before: Tue 15 Feb 2022 08:48:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 62.3.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15090538 (0xe6436a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b21640a951055dfe9c09e345739cb820054dd4
Validity
Not Before: Feb 15 08:48:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55b28b65d6e9ac84138b9f284e6840526e475886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:82:87:57:a5:3e:75:1e:e6:31:aa:a4:cf:b8:
91:73:72:a7:74:f8:68:5c:b0:3b:4a:8c:b9:4a:73:
ee:57:3c:4e:27:96:47:e4:0f:54:91:db:90:74:5f:
57:3a:87:1b:e6:b7:b8:f0:56:c5:21:f9:9d:b3:81:
2c:f7:fb:0d:4d:73:74:9e:74:4b:d6:a8:9a:a6:1d:
a7:77:09:39:b5:52:6a:9e:76:ef:c8:0d:f0:3f:a4:
1e:4e:bf:a8:b0:03:d8:71:f0:9a:db:49:a5:ae:76:
29:34:ed:95:32:4b:0e:17:0a:58:64:2d:ec:e9:27:
e8:ea:a7:2c:3b:a1:cb:e1:21:8b:2d:d5:0c:13:8e:
06:a4:3c:1c:ec:a7:39:6f:5f:37:4a:62:00:92:63:
2a:51:06:20:ff:a4:7d:b8:e2:dc:06:99:bd:d4:e9:
e7:9e:23:9d:ea:97:a8:15:bf:5b:22:2b:b1:70:44:
33:9f:f0:da:45:54:53:be:97:84:5e:da:46:63:8b:
99:b4:bf:de:2d:18:87:55:d2:af:df:63:64:60:3c:
88:af:bd:f0:fb:d2:bf:8a:92:be:a8:5a:50:93:5c:
c0:dd:a2:1a:62:7a:c3:30:88:f8:5f:c8:b7:45:08:
43:7f:73:1c:10:1b:69:f9:10:80:fc:34:6f:e8:a0:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:8B:65:D6:E9:AC:84:13:8B:9F:28:4E:68:40:52:6E:47:58:86
X509v3 Authority Key Identifier:
keyid:94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/VbKLZdbprIQTi58oTmhAUm5HWIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.62.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c6:e9:c1:e1:33:b6:7b:29:d2:7e:17:b8:1c:48:83:63:3d:
e6:83:70:b8:af:dd:59:d0:64:6d:18:15:09:72:2f:4e:92:92:
f1:74:33:74:da:ee:80:9e:d8:d9:fc:09:78:14:3d:21:3f:68:
31:c1:d2:61:1d:19:b2:c1:93:12:52:8b:7c:31:79:15:c4:31:
1a:29:f8:06:a1:eb:e9:47:26:d2:fa:bc:89:26:39:85:dd:01:
99:d6:fb:2c:12:d3:d4:ac:d2:1a:0d:ac:9b:60:6b:2d:1a:af:
1b:e3:f6:1f:ae:36:b0:c6:e5:76:e8:4f:e8:99:b3:36:af:3b:
0d:72:56:40:dd:dd:25:e9:8a:11:53:6c:df:ea:fd:28:34:9c:
fd:ea:03:e5:35:db:f6:81:11:9a:91:82:10:f7:ae:99:bb:3f:
70:30:d7:1b:ba:19:93:1d:a5:a2:ae:22:47:cb:c8:41:08:fb:
38:cb:48:31:18:07:69:6a:d1:72:f4:40:a7:3c:b3:2a:86:87:
aa:88:95:15:08:ff:72:8a:69:5d:bc:aa:7c:2e:90:fb:55:82:
a9:da:21:f0:27:f1:0b:ea:af:18:64:57:d9:f4:b2:d8:ec:d2:
f1:1b:e6:e3:40:1f:a4:e3:e3:73:06:aa:2b:17:61:8b:f7:55:
71:b4:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:20 2025 by rpki-client