Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/f3Ms_6a5m_hYxLV8S8qdpfYo5y4.roa
File: f3Ms_6a5m_hYxLV8S8qdpfYo5y4.roa (raw, json)
Hash identifier: vQDHeA6XBt4ax6J/qt5tc+8GsJfdlQEv+T32dY8E09g=
Subject key identifier: 7F:73:2C:FF:A6:B9:9B:F8:58:C4:B5:7C:4B:CA:9D:A5:F6:28:E7:2E
Certificate issuer: /CN=94b21640a951055dfe9c09e345739cb820054dd4
Certificate serial: E61AFD
Authority key identifier: 94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/f3Ms_6a5m_hYxLV8S8qdpfYo5y4.roa
Signing time: Tue 15 Feb 2022 08:48:41 +0000
ROA not before: Tue 15 Feb 2022 08:48:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 62.3.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15080189 (0xe61afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b21640a951055dfe9c09e345739cb820054dd4
Validity
Not Before: Feb 15 08:48:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f732cffa6b99bf858c4b57c4bca9da5f628e72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:bb:be:dc:f0:63:41:1d:a0:7c:f9:cf:f0:
7a:ab:ab:ad:12:9e:eb:91:b1:48:08:ee:f3:b1:13:
15:9e:dd:86:52:52:47:66:c0:9e:b1:f0:46:94:e0:
41:32:dd:30:44:7a:6a:0e:d9:dc:db:10:cb:77:81:
9d:32:08:e6:d1:7a:98:00:32:96:11:b2:41:35:e2:
39:e8:fa:74:80:0c:fc:0d:0d:f5:d7:43:61:e1:d8:
a3:1d:c3:90:44:f0:3e:4d:93:dd:dc:00:71:a5:d2:
8e:6c:61:84:21:dc:0d:46:ee:36:db:62:a7:18:82:
5c:bf:b9:bb:eb:3d:fc:39:2a:70:1e:19:8a:2a:0b:
ea:e4:cc:b8:29:e4:cf:d5:f5:3e:36:1f:fb:cb:23:
20:4f:f4:a2:1e:c0:c2:4f:76:48:4b:57:ca:e6:0b:
39:74:f1:4c:84:e1:1b:d2:d3:9f:94:b1:48:6d:7b:
cd:b5:9c:eb:ea:0f:a6:aa:c6:ae:0d:7b:53:da:ef:
e0:ae:0a:0d:40:37:d6:10:c0:eb:af:43:ff:aa:3e:
19:90:df:97:2a:8f:2d:e3:29:c0:56:eb:79:49:20:
34:0f:e6:be:53:5b:b8:49:d4:f2:91:e5:f5:d3:6e:
d4:6b:12:71:15:c9:29:37:90:03:17:00:1d:00:79:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:2C:FF:A6:B9:9B:F8:58:C4:B5:7C:4B:CA:9D:A5:F6:28:E7:2E
X509v3 Authority Key Identifier:
keyid:94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/f3Ms_6a5m_hYxLV8S8qdpfYo5y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9d:23:d9:49:a9:e8:7c:a8:7d:6d:f1:49:b6:ea:e8:d9:13:
8c:fe:10:9f:34:b0:72:7e:96:c7:ea:b0:64:c8:d8:69:5f:e1:
b3:31:3c:3d:2b:2c:2b:07:ed:d2:5a:36:0f:88:f3:07:b9:7b:
3b:29:df:4e:65:c6:f3:ba:d7:29:bb:06:3b:11:a7:0a:4b:ea:
f3:d0:5a:48:3c:0a:26:d9:6e:d2:d2:b2:e2:32:d3:d8:6d:3b:
20:7f:e5:ee:e8:fb:23:d5:52:bb:a8:ee:d6:11:1e:9c:01:d1:
b3:a8:b9:46:29:15:4e:bd:a7:db:46:e9:20:1f:4a:5e:21:09:
f4:39:bc:45:77:2f:12:14:80:c5:32:9f:71:1b:09:9c:fa:26:
9d:83:b6:db:b1:b1:e6:c8:88:cd:ee:ed:1b:96:5b:95:b2:6e:
ae:0f:e8:75:70:04:42:a9:eb:24:f5:36:ae:1f:c9:b7:37:68:
19:d9:36:91:9b:81:58:cf:c3:5e:c3:c1:75:04:e1:04:77:d2:
58:db:11:92:90:d2:e3:eb:c9:46:b8:f5:5f:9e:5d:4e:bc:6a:
af:87:d8:07:e6:e8:c8:1d:ff:e3:c2:12:05:79:cb:bf:c6:d2:
44:78:48:5c:84:7e:47:11:0f:a3:51:26:3f:f7:c7:bf:3d:e7:
d2:7e:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:09 2025 by rpki-client