Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/fZogErTrm1vMXQ-R3P6-7Mf1k54.roa
File: fZogErTrm1vMXQ-R3P6-7Mf1k54.roa (raw, json)
Hash identifier: aBEeuKXGdJMAtlKdcab54kmthMR+WtbCpx0AuJ+L8wE=
Subject key identifier: 7D:9A:20:12:B4:EB:9B:5B:CC:5D:0F:91:DC:FE:BE:EC:C7:F5:93:9E
Certificate issuer: /CN=94b21640a951055dfe9c09e345739cb820054dd4
Certificate serial: A72A6F
Authority key identifier: 94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/fZogErTrm1vMXQ-R3P6-7Mf1k54.roa
Signing time: Wed 19 Jan 2022 21:29:57 +0000
ROA not before: Wed 19 Jan 2022 21:29:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 62.3.62.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10955375 (0xa72a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b21640a951055dfe9c09e345739cb820054dd4
Validity
Not Before: Jan 19 21:29:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d9a2012b4eb9b5bcc5d0f91dcfebeecc7f5939e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:31:85:de:a0:f0:5b:74:d1:75:25:07:63:
12:88:84:b0:b8:ff:ab:6e:5a:4d:5e:c4:fc:b3:50:
ba:d7:64:2e:8c:8f:2d:b5:ca:ea:0d:75:6b:d3:5b:
d2:b8:2b:aa:60:69:85:c8:e2:ec:31:a3:cd:81:4a:
f2:cb:a0:a0:a7:72:3b:90:69:ad:40:9d:d1:a8:00:
4d:38:d6:45:33:2d:fb:9a:f2:ad:eb:c6:62:e0:5e:
c2:5a:20:3e:8b:16:96:e5:ea:0f:c0:04:c2:33:b0:
6b:a7:5b:63:c5:de:fb:e1:ff:db:32:ee:d6:d7:9e:
6a:1a:e4:ea:13:5c:2f:e7:47:ee:75:59:f9:a4:be:
98:0f:75:71:5b:fd:a4:76:1e:6c:46:ad:9d:6f:93:
48:25:24:d7:1f:e1:69:b1:97:ff:74:cc:3d:04:ab:
68:38:38:83:a5:92:9e:6c:48:2c:8a:4e:0f:c5:e0:
af:33:1f:2b:a1:cb:1e:9c:47:d8:35:78:4e:36:55:
11:17:a6:4b:e8:43:2b:d8:ed:c4:29:6a:1b:13:66:
7b:f5:ed:b5:26:61:f4:d8:2d:6a:32:30:c7:15:fe:
10:c0:af:14:d3:e1:b7:e1:9b:73:8d:64:19:bd:d4:
04:f6:03:79:65:0a:ed:24:3a:7b:db:53:d5:04:6d:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9A:20:12:B4:EB:9B:5B:CC:5D:0F:91:DC:FE:BE:EC:C7:F5:93:9E
X509v3 Authority Key Identifier:
keyid:94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/fZogErTrm1vMXQ-R3P6-7Mf1k54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.62.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2d:1d:cc:1c:6d:f2:50:cb:44:76:46:b5:bd:3b:4d:e0:a8:
2b:bd:a0:2c:81:f2:b0:ac:e4:62:17:1c:2c:8f:b0:4f:e1:63:
cd:b5:aa:99:da:e3:76:d0:72:ea:4a:fc:d0:56:7e:4c:5e:ad:
1b:57:a7:cf:bf:fd:c1:d0:67:4d:c1:15:4e:ff:c4:ce:af:34:
b4:df:67:77:b2:cf:73:f3:84:a2:53:8e:07:09:19:5f:f2:c0:
15:20:e4:08:a5:55:b1:3c:6a:90:bc:a8:ae:77:f7:0b:e0:94:
bb:45:5b:37:e9:11:cb:11:c6:cd:0d:4e:64:21:03:31:eb:aa:
53:d0:bb:8f:98:e7:68:98:18:64:df:04:a3:03:97:90:94:18:
07:57:c8:d6:21:bd:2b:10:d0:db:6c:d7:3f:9f:28:74:6e:6c:
a0:7c:c0:9c:db:64:30:43:f0:3a:e4:bb:0c:11:32:2a:f0:2a:
67:61:ed:3c:4a:5c:f1:19:35:09:d4:30:1d:29:6e:b8:34:b1:
46:57:18:66:a3:3c:68:b9:75:9a:98:33:42:9c:55:20:33:fe:
d9:33:b7:a0:e5:3e:0b:fb:80:77:18:d6:bf:e2:1c:89:a6:51:
de:5f:fa:c0:13:54:45:8a:d1:d4:cf:37:90:be:86:1b:c5:9f:
d6:34:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:03 2025 by rpki-client