Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/7fZR_FHQ0q244iKqi9zess7Ezwk.roa
File: 7fZR_FHQ0q244iKqi9zess7Ezwk.roa (raw, json)
Hash identifier: Bb/jGfffyL/z8jCcb3rifAbHWLeDBhCK9tP+r7HPC8E=
Subject key identifier: ED:F6:51:FC:51:D0:D2:AD:B8:E2:22:AA:8B:DC:DE:B2:CE:C4:CF:09
Certificate issuer: /CN=57c113ecbb9ab3c6256b67b08530f589f1d7aa74
Certificate serial: 01856F547A2A7B6108C9F2C74AABCDA4BD4E
Authority key identifier: 57:C1:13:EC:BB:9A:B3:C6:25:6B:67:B0:85:30:F5:89:F1:D7:AA:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ET7Luas8Yla2ewhTD1ifHXqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/7fZR_FHQ0q244iKqi9zess7Ezwk.roa
Signing time: Sun 01 Jan 2023 21:54:45 +0000
ROA not before: Sun 01 Jan 2023 21:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197518
IP address blocks: 62.233.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:7a:2a:7b:61:08:c9:f2:c7:4a:ab:cd:a4:bd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c113ecbb9ab3c6256b67b08530f589f1d7aa74
Validity
Not Before: Jan 1 21:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edf651fc51d0d2adb8e222aa8bdcdeb2cec4cf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:71:6e:d5:3a:0f:18:18:0f:38:2c:9c:f2:
e3:95:85:fb:a8:07:3b:f8:39:15:60:3e:c3:9b:b7:
79:39:21:ee:3e:53:c0:a4:b3:f0:c1:fb:10:69:9a:
4f:88:ba:ac:96:55:c2:1f:fa:09:e8:9e:c8:57:e6:
74:0f:36:e2:27:21:14:23:e9:21:b3:35:4d:48:81:
24:e4:5c:5e:98:b6:c8:47:94:e0:9c:d8:3f:89:16:
2c:f0:f1:b3:fc:27:58:34:16:6c:7f:fe:fe:ab:74:
21:cc:11:6d:e4:2e:cd:50:d2:ea:c0:7d:05:ba:49:
8e:e8:18:d2:0d:b1:c1:16:6b:fa:3f:6a:11:f6:16:
16:d7:91:88:71:6f:4b:ca:b4:fb:49:8e:ef:82:5e:
12:14:cb:04:02:f7:17:3b:dd:62:26:85:02:31:77:
8e:0e:b6:76:dc:96:1a:33:9b:83:3b:a2:cf:b8:3b:
e4:dd:5b:01:d7:ac:ca:67:20:73:9b:c0:b9:7a:94:
91:97:ce:ce:8c:be:70:1a:17:5e:b5:d2:a5:cb:72:
1f:b1:51:48:cf:ff:53:79:f0:82:34:b7:17:db:77:
52:4d:75:c3:a1:3f:92:fd:02:94:88:aa:78:b5:43:
e6:81:86:1f:70:88:84:4e:50:86:98:4f:2c:01:49:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F6:51:FC:51:D0:D2:AD:B8:E2:22:AA:8B:DC:DE:B2:CE:C4:CF:09
X509v3 Authority Key Identifier:
keyid:57:C1:13:EC:BB:9A:B3:C6:25:6B:67:B0:85:30:F5:89:F1:D7:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ET7Luas8Yla2ewhTD1ifHXqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/7fZR_FHQ0q244iKqi9zess7Ezwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/331738-3227-461b-ba00-9cb8250ff0b6/1/V8ET7Luas8Yla2ewhTD1ifHXqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bd:ae:6f:51:8c:47:0e:f7:93:65:90:6b:50:1f:c2:49:51:
9f:dc:1e:5a:b3:f3:24:75:01:2c:95:87:e9:c2:54:7c:8e:32:
25:2d:52:11:a9:8e:95:d7:92:b8:39:da:56:6b:82:2a:7e:7f:
53:70:0e:5a:51:fa:1d:22:76:14:dc:e5:e1:99:f4:39:6c:ec:
c7:9e:3c:37:a2:60:82:be:ee:5a:da:d2:54:02:3a:e8:a1:76:
b3:a8:2b:58:0c:cc:e0:76:d1:1a:a2:eb:cd:ef:a3:97:d6:10:
cb:ca:05:99:95:e1:0a:d2:4d:48:71:fd:92:41:42:b0:7f:6b:
1c:07:b7:c4:2e:15:ff:ef:5b:77:53:17:e6:c6:f7:58:fe:3f:
fd:9d:85:64:21:2b:9f:8a:c9:e4:f3:a6:8d:a5:bb:66:e1:d9:
72:8c:b5:ae:f4:5d:6f:43:f8:60:d0:1b:79:a9:65:bd:84:20:
17:e1:08:b6:ba:06:88:27:56:aa:f7:54:ec:4d:ed:85:47:f4:
a1:f8:e4:d2:36:2c:50:73:73:69:c3:e6:62:70:62:ce:74:ae:
22:58:6f:31:3b:b2:3a:a3:ff:9f:60:e8:47:c5:6f:b6:73:88:
87:a5:ef:15:d6:fa:6d:ce:3d:c2:50:60:7a:22:da:25:f2:45:
47:d2:4c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:49 2025 by rpki-client