Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/h9aLFgY_ex-s0j8okseymFPj2D8.roa
File: h9aLFgY_ex-s0j8okseymFPj2D8.roa (raw, json)
Hash identifier: iuIODyY6gzkvQgktS5Bji1LYn/ga1qjWeiBkn1Y2NVA=
Subject key identifier: 87:D6:8B:16:06:3F:7B:1F:AC:D2:3F:28:92:C7:B2:98:53:E3:D8:3F
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 01944241D886214D4FA68E9DB74A3734236F
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/h9aLFgY_ex-s0j8okseymFPj2D8.roa
Signing time: Tue 07 Jan 2025 19:33:18 +0000
ROA not before: Tue 07 Jan 2025 19:33:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 67.63.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:41:d8:86:21:4d:4f:a6:8e:9d:b7:4a:37:34:23:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Jan 7 19:33:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87d68b16063f7b1facd23f2892c7b29853e3d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:eb:42:7a:e2:55:47:57:38:a6:e1:4f:82:
ee:91:e1:40:de:84:1e:26:00:95:ea:65:0e:95:fb:
df:4d:5c:47:51:cf:e2:25:2b:25:4d:cb:d7:f2:b6:
1e:24:24:bc:24:44:0b:ee:cd:6c:8d:c9:e9:fd:4f:
6c:d8:0f:3a:d8:76:4b:f3:51:e1:69:39:37:6c:4f:
e8:98:db:10:a1:7a:02:eb:d0:77:5f:bf:66:b0:2e:
4f:17:bf:8e:49:aa:84:8f:3f:20:ed:60:f6:8f:47:
7f:69:cc:e4:8a:60:65:ab:20:18:99:0e:aa:44:d6:
3e:f1:39:4c:93:66:96:b9:b0:70:63:09:42:87:af:
29:30:31:7e:34:20:34:12:93:dd:ae:fc:e3:82:00:
37:96:71:dc:74:8f:8e:8b:05:86:9f:39:ea:e2:41:
3a:ae:c5:14:6f:bf:6a:b9:f8:2c:bd:ca:8c:37:ad:
2c:64:70:15:7d:eb:d9:d4:09:62:bd:41:b8:1f:27:
80:a4:8b:8f:69:a2:71:dc:29:56:4d:d4:ed:89:08:
cc:68:b7:fb:85:dc:6f:13:31:fa:fe:3a:88:29:92:
1a:79:e3:eb:5d:41:9e:5d:99:ba:d3:25:c3:61:fa:
47:bb:95:d2:25:4c:de:e5:a5:6b:0a:4f:5c:24:e6:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D6:8B:16:06:3F:7B:1F:AC:D2:3F:28:92:C7:B2:98:53:E3:D8:3F
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/h9aLFgY_ex-s0j8okseymFPj2D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.62.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:b0:bc:58:dc:e4:eb:50:56:8a:0a:8c:30:e6:86:c4:de:ed:
f0:5d:3a:39:4e:6d:6d:ea:00:c4:fc:94:36:b3:9e:d8:1e:b6:
6e:ba:69:8e:1f:82:8e:e1:a4:b9:ed:7b:19:7f:a8:3f:a2:a2:
98:68:cd:9c:57:4f:9f:a1:3c:c8:41:48:04:84:11:4a:8d:c7:
5a:f8:f0:7b:53:58:30:10:cd:be:6e:cf:aa:df:2c:99:53:16:
77:6c:c2:20:38:79:9b:e4:94:e5:51:87:1f:8e:0b:0e:e2:e8:
fa:2e:9a:c6:4c:da:3a:ba:4a:7e:96:cc:bf:11:7d:c5:d7:9d:
fb:16:7d:a8:cd:11:05:8c:4d:cb:fc:b0:75:c6:ab:04:74:0b:
01:b2:c2:8c:89:f5:39:f4:0f:34:46:c0:c7:71:e3:08:bc:12:
37:1d:a0:0c:55:67:f0:65:92:c1:93:f0:b1:41:68:64:22:ec:
ee:cb:74:b0:b0:fa:2b:ce:bd:0a:8b:bd:b5:7a:66:0b:3d:d4:
5e:82:91:6a:71:02:7e:88:7e:8c:5f:10:f9:22:c9:30:34:ea:
15:7c:15:1b:9d:15:9d:e3:b0:f5:a7:8e:51:94:87:fb:e6:16:
36:ab:35:9f:96:1b:7a:b6:6d:e0:df:d6:af:12:25:65:f7:99:
d0:3f:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:54 2025 by rpki-client