Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/6OdrrcGMBFhV-w9GOCRez867mPk.roa
File: 6OdrrcGMBFhV-w9GOCRez867mPk.roa (raw, json)
Hash identifier: CgEE9ETR7HAUrEn+rxDZMgtS9zM2DekBej99TCwmM7o=
Subject key identifier: E8:E7:6B:AD:C1:8C:04:58:55:FB:0F:46:38:24:5E:CF:CE:BB:98:F9
Certificate issuer: /CN=ac345e7c5920cc89a3ea6cada2be505283684270
Certificate serial: 024D0E
Authority key identifier: AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/6OdrrcGMBFhV-w9GOCRez867mPk.roa
Signing time: Wed 27 Apr 2022 21:51:35 +0000
ROA not before: Wed 27 Apr 2022 21:51:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150798 (0x24d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac345e7c5920cc89a3ea6cada2be505283684270
Validity
Not Before: Apr 27 21:51:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8e76badc18c045855fb0f4638245ecfcebb98f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:b3:2c:b3:0c:8b:1e:34:28:26:d7:8a:36:
8a:40:5a:96:32:26:18:5a:73:a4:26:77:95:35:36:
64:23:66:0b:5a:01:01:ea:6e:09:6e:bf:e3:66:e1:
06:c5:35:f6:4a:07:42:d7:cf:60:2b:7a:12:5e:7a:
43:4a:d5:ea:12:26:bc:41:88:21:ea:1f:45:ad:5c:
ca:d8:bb:f6:8c:a2:4b:1d:37:63:f2:e8:27:f0:3b:
52:33:65:58:94:08:3f:29:19:57:b0:1a:be:d1:0f:
61:da:74:d8:40:b0:b4:1f:b6:35:10:ff:9e:c2:e0:
ff:25:58:a0:6b:71:c0:1a:aa:7b:48:12:95:ec:66:
20:a2:33:11:18:8f:de:a4:75:7a:10:8f:3f:66:d2:
a3:36:3b:0f:22:50:3c:02:55:73:16:2a:1d:65:3a:
52:80:79:50:cc:df:08:cd:42:3c:24:11:f6:49:9c:
af:6f:a8:20:6f:13:62:8f:5a:5f:27:f8:4c:34:b2:
f1:af:8c:1a:41:26:0a:7e:cd:de:07:93:93:b9:84:
01:bf:22:5a:45:08:84:11:7b:46:dd:a1:12:df:53:
81:e8:75:f6:34:1e:92:eb:41:63:97:52:d0:7f:fa:
73:36:13:ff:e8:da:29:bf:27:8c:79:31:a3:60:4d:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E7:6B:AD:C1:8C:04:58:55:FB:0F:46:38:24:5E:CF:CE:BB:98:F9
X509v3 Authority Key Identifier:
keyid:AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/6OdrrcGMBFhV-w9GOCRez867mPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/rDRefFkgzImj6mytor5QUoNoQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5d:0e:94:ce:67:31:c8:48:dd:08:dc:eb:a9:56:8d:51:39:
0e:46:8b:e7:a7:51:56:23:0d:be:36:57:d9:43:f7:57:95:dd:
b2:6e:eb:f9:25:5b:99:95:72:31:24:b7:41:0a:ee:33:c5:2f:
2f:23:73:f0:d7:fd:c4:58:cd:d3:53:d0:93:05:49:32:cf:4e:
68:5e:28:da:50:db:e8:56:f7:76:22:f9:a8:56:3d:28:9a:c6:
7f:2a:4a:de:9d:be:51:28:0b:3a:d3:f9:fc:b9:0f:28:56:9c:
ae:73:8a:36:cb:6f:ea:19:d8:e8:27:2b:cd:95:55:ee:3a:64:
5d:8c:27:06:d1:9e:6f:bc:7d:61:53:0f:58:04:5e:84:34:81:
2c:bc:b7:05:33:80:b8:fd:f3:ba:39:09:bb:84:bd:91:68:2f:
f1:6a:dc:fd:dd:f6:55:34:81:5a:8d:a7:26:47:6f:24:61:3c:
ec:36:05:45:33:29:a0:20:6a:70:7d:20:0d:6c:ff:ab:51:ee:
7b:ff:e4:71:e6:6d:9b:63:97:27:41:68:08:06:b0:b6:cd:d0:
56:ba:43:57:aa:d7:17:97:d9:dc:23:38:31:36:d0:c5:70:52:
6a:e6:b0:29:67:be:6f:25:10:36:90:11:fb:d8:68:70:e6:81:
a7:0b:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:48:06 2025 by rpki-client