Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/VO7h9N-T9rJInyjUiSJGwnvnzBM.roa
File: VO7h9N-T9rJInyjUiSJGwnvnzBM.roa (raw, json)
Hash identifier: xvR+knvxuL9CZ+9op6HuMxrzBFGm0BOQzCWB1wLWIM8=
Subject key identifier: 54:EE:E1:F4:DF:93:F6:B2:48:9F:28:D4:89:22:46:C2:7B:E7:CC:13
Certificate issuer: /CN=ac345e7c5920cc89a3ea6cada2be505283684270
Certificate serial: 5789F3
Authority key identifier: AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/VO7h9N-T9rJInyjUiSJGwnvnzBM.roa
Signing time: Sun 05 Jun 2022 09:41:24 +0000
ROA not before: Sun 05 Jun 2022 09:41:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5736947 (0x5789f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac345e7c5920cc89a3ea6cada2be505283684270
Validity
Not Before: Jun 5 09:41:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54eee1f4df93f6b2489f28d4892246c27be7cc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:a8:fd:de:60:fb:ad:2d:63:a2:ed:53:5f:
6b:6b:72:69:ad:46:9f:a9:4e:f5:3e:38:05:48:2e:
9b:94:18:0c:ed:75:b9:af:8b:f2:9a:84:be:c9:2f:
b4:c9:c8:b6:a2:c9:34:6e:72:7f:5a:85:ef:11:c7:
75:4f:ed:1f:db:7b:d0:0e:40:f4:c7:e5:9d:b2:66:
3f:7c:22:b2:f8:65:a3:16:dd:b0:54:44:51:5e:ac:
27:36:c4:4d:8b:3f:25:1c:28:b8:49:59:a9:1d:97:
bf:58:e8:f3:6c:4a:c7:a9:d9:cc:b1:c8:03:d6:8d:
e1:dd:5f:02:44:c6:df:17:fb:bf:c6:bf:53:54:68:
98:08:03:9a:9b:2b:78:6f:c9:97:a7:1d:d1:da:28:
9a:1c:8d:f3:e5:2c:9a:c2:a3:57:a8:c6:98:89:19:
0d:23:9e:f9:a8:31:c4:d0:7d:af:d3:b9:24:37:28:
2b:cc:6e:d1:07:4c:c4:3e:b4:e4:33:69:83:9e:0c:
6a:eb:55:82:0e:19:72:24:72:9e:46:2a:9b:80:fd:
c3:b1:61:84:40:a1:7e:da:cf:3b:d4:ea:9a:e5:1c:
4c:39:ea:51:b9:3c:ee:56:76:76:02:6b:77:4e:ad:
5e:7e:d8:6e:1d:1f:e2:ad:70:be:46:66:ee:6b:4d:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EE:E1:F4:DF:93:F6:B2:48:9F:28:D4:89:22:46:C2:7B:E7:CC:13
X509v3 Authority Key Identifier:
keyid:AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/VO7h9N-T9rJInyjUiSJGwnvnzBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/rDRefFkgzImj6mytor5QUoNoQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:29:a6:5b:1a:c5:7d:cb:a2:4c:58:b2:27:b3:4b:d8:e8:a7:
2f:a7:d8:84:4d:c9:2a:0e:90:fe:31:56:88:79:ab:7f:03:5a:
0b:3b:84:a0:c5:5f:02:bd:49:16:77:40:94:de:e6:09:0d:16:
0c:fe:db:0a:a7:c9:12:51:8f:42:4a:c1:34:ae:b1:fe:98:95:
7e:59:80:ca:35:d7:87:ec:c0:1f:6b:6f:c7:dc:47:34:79:34:
6c:0e:2f:45:18:79:05:8b:55:d2:19:b1:bf:cf:52:b2:67:65:
03:dd:6f:a8:5e:e6:78:15:6f:61:54:98:c4:51:43:66:75:45:
1b:46:cc:21:a4:7d:e1:57:ca:0d:96:d4:2d:e1:ca:f2:30:3d:
c8:f3:b2:65:96:09:a0:1b:88:b5:d8:5f:9d:a3:b4:0b:f0:16:
3d:c1:8a:ad:11:1d:74:b4:df:88:78:74:c1:3d:f8:62:a0:71:
f8:50:00:39:d3:6c:3e:5e:34:e0:ca:e4:47:39:9e:ba:f3:e6:
7f:bb:f9:39:3d:83:ba:e1:16:c6:94:e0:61:85:c9:85:0b:f2:
07:f4:64:b0:e4:8f:eb:56:92:05:db:0e:d1:5d:e4:b3:e5:b5:
f8:b8:f3:6a:89:86:e0:dc:3e:dd:58:9e:86:ea:ca:7a:9c:1f:
e5:75:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:19 2025 by rpki-client