Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: P+rc1RyQV4CIo6S8qjplAsEn7lXz9LC04ovko1jj8sc=
Subject key identifier: 42:0E:1B:DA:A5:A2:3B:4C:D0:B5:A6:A4:AC:BE:48:74:CD:5D:BC:7E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6FD7D5C3DBE30F07EAF9EBD396F53476FE092FC3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
Signing time: Tue 25 Feb 2025 07:21:13 +0000
ROA not before: Tue 25 Feb 2025 07:16:13 +0000
ROA not after: Tue 24 Feb 2026 07:21:13 +0000
asID: 63023
IP address blocks: 96.62.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d7:d5:c3:db:e3:0f:07:ea:f9:eb:d3:96:f5:34:76:fe:09:2f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 25 07:16:13 2025 GMT
Not After : Feb 24 07:21:13 2026 GMT
Subject: CN=420E1BDAA5A23B4CD0B5A6A4ACBE4874CD5DBC7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:3c:b6:14:c6:9e:c8:60:56:1c:75:38:1f:
ac:5d:18:e0:71:97:af:96:6b:04:3b:a9:97:a3:af:
09:19:ed:b9:48:dc:63:67:d5:59:54:dc:c8:b3:88:
66:ca:df:0a:80:7b:45:29:41:38:08:a2:ff:62:78:
8f:d7:d5:13:c8:ff:b4:81:93:1e:4f:66:3f:f0:c2:
c9:2b:b8:30:42:2e:6d:44:63:17:92:9f:6d:4c:6e:
e9:fe:ef:63:e9:6d:1f:e2:e9:26:2a:65:a3:b6:7c:
03:51:9f:c7:f6:03:a3:14:eb:7e:da:e0:4e:2b:3a:
a6:9b:5e:89:ad:4f:53:3c:56:cc:9e:37:2b:12:75:
41:dc:ed:fd:9a:f8:b8:2f:ff:41:e8:d0:f6:9e:36:
1b:cb:01:ed:b3:d8:91:93:58:95:5c:a5:c8:2c:9e:
3b:8b:6d:e3:74:69:84:91:f0:9d:a7:83:4f:d3:13:
4b:bb:db:3d:18:e3:4b:ca:9e:35:a8:ec:6d:97:9e:
1a:5b:7f:38:45:f9:ef:c4:ef:3b:75:41:13:32:a1:
05:cd:b7:a0:05:d5:9b:e3:ef:7b:46:5c:5a:61:8f:
3b:19:3f:e6:04:2a:6d:80:d4:ee:3f:dc:08:af:3b:
45:79:48:9d:eb:f4:48:02:1d:5f:a6:73:92:91:7e:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0E:1B:DA:A5:A2:3B:4C:D0:B5:A6:A4:AC:BE:48:74:CD:5D:BC:7E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.77.0/24
Signature Algorithm: sha256WithRSAEncryption
05:00:ae:21:6a:fa:29:a7:65:fc:71:32:be:7c:39:19:0f:d2:
07:85:34:90:ce:f3:e9:c3:20:28:9c:63:88:f4:48:77:fd:83:
4a:f8:54:61:41:55:43:8b:f4:f7:cb:6f:28:dd:b9:0f:e7:b5:
ba:9a:cd:0f:a8:7d:92:39:ba:2a:f9:62:73:fb:1c:10:fd:e0:
96:31:c4:ed:7c:0a:82:90:22:c9:47:59:97:14:b1:58:5a:a4:
d0:ce:db:d0:dd:91:fa:fa:6f:08:f6:4d:ad:88:c9:5b:9a:b6:
31:57:67:60:a7:ca:0a:a8:6f:1d:52:4d:d6:4d:16:3c:f6:c1:
73:5e:ca:9e:7e:66:16:84:d0:ac:d4:cf:c6:41:e9:9e:9f:f0:
dc:de:26:c4:00:74:7e:c0:53:77:06:0d:5d:6d:fb:1e:38:2b:
05:c8:cd:1d:53:db:49:41:e5:4d:2c:cb:4d:6e:e0:e4:94:7a:
c7:35:f4:c2:dd:d3:22:7c:f6:b7:8e:33:22:27:1e:21:4e:e9:
6a:4b:43:78:5b:cc:d7:b3:8f:7d:e1:43:5a:93:d5:c6:03:76:
b0:3c:69:e1:82:e0:66:82:86:9b:97:ad:b1:80:4f:a3:a0:c5:
fa:13:51:53:70:63:b1:c2:4d:72:f0:d0:eb:a8:3d:fe:f4:76:
e5:37:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:52:52 2025 by rpki-client