Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/Ja293elo3WCrEmD6oDDSGJD6YWc.roa
File: Ja293elo3WCrEmD6oDDSGJD6YWc.roa (raw, json)
Hash identifier: kWvn8Z6YGwd0lxQp6FKknYn5Ow7wWTteEivbL2SZdl4=
Subject key identifier: 25:AD:BD:DD:E9:68:DD:60:AB:12:60:FA:A0:30:D2:18:90:FA:61:67
Certificate issuer: /CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Certificate serial: 01856DC1A0B54FA02465610E0F8EDE671B6C
Authority key identifier: 35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/Ja293elo3WCrEmD6oDDSGJD6YWc.roa
Signing time: Sun 01 Jan 2023 14:34:44 +0000
ROA not before: Sun 01 Jan 2023 14:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:a0:b5:4f:a0:24:65:61:0e:0f:8e:de:67:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Validity
Not Before: Jan 1 14:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25adbddde968dd60ab1260faa030d21890fa6167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:8a:d5:fd:5b:95:99:e3:1f:3a:51:91:2d:
01:a7:4c:f0:82:b4:30:0f:5c:40:82:4b:15:c0:26:
8e:99:3e:eb:7e:81:03:ee:5e:6e:d5:2c:a4:23:f2:
ec:c0:c7:6a:8e:a5:db:2c:8f:60:70:11:cc:fd:e0:
4f:6b:8f:0d:07:13:62:33:56:02:d0:ed:17:ab:98:
67:ad:ff:2a:a7:b4:49:0b:a1:f5:01:cd:e1:1b:ba:
f4:87:65:84:08:22:71:b2:15:1c:5a:44:7a:e2:5d:
4e:98:ff:79:13:57:07:97:99:36:db:bc:9a:cb:e0:
38:4d:4a:74:82:36:44:d0:e3:48:7a:24:00:14:09:
8a:f2:eb:8e:b9:c8:c9:54:1e:e8:59:1d:3f:ca:dc:
8a:4a:2a:f7:8b:5c:a4:35:32:39:fa:0f:e0:cb:2d:
41:34:4a:ba:bd:06:9c:83:7e:66:9e:67:52:a8:27:
ce:10:fe:e2:56:ca:31:94:1a:61:28:d1:bf:4e:73:
b8:bc:8b:98:c6:04:b7:c8:d3:61:85:49:0b:d3:4e:
2d:c4:b0:8b:07:99:97:02:53:e8:75:9a:f1:d6:bb:
d5:d7:18:86:de:25:76:ec:f3:39:8c:2d:8b:b6:33:
48:9d:6c:ee:77:11:9b:15:8b:ba:0d:51:15:77:11:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:BD:DD:E9:68:DD:60:AB:12:60:FA:A0:30:D2:18:90:FA:61:67
X509v3 Authority Key Identifier:
keyid:35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/Ja293elo3WCrEmD6oDDSGJD6YWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e7:9a:cc:43:09:ce:d8:fc:84:14:af:6a:b8:9b:35:d8:83:
e7:a0:39:c0:e3:07:26:27:a1:72:4a:d0:c3:6e:d4:bc:b2:43:
12:c8:c9:7c:84:39:b3:75:49:23:10:48:6f:26:1f:96:eb:72:
71:12:7a:97:fd:57:88:a2:f0:ca:cc:75:d9:c4:ac:63:4c:35:
bb:d3:b2:86:6d:61:6f:47:9d:00:04:e7:84:23:3b:28:6d:eb:
65:67:25:4a:8d:02:de:f2:4d:06:80:c2:49:92:80:c2:ce:a7:
38:58:b9:be:33:99:cc:ca:db:d8:39:3a:a5:75:3b:cc:79:8f:
82:15:be:aa:eb:93:d4:47:59:bf:90:19:65:4e:5a:c1:c6:d0:
2b:81:0a:5f:89:6c:2f:bc:74:a3:47:d8:87:e3:b9:a6:c7:e7:
ef:7e:15:b2:9f:d3:7d:9e:7b:9f:81:08:69:bc:ee:0f:24:05:
99:24:15:b7:72:f1:7e:03:93:90:6e:ec:48:7b:42:e8:ed:69:
ae:2a:d5:5c:35:64:73:b8:e3:fe:94:c0:4f:4e:fb:d6:90:fc:
d0:87:cf:56:36:61:7d:42:13:69:a8:74:0b:eb:aa:0a:75:ec:
c0:44:e8:49:46:1f:ff:ae:81:e4:f3:35:b6:75:18:92:ad:25:
ed:26:15:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwaC1T6AkZWEOD47eZxtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MDRhNGYyYmQ0M2UwZjRhMDY3M2I4NzQzZjE1ZmJkNTE0
NTk5ZmUwHhcNMjMwMTAxMTQzNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFkYmRkZGU5NjhkZDYwYWIxMjYwZmFhMDMwZDIxODkwZmE2MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9yK1f1blZnjHzpRkS0Bp0zwgrQw
D1xAgksVwCaOmT7rfoED7l5u1SykI/LswMdqjqXbLI9gcBHM/eBPa48NBxNiM1YC
0O0Xq5hnrf8qp7RJC6H1Ac3hG7r0h2WECCJxshUcWkR64l1OmP95E1cHl5k227ya
y+A4TUp0gjZE0ONIeiQAFAmK8uuOucjJVB7oWR0/ytyKSir3i1ykNTI5+g/gyy1B
NEq6vQacg35mnmdSqCfOEP7iVsoxlBphKNG/TnO4vIuYxgS3yNNhhUkL004txLCL
B5mXAlPodZrx1rvV1xiG3iV27PM5jC2LtjNInWzudxGbFYu6DVEVdxFJuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWtvd3paN1gqxJg+qAw0hiQ+mFnMB8GA1UdIwQY
MBaAFDUEpPK9Q+D0oGc7h0PxX71RRZn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlFTazhyMUQ0UFNnWnp1SFFfRmZ2VkZGbWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9iYTk4ODQtODE4Yy00YmZjLWI3N2Qt
MWZjZGE0OGFiZTUzLzEvSmEyOTNlbG8zV0NyRW1ENm9ERFNHSkQ2WVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9iYTk4ODQtODE4Yy00YmZjLWI3N2QtMWZjZGE0OGFiZTUz
LzEvTlFTazhyMUQ0UFNnWnp1SFFfRmZ2VkZGbWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMSMA0G
CSqGSIb3DQEBCwUAA4IBAQBf55rMQwnO2PyEFK9quJs12IPnoDnA4wcmJ6FyStDD
btS8skMSyMl8hDmzdUkjEEhvJh+W63JxEnqX/VeIovDKzHXZxKxjTDW707KGbWFv
R50ABOeEIzsobetlZyVKjQLe8k0GgMJJkoDCzqc4WLm+M5nMytvYOTqldTvMeY+C
Fb6q65PUR1m/kBllTlrBxtArgQpfiWwvvHSjR9iH47mmx+fvfhWyn9N9nnufgQhp
vO4PJAWZJBW3cvF+A5OQbuxIe0Lo7WmuKtVcNWRzuOP+lMBPTvvWkPzQh89WNmF9
QhNpqHQL66oKdezAROhJRh//roHk8zW2dRiSrSXtJhXf
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:50 2025 by rpki-client