Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/WRSOnqe8Yu8rSKos-36pPS_0sP8.roa
File: WRSOnqe8Yu8rSKos-36pPS_0sP8.roa (raw, json)
Hash identifier: 8r/qF0hGTqd0RTxOcEDnSJAboPp0Cr4xqsek1Zdn+74=
Subject key identifier: 59:14:8E:9E:A7:BC:62:EF:2B:48:AA:2C:FB:7E:A9:3D:2F:F4:B0:FF
Certificate issuer: /CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Certificate serial: 01829E32BE18B17274AC84F0325A24010907
Authority key identifier: 35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/WRSOnqe8Yu8rSKos-36pPS_0sP8.roa
Signing time: Sun 14 Aug 2022 21:11:41 +0000
ROA not before: Sun 14 Aug 2022 21:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9e:32:be:18:b1:72:74:ac:84:f0:32:5a:24:01:09:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Validity
Not Before: Aug 14 21:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59148e9ea7bc62ef2b48aa2cfb7ea93d2ff4b0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:99:64:18:18:e0:8f:ad:5f:70:d3:b5:a1:
94:a3:8b:62:55:a2:fe:9a:de:b1:4a:20:f1:0c:8c:
11:22:42:3c:a0:97:ee:d3:30:41:1c:1d:8b:99:bf:
41:bf:aa:00:f4:d5:6e:b9:21:e3:a2:2f:03:aa:3f:
b7:41:1b:5b:6d:fb:17:a1:50:fa:e9:d9:49:f0:1f:
ce:62:5d:b4:9f:2e:2e:f3:8b:6d:66:58:30:9a:6a:
f9:11:80:1a:12:87:bd:27:1a:4f:6b:33:e5:c5:c6:
74:17:a9:ac:92:11:06:af:11:f4:32:41:30:ab:5a:
8e:32:91:81:65:0b:59:77:ad:22:aa:7a:f7:d3:34:
97:0e:e6:18:4e:06:71:9a:54:68:dd:bb:09:dd:aa:
54:f2:59:91:8e:c7:59:07:64:f8:7f:c6:a0:32:b9:
6e:99:4e:c5:0d:96:21:3d:89:2e:27:13:1b:d2:4a:
9f:a2:87:74:ff:4f:c2:f8:4d:1d:32:75:d5:49:f9:
7c:de:66:1d:52:85:07:8c:13:98:3a:19:54:d9:03:
80:46:e6:b0:d2:05:1b:7a:19:05:04:29:9e:94:48:
66:37:41:74:db:f7:99:2a:54:ff:20:44:17:a6:60:
36:8d:bd:ca:1b:ed:80:d7:d3:7c:ac:8a:5f:c5:f3:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:14:8E:9E:A7:BC:62:EF:2B:48:AA:2C:FB:7E:A9:3D:2F:F4:B0:FF
X509v3 Authority Key Identifier:
keyid:35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/WRSOnqe8Yu8rSKos-36pPS_0sP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5c:8f:ad:cc:6f:ea:ac:b5:c0:49:c3:c6:b2:8c:1f:5b:64:
e0:e8:3c:7b:7e:26:34:c0:4f:fc:b3:1c:21:16:a0:65:01:73:
fb:09:ba:5a:76:a8:05:6d:f3:e2:45:68:8d:9f:30:3b:ea:45:
64:e9:e1:72:41:41:f1:23:1f:42:91:be:b5:1c:a1:3a:92:24:
df:be:5f:9a:d1:02:a1:c2:3a:c9:88:72:07:ee:2a:eb:13:35:
27:81:a3:ec:a1:1c:1b:96:91:a5:58:f6:76:a5:b8:aa:f9:44:
c9:0a:73:7a:0a:28:20:23:9c:4f:a9:70:c3:2f:bb:0d:cc:65:
d2:55:27:50:78:91:73:53:f5:81:f1:2b:6f:e6:bd:bd:4f:d2:
d5:02:9b:88:d6:59:68:f0:a4:44:f4:21:b6:45:4d:cc:9f:e3:
00:e1:71:ea:e5:8a:9b:a3:74:8a:93:c4:25:d9:18:3a:65:a9:
eb:42:e4:c2:1c:81:85:de:46:ac:12:f3:fe:07:f7:b5:0c:a9:
e8:00:b0:46:42:dc:c4:8b:f7:d8:1b:16:3a:79:87:06:a9:04:
d3:12:08:86:4e:50:ae:3e:bf:ff:6e:68:97:01:da:56:35:5d:
7a:d8:2a:78:e1:af:80:f7:84:85:e5:89:5f:c6:88:2a:87:84:
62:23:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:39:44 2025 by rpki-client