Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/Sy_cE5pPDSHR8qZYoIHj3kysOX4.roa
File: Sy_cE5pPDSHR8qZYoIHj3kysOX4.roa (raw, json)
Hash identifier: RNrdHd0iXqhkSq0QthRrDrGV4KQqN4yJ0ja6aJ6FeE4=
Subject key identifier: 4B:2F:DC:13:9A:4F:0D:21:D1:F2:A6:58:A0:81:E3:DE:4C:AC:39:7E
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F7F3D6922EB3051AEE916835A872
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/Sy_cE5pPDSHR8qZYoIHj3kysOX4.roa
Signing time: Thu 15 Aug 2024 09:35:00 +0000
ROA not before: Thu 15 Aug 2024 09:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7054
IP address blocks: 62.200.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f7:f3:d6:92:2e:b3:05:1a:ee:91:68:35:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b2fdc139a4f0d21d1f2a658a081e3de4cac397e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:e0:90:1c:e4:04:55:a5:24:a9:30:4e:bb:
2b:1f:45:c9:a6:69:4b:c5:3d:0a:0d:c1:79:56:18:
03:29:6c:47:d9:88:48:95:86:b8:64:dd:dd:45:e2:
72:c8:d2:d8:32:d8:ba:e5:64:11:e4:10:43:e2:31:
57:82:ac:29:16:11:8e:d0:20:bf:f9:59:20:2f:fb:
7f:dc:28:e1:f3:ed:d2:28:b0:c3:43:54:fe:14:68:
09:3c:42:8b:17:ad:84:b2:03:85:65:04:44:3d:5f:
8d:f2:b3:4b:2e:a2:aa:99:9d:a9:3e:fd:54:af:4b:
eb:84:aa:3c:fc:7c:99:62:80:0f:fa:a2:4f:e5:f7:
2b:56:d4:43:dd:6c:b5:25:65:92:56:9f:08:e0:fd:
71:d9:27:e2:f6:d6:b2:30:3f:35:cb:e9:a0:5e:88:
35:fa:3f:32:1e:28:51:70:dc:94:1b:d8:f4:fa:9b:
df:22:9d:6c:f6:fb:72:16:4f:1d:19:5b:eb:4d:1e:
d6:9a:25:3c:ba:46:d6:70:39:fa:cb:46:9d:da:d3:
56:5f:b4:be:e3:64:93:e2:89:76:11:d6:6f:52:f4:
fe:dd:28:9c:2d:56:79:d8:46:3d:7a:80:cb:81:84:
fc:40:5d:19:5e:71:82:c0:65:72:4f:d3:97:cb:8e:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2F:DC:13:9A:4F:0D:21:D1:F2:A6:58:A0:81:E3:DE:4C:AC:39:7E
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/Sy_cE5pPDSHR8qZYoIHj3kysOX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.200.212.0/24
Signature Algorithm: sha256WithRSAEncryption
09:49:73:7f:cb:7c:e6:42:62:a1:c6:e5:86:08:3c:76:83:94:
b1:cc:91:68:e5:57:75:32:1a:c0:c3:77:0c:3f:6d:0c:cd:40:
04:47:04:0e:20:7f:66:88:ed:bd:1c:70:3d:f6:19:13:60:71:
0d:bd:7a:32:4c:19:f3:47:3e:f6:7d:86:d2:10:b4:72:ae:0a:
54:eb:67:8b:44:c3:47:5e:e6:db:1e:93:63:3e:58:25:2b:a3:
0b:5a:eb:9a:67:1b:a9:0a:18:76:59:4d:29:5f:a5:7d:bc:17:
1a:66:0d:58:8c:fe:c8:12:a2:ea:2b:ce:17:88:72:95:6b:96:
20:6d:47:42:1e:d1:8a:e3:ca:21:3c:e0:13:c0:1c:06:3e:70:
3a:f1:0d:0d:73:61:9f:08:79:05:5d:38:e3:1d:84:d7:57:56:
fd:d0:5f:ac:6b:c9:58:d2:32:aa:f1:fc:99:a9:72:85:b8:ed:
4f:13:a3:aa:f0:46:df:a8:7e:7b:21:e8:aa:0b:af:b3:8c:d2:
11:ed:1a:a0:28:0f:f9:e8:fc:bc:5b:b9:44:d0:95:8d:36:7f:
f9:76:fd:3b:5a:a5:82:3b:0b:fd:d6:dd:97:38:26:2c:e2:02:
60:e0:8f:f3:37:57:b0:83:4c:c9:29:d5:3c:b8:fc:a1:8b:e6:
e5:09:c6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:56 2025 by rpki-client