Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/x6B2XW8Dk_8GPVx8juGRLmkVsYk.roa
File: x6B2XW8Dk_8GPVx8juGRLmkVsYk.roa (raw, json)
Hash identifier: TYgAyR4drzQigrjVuYHUQHuI09190cz+ByYujMO2geI=
Subject key identifier: C7:A0:76:5D:6F:03:93:FF:06:3D:5C:7C:8E:E1:91:2E:69:15:B1:89
Certificate issuer: /CN=8568e58570f864a342eb8f0bf489f51a70afe34b
Certificate serial: 018572B409D099ACE1A9F3072EE9225CD6FD
Authority key identifier: 85:68:E5:85:70:F8:64:A3:42:EB:8F:0B:F4:89:F5:1A:70:AF:E3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWjlhXD4ZKNC648L9In1GnCv40s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/x6B2XW8Dk_8GPVx8juGRLmkVsYk.roa
Signing time: Mon 02 Jan 2023 13:37:59 +0000
ROA not before: Mon 02 Jan 2023 13:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209326
IP address blocks: 62.106.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:09:d0:99:ac:e1:a9:f3:07:2e:e9:22:5c:d6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568e58570f864a342eb8f0bf489f51a70afe34b
Validity
Not Before: Jan 2 13:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7a0765d6f0393ff063d5c7c8ee1912e6915b189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:c5:56:31:06:17:f5:04:b4:b5:62:51:52:
8f:da:a4:c1:0f:94:ab:6f:fd:6c:75:1c:d8:a1:0a:
ac:e0:53:20:c2:0a:1f:02:ef:59:9c:76:06:b6:2b:
69:9c:2a:e5:a1:2f:91:5b:92:54:96:ed:65:7b:85:
d0:f6:07:9a:8c:73:fe:aa:a2:7e:ee:d1:9b:aa:db:
95:9c:5d:25:5a:8c:15:98:bb:14:ec:d9:8d:10:c3:
15:83:a8:3a:43:14:1e:c7:1d:cb:6f:e0:68:67:82:
d2:4c:ce:69:42:d7:00:07:85:c2:ce:d7:91:f0:b6:
33:68:80:a2:bd:b9:77:18:9b:0f:9c:ce:15:f7:fa:
38:a6:d8:cb:79:ec:24:e9:4b:19:67:8f:47:6c:c3:
72:01:28:19:70:88:bc:e1:f0:d2:e4:13:9e:fa:90:
74:f5:e3:4b:54:3d:1d:e1:94:dc:cf:42:b4:ca:33:
5c:76:c4:0a:ed:3c:05:4a:68:74:4a:96:c2:19:7b:
12:3f:8c:92:c1:b1:7d:9b:38:f5:08:e3:f4:d7:2a:
36:20:96:4e:e1:ae:62:c9:9e:21:d6:8a:89:41:d7:
25:78:52:1e:b2:d6:14:00:cc:64:f7:a0:39:e4:02:
f5:d9:b6:a6:10:da:24:d6:14:40:1b:bb:66:81:ee:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:76:5D:6F:03:93:FF:06:3D:5C:7C:8E:E1:91:2E:69:15:B1:89
X509v3 Authority Key Identifier:
keyid:85:68:E5:85:70:F8:64:A3:42:EB:8F:0B:F4:89:F5:1A:70:AF:E3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWjlhXD4ZKNC648L9In1GnCv40s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/x6B2XW8Dk_8GPVx8juGRLmkVsYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/hWjlhXD4ZKNC648L9In1GnCv40s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.79.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5d:25:89:d0:e7:ec:08:f8:81:04:76:72:87:50:2c:23:77:
c5:9c:82:32:e4:e3:d7:dd:0a:2c:1f:3b:86:38:0f:46:47:20:
6a:61:1b:b8:21:d3:17:d7:89:6c:7d:b4:06:4c:f3:f9:f2:77:
fe:7c:1f:c5:2f:06:9b:e6:3d:c6:a0:24:85:7d:c6:41:64:a0:
7b:d7:c7:02:17:ba:92:d8:50:31:33:19:51:17:c0:e2:12:59:
cd:6c:44:e5:d5:61:a6:d9:f4:90:57:a9:73:57:a4:ad:20:99:
22:17:dc:62:90:ff:13:4d:39:48:56:b7:d0:1a:fb:7f:92:0c:
87:48:91:f6:86:01:1b:b2:3e:d2:a0:4a:83:2b:05:fd:f9:4e:
92:ad:ec:35:9d:f3:fc:22:09:b6:7b:b9:ab:8d:48:cf:36:80:
dd:a4:e0:23:1b:fa:82:d6:4f:19:48:58:28:07:78:cd:87:d1:
ec:9d:f1:85:af:20:87:95:a3:2a:71:46:01:84:28:21:ef:5c:
e1:f0:f6:e0:be:27:ed:fe:f7:e0:20:7c:6c:ee:f1:73:e0:25:
a6:04:af:a5:fe:0b:7c:14:04:c0:3c:ed:c2:7d:33:55:e1:3f:
c5:c4:3e:e0:28:c0:db:d8:5f:e0:7f:b0:52:7e:bf:42:ed:1c:
cd:c1:fe:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:16:50 2025 by rpki-client