Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/vQfWADON-eIzNmE3zXDUOqZt-E8.roa
File: vQfWADON-eIzNmE3zXDUOqZt-E8.roa (raw, json)
Hash identifier: Ej/UUECP0ykmrhr9iHXrgp0+q8pmwZ9wOGLTINE1TnA=
Subject key identifier: BD:07:D6:00:33:8D:F9:E2:33:36:61:37:CD:70:D4:3A:A6:6D:F8:4F
Certificate issuer: /CN=ac345e7c5920cc89a3ea6cada2be505283684270
Certificate serial: 01856F4B73F9FC37AA7D54F1D8C99C49D866
Authority key identifier: AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/vQfWADON-eIzNmE3zXDUOqZt-E8.roa
Signing time: Sun 01 Jan 2023 21:44:53 +0000
ROA not before: Sun 01 Jan 2023 21:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:73:f9:fc:37:aa:7d:54:f1:d8:c9:9c:49:d8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac345e7c5920cc89a3ea6cada2be505283684270
Validity
Not Before: Jan 1 21:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd07d600338df9e233366137cd70d43aa66df84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:f9:41:f8:c7:79:86:59:1b:0a:d1:fd:75:
ab:db:f3:ac:71:da:25:af:77:28:00:37:b2:6c:ee:
a9:55:98:b4:20:45:69:50:9b:16:b1:68:b1:a9:e8:
c1:73:13:b3:f2:ae:01:cb:8b:6a:0e:ba:70:ae:e1:
5e:c8:5b:9d:8f:f1:d3:5d:19:0d:50:da:8b:f4:a8:
e8:1e:fb:ed:71:1f:fb:d8:14:f0:ff:53:fd:43:3b:
b1:09:b5:24:05:86:1b:e1:40:52:71:88:ef:21:90:
61:37:51:04:de:79:02:08:44:ba:0f:27:c1:df:a1:
6e:15:61:28:a9:f6:21:0e:c4:8b:0f:a9:c9:eb:4d:
9a:7b:c4:f9:9a:da:e9:ca:bb:b7:75:94:24:0a:ab:
c0:b6:dc:7d:98:b5:be:ff:5b:b9:19:c3:2e:3a:b9:
2b:af:92:67:35:12:a4:55:26:d5:04:05:1f:1b:e2:
7a:79:89:82:a7:b6:25:2a:2d:39:a5:6d:6f:67:77:
f4:8d:45:b9:20:9a:4d:4b:f0:1a:0b:67:93:6a:2d:
20:22:69:65:47:9d:60:5c:7c:65:6e:23:4a:21:fc:
5b:10:e3:ff:28:d9:bb:48:bd:29:e6:98:ef:88:94:
ec:fb:9c:3b:37:9c:d4:41:6b:0e:05:6a:c4:6c:c6:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:D6:00:33:8D:F9:E2:33:36:61:37:CD:70:D4:3A:A6:6D:F8:4F
X509v3 Authority Key Identifier:
keyid:AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/vQfWADON-eIzNmE3zXDUOqZt-E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/rDRefFkgzImj6mytor5QUoNoQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:78:ba:a4:fe:99:45:9f:8c:37:0d:00:42:7b:e0:1a:d4:c4:
f7:b1:82:5f:6c:0b:7a:b0:91:e1:b6:23:cc:3d:32:9b:8b:18:
27:5d:1f:f6:1b:dc:9c:a0:7d:8b:00:22:8a:6c:86:d6:fe:e0:
b3:c6:46:22:9d:6d:a7:34:6e:78:88:e6:8e:bf:4f:21:82:ca:
ef:87:fc:83:20:eb:b9:48:32:75:62:0c:3b:43:cd:53:0e:30:
f4:8e:2c:ab:a8:60:5d:0c:2e:5d:12:b4:00:c1:fd:39:3f:9c:
8c:c4:10:5e:16:aa:3e:86:03:5d:d1:08:36:26:f6:19:47:c7:
71:09:52:fb:93:5a:09:ca:2e:bf:89:e9:85:44:b1:01:3c:6b:
c9:7f:ef:75:d2:86:26:fe:30:c5:b5:cd:ed:a6:40:aa:12:05:
7b:d0:b6:31:72:f6:41:5e:4a:ae:f9:0b:8a:9e:76:99:7e:de:
b3:4c:13:1e:99:ea:84:1f:b2:67:a4:7f:2b:de:be:f3:9e:31:
29:dd:07:b6:d0:41:82:1c:e6:98:51:ff:9d:c9:bc:67:34:ce:
94:f5:b5:b6:fc:36:80:6a:46:85:c7:5f:2e:4b:d5:89:a1:e7:
6a:0d:2b:4c:67:44:bd:19:23:ad:39:e6:84:6e:32:d9:33:64:
33:1d:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 03:21:21 2025 by rpki-client