Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/vlAAG3mlfPTOh2Tv4zVmgQnRW8g.roa
File: vlAAG3mlfPTOh2Tv4zVmgQnRW8g.roa (raw, json)
Hash identifier: 2BX/9gHuFNKqTFv2URBmIo+YgGEfkEu8k0OwqiBVEf4=
Subject key identifier: BE:50:00:1B:79:A5:7C:F4:CE:87:64:EF:E3:35:66:81:09:D1:5B:C8
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01943ABAA9463A6023E59AF4141CF7B04F3D
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/vlAAG3mlfPTOh2Tv4zVmgQnRW8g.roa
Signing time: Mon 06 Jan 2025 08:28:19 +0000
ROA not before: Mon 06 Jan 2025 08:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 62.68.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:ba:a9:46:3a:60:23:e5:9a:f4:14:1c:f7:b0:4f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jan 6 08:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be50001b79a57cf4ce8764efe335668109d15bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:19:20:75:91:79:0a:51:17:c8:61:ce:06:
62:20:b3:cf:78:55:38:b8:db:62:13:54:7d:50:11:
fe:9a:48:58:05:f6:43:bd:15:5f:5e:97:bd:a2:2f:
e1:22:d7:25:90:ad:c9:11:ca:06:7f:b3:ff:da:d0:
39:0e:43:4b:2c:d1:e3:3e:8c:87:53:d5:b6:de:92:
86:7a:3f:2f:2a:1a:8a:ae:2a:51:fd:0c:c2:5e:b5:
1b:e7:37:3b:94:f2:3b:e9:a4:64:5e:59:56:b8:d8:
2a:f8:2e:3d:4c:82:a3:e6:4c:1c:07:dd:8c:12:3e:
0a:f0:fb:fb:6f:1b:91:c1:65:90:ba:b7:1d:21:4c:
13:1b:ca:58:3d:43:df:51:84:d4:c2:59:ff:ef:cb:
e6:8c:9d:eb:0a:5e:c8:ac:84:9a:8e:88:c3:9d:90:
01:fd:ae:22:99:7e:28:1f:cf:92:74:6b:22:ac:16:
ed:6f:f6:4e:c4:a3:e7:02:4c:56:9c:65:1c:6d:6c:
0d:e2:ba:21:c7:44:c9:c6:c2:bb:85:c5:b7:9b:19:
2e:50:c8:f4:38:7f:e1:49:9e:c2:c9:8d:48:4b:77:
d0:d8:06:62:68:21:af:e1:ea:8e:72:21:fd:11:73:
62:9f:16:dc:56:1b:42:65:07:8a:51:ca:dd:49:45:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:50:00:1B:79:A5:7C:F4:CE:87:64:EF:E3:35:66:81:09:D1:5B:C8
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/vlAAG3mlfPTOh2Tv4zVmgQnRW8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
Signature Algorithm: sha256WithRSAEncryption
71:7b:98:b3:91:e8:9f:1e:93:2a:42:f0:ef:c2:48:22:4b:71:
68:8f:ad:dd:ab:30:2b:af:00:b2:fc:48:82:84:1a:ee:c7:d3:
f0:fd:f0:f4:ab:20:52:02:1d:3c:09:e9:7e:75:15:7e:2c:e5:
eb:d5:e5:f4:2a:a0:d0:22:4a:7d:db:5c:47:d1:8c:31:7a:00:
53:28:f5:49:38:fc:17:50:a9:8e:10:57:e2:de:d1:7a:d8:54:
22:e8:ae:be:59:01:fd:08:97:52:e0:f8:f1:97:73:68:95:d6:
75:de:a6:15:0d:3d:8a:a3:10:72:5e:80:ab:9e:97:a3:85:aa:
d6:03:1a:62:d0:68:23:95:81:e1:c7:12:b7:6f:16:41:39:4c:
21:b1:9e:7c:1f:89:f0:aa:0a:28:1c:8c:a5:3b:a7:a5:f1:9c:
4d:11:b2:7c:d4:b8:8f:9a:49:b3:b3:e8:70:c1:b9:7b:04:38:
78:9a:89:e7:17:27:f6:52:54:d9:88:d5:62:ef:71:84:b3:b0:
d2:d0:30:aa:2b:b4:4b:c4:8b:84:fe:ce:2f:77:47:ff:15:4f:
92:91:05:c1:2f:2b:c6:5e:49:5d:48:70:3a:bb:3f:66:77:d8:
d9:43:fa:a1:a0:ad:0d:fc:fb:a7:f8:49:76:e7:3b:fe:b3:a2:
31:92:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:05 2025 by rpki-client on console.sobornost.net