Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/DUD5tEp0B51Vf84fwyHGaG3r_bE.roa
File: DUD5tEp0B51Vf84fwyHGaG3r_bE.roa (raw, json)
Hash identifier: 8DCcwFCeSl+vO3g5PjAb1wLRUgeuuGIiQ0gwSYwHtWQ=
Subject key identifier: 0D:40:F9:B4:4A:74:07:9D:55:7F:CE:1F:C3:21:C6:68:6D:EB:FD:B1
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424454DC4D4BD4F45765BF5400500C3C1
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/DUD5tEp0B51Vf84fwyHGaG3r_bE.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8947
IP address blocks: 62.244.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4d:c4:d4:bd:4f:45:76:5b:f5:40:05:00:c3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d40f9b44a74079d557fce1fc321c6686debfdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:f0:bf:fe:60:bb:30:c5:6d:5e:0b:42:e0:
d4:5e:1c:db:94:f0:89:68:e3:a9:36:62:e2:57:1d:
89:17:98:e7:58:3a:4f:2e:8b:05:f7:5d:d5:f3:1b:
1a:b1:d0:d7:6a:ea:be:f2:61:c4:a3:da:62:42:e8:
5f:19:f9:8d:18:d2:e4:b3:73:1a:63:65:10:74:2e:
8c:83:af:13:95:b0:90:cf:ed:ef:36:4d:84:f0:6d:
b6:7e:6e:21:47:eb:0b:58:70:25:34:c7:c4:82:44:
21:bd:27:10:a9:b8:07:53:5d:46:26:2f:26:fb:c0:
66:e2:a6:24:9d:fd:a6:6b:e4:05:5e:0b:90:27:e0:
51:a3:cc:5c:1d:cf:07:f1:b3:14:08:f0:92:70:64:
63:a5:ea:61:bf:f0:e9:4e:f2:05:bf:cc:59:d7:eb:
52:b6:76:8c:70:4f:b5:ad:d5:48:c2:58:cb:ab:dd:
1d:04:81:00:20:e1:14:ed:47:23:26:02:95:4e:e8:
b6:5e:88:ab:cb:9e:93:9b:87:e9:29:87:cc:c3:43:
cc:fc:47:12:86:e3:b3:01:c3:86:98:b5:44:8b:ce:
62:04:b6:20:11:6e:d2:7b:5c:cf:0b:c8:db:9b:d4:
26:f5:00:94:19:10:69:6b:8e:bd:7e:0d:aa:84:ca:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:40:F9:B4:4A:74:07:9D:55:7F:CE:1F:C3:21:C6:68:6D:EB:FD:B1
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/DUD5tEp0B51Vf84fwyHGaG3r_bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:73:ba:1b:10:4f:c3:36:f3:45:1d:9e:71:1f:88:b8:8d:bd:
05:84:d9:6a:0f:ca:cf:d3:15:69:38:88:04:5a:81:de:40:45:
b1:c1:7a:64:0f:42:63:24:9b:07:14:2b:46:8f:0f:f9:d4:d6:
f5:b7:d3:1f:f8:58:2b:d8:96:af:b5:66:4b:cf:1f:2e:c2:ad:
4b:14:1c:a5:7e:30:56:f8:9c:b5:81:93:8d:47:39:c0:68:ad:
8b:86:6f:d8:41:1c:e3:77:ee:dc:2c:cd:02:12:5f:22:fc:9b:
1b:6f:d2:45:cc:a5:97:5c:00:bc:b7:f1:2c:d9:4f:61:28:6f:
9c:a7:76:e5:89:6e:97:b3:7b:b5:a9:c2:df:65:65:b9:95:8d:
8f:f3:8e:71:7d:28:10:20:8f:22:12:b0:6c:14:cb:d6:78:66:
8f:9c:db:32:88:67:f4:e3:d7:a8:55:66:87:65:ec:1d:04:85:
f3:69:45:a8:9d:23:1d:8e:23:ea:85:c6:f9:61:13:e5:76:4e:
47:fc:75:96:95:b6:b3:24:13:f2:05:c5:ec:60:0d:80:66:8d:
f3:0d:f5:0f:50:f4:b1:0d:aa:a4:36:ea:f2:3b:62:86:0a:cc:
ff:e1:b8:6e:42:81:ca:f9:b1:3e:8d:95:00:9c:20:75:cf:28:
d6:63:b1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net