Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/r00HzRw-RqO0vBCmPGerjiL7MBo.roa
File: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (raw, json)
Hash identifier: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=
Subject key identifier: AF:4D:07:CD:1C:3E:46:A3:B4:BC:10:A6:3C:67:AB:8E:22:FB:30:1A
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 0194228DF6919BC35C48FD79F45AE752D96A
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/r00HzRw-RqO0vBCmPGerjiL7MBo.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206469
IP address blocks: 62.106.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f6:91:9b:c3:5c:48:fd:79:f4:5a:e7:52:d9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af4d07cd1c3e46a3b4bc10a63c67ab8e22fb301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:fb:5d:6f:16:b1:ef:86:cc:59:1d:dd:dd:
29:d5:ed:d9:bd:96:46:a3:64:05:ca:ea:07:b1:19:
a8:a9:aa:78:d3:77:fa:bd:03:82:7a:4c:94:3b:f3:
53:c1:31:fb:09:e2:f6:d7:bf:4f:6c:f8:6d:ae:fc:
44:dc:2b:73:25:fc:47:b5:c0:df:15:08:e2:29:eb:
74:a8:76:b1:f1:f9:07:28:70:ef:8b:50:68:af:ec:
53:b3:44:31:dc:d1:c9:06:06:7a:b0:8a:ba:f8:5f:
80:41:a1:f5:9d:0b:04:c6:b6:f1:57:63:2d:16:b4:
2e:d7:43:b6:0c:e3:dc:fb:a0:4b:91:1d:6d:1e:8a:
0f:70:32:84:86:e0:bd:ee:17:91:48:7c:a5:35:67:
60:62:92:2e:62:f5:bf:5c:68:de:15:ee:cc:fd:bc:
c9:91:2f:d4:9c:b1:31:98:ef:87:da:0b:b0:f7:34:
66:94:04:dc:b4:99:41:5b:cf:8e:06:19:e2:da:39:
be:3b:28:31:a9:04:55:c2:a4:1d:da:8f:a8:72:a6:
51:6d:74:a9:10:dd:ac:3c:30:44:7f:e4:32:33:41:
a5:8e:83:63:1e:74:a4:8f:f6:ba:5e:d7:fa:96:60:
7f:71:13:11:1e:95:83:3a:dc:ae:88:2a:b5:a3:d6:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4D:07:CD:1C:3E:46:A3:B4:BC:10:A6:3C:67:AB:8E:22:FB:30:1A
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/r00HzRw-RqO0vBCmPGerjiL7MBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.71.0/24
Signature Algorithm: sha256WithRSAEncryption
38:89:d6:5b:69:e3:c1:74:df:0b:fe:3e:14:11:2d:3e:f3:a4:
63:c2:2f:1c:e5:e8:c6:b3:12:0b:1c:26:bf:42:89:c9:07:80:
65:e6:a4:16:a2:14:29:c5:d2:4a:3b:56:f9:af:9f:f7:d3:ce:
c0:1d:7e:32:1e:44:7c:27:bd:64:fd:07:61:79:c8:1f:d9:aa:
bd:c5:35:64:d2:ed:de:30:c7:9d:aa:e1:8b:1e:f5:3e:c1:a8:
5a:ed:fe:53:d0:ce:a5:47:e7:4f:42:68:2e:80:aa:32:5b:31:
b4:e7:00:e3:4b:cd:88:0d:be:22:ca:ee:63:d5:3b:66:b1:4d:
0e:39:cb:96:a7:21:1d:0d:ae:e2:07:aa:4e:43:29:8b:84:8c:
75:5e:28:13:96:b7:4d:e6:e5:bc:ce:9d:15:66:b4:a0:c5:a6:
9d:04:4e:5d:f4:ec:2e:a7:5f:05:a6:87:6a:8c:dd:0b:33:7e:
f7:bb:8d:95:e8:0d:df:e1:54:65:a6:9f:07:e0:52:5e:bc:12:
28:ea:35:e1:29:9d:98:b9:2f:4d:f2:b5:04:6f:da:6c:34:83:
0b:1a:49:51:03:f5:b8:1e:3d:f2:76:3f:85:77:00:35:20:cb:
3f:fd:3d:ce:78:09:71:48:26:28:b9:79:ef:23:0e:8b:bf:db:
cb:b2:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net