Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/aBObzcOshAw5DJJHtQY7dCBoBb0.roa
File: aBObzcOshAw5DJJHtQY7dCBoBb0.roa (raw, json)
Hash identifier: jsCeJcPgUCzlwkXAVWfjMfZZKF1/HOpOehUmmA/UIrU=
Subject key identifier: 68:13:9B:CD:C3:AC:84:0C:39:0C:92:47:B5:06:3B:74:20:68:05:BD
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 0194221F9170D4A392E6570C671D70F27EA4
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/aBObzcOshAw5DJJHtQY7dCBoBb0.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15437
IP address blocks: 62.220.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:91:70:d4:a3:92:e6:57:0c:67:1d:70:f2:7e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68139bcdc3ac840c390c9247b5063b74206805bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:39:6c:f7:d3:13:13:a9:21:43:53:44:0c:
13:11:6f:5b:91:71:9d:89:6a:b4:5b:1a:67:d4:93:
77:84:06:b0:ab:7c:28:d8:10:cf:f7:18:97:20:4c:
58:57:26:ab:0f:f4:a2:b9:ee:ee:8f:f7:7d:cb:90:
e2:4a:a5:ed:8c:80:87:ca:7b:fe:10:88:e4:a4:7d:
3e:90:4e:20:02:05:52:fc:f2:41:15:a3:67:a9:0b:
14:65:ae:73:97:1d:41:80:63:f4:fc:c2:fc:8f:ee:
41:d9:a0:83:7a:da:43:ee:c4:5e:ed:88:2b:d0:90:
1a:1b:9f:fe:98:2f:88:c6:77:b9:9e:35:49:a9:e8:
9a:14:4b:d3:22:fa:ec:da:70:e3:ba:a8:35:fd:1a:
2a:e1:bc:07:2d:6f:88:27:67:b3:f2:51:76:b3:49:
b6:91:e6:b6:d2:a3:d8:3a:82:3f:94:b5:14:d0:ef:
36:83:37:ee:c4:68:08:7e:39:1f:02:45:22:36:dd:
d2:17:96:19:2b:d0:c5:74:77:6d:69:ab:45:04:c1:
d5:4f:28:e4:71:35:3e:7b:93:9d:88:22:9d:68:68:
3e:e3:86:61:a7:eb:97:49:1c:3e:e6:c1:6a:70:de:
47:a9:f0:0c:91:ae:5a:7c:c2:40:84:f4:53:44:f5:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:13:9B:CD:C3:AC:84:0C:39:0C:92:47:B5:06:3B:74:20:68:05:BD
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/aBObzcOshAw5DJJHtQY7dCBoBb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.64.0/20
Signature Algorithm: sha256WithRSAEncryption
12:0a:7c:6e:94:5b:19:d3:46:b9:09:dc:3d:26:a8:62:c5:cb:
0c:31:f4:a4:93:89:22:8d:8b:bd:b8:c0:0b:9c:3e:4f:34:82:
30:94:88:5a:8f:65:64:c1:98:44:d3:7d:6a:16:39:99:a9:a8:
09:8a:24:30:60:21:d5:93:5f:5f:e4:48:ca:6e:55:9b:f7:75:
e7:0c:39:fb:58:48:14:39:9b:41:d8:ba:4f:35:39:a1:bc:f1:
6d:37:98:8e:0d:4e:4f:9d:0d:48:87:2c:3e:82:12:21:c0:24:
b5:5b:c9:3c:69:8f:6f:6f:2f:02:96:95:65:1d:38:77:9d:0f:
67:ef:8c:dc:d4:38:23:42:dc:03:c1:9c:46:9b:fd:0f:00:e4:
13:50:8c:39:a0:f2:71:b1:3e:30:81:b4:16:d3:99:a9:fa:40:
1b:ea:3d:0a:71:07:64:d0:1b:3e:e6:ad:b7:4f:ee:39:d8:81:
d6:a6:a5:e4:b6:2d:e8:44:fc:0f:24:56:f0:03:f7:57:71:ec:
30:2a:30:06:92:78:b8:4e:e6:1d:85:19:68:16:4e:7d:30:39:
21:d5:68:a9:d0:93:06:e5:c6:0d:1d:07:80:ca:fa:f9:40:db:
ae:5b:b1:92:24:89:2d:5e:8b:a6:f7:0a:7d:b5:63:5f:cf:c4:
41:e0:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:28 2025 by rpki-client on console.sobornost.net