Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa
File: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (raw, json)
Hash identifier: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=
Subject key identifier: 4B:B1:7C:8B:5C:84:7C:D3:05:83:7C:29:78:E5:B4:F8:56:41:B7:08
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01941FFA49939C53E8A08FE81EDFC17354A0
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12713
IP address blocks: 62.75.1.0/24 maxlen: 24
62.75.2.0/24 maxlen: 24
62.75.3.0/24 maxlen: 24
62.75.8.0/24 maxlen: 24
62.75.10.0/24 maxlen: 24
62.75.13.0/24 maxlen: 24
62.75.15.0/24 maxlen: 24
62.75.16.0/23 maxlen: 23
62.75.18.0/23 maxlen: 23
62.75.20.0/24 maxlen: 24
62.75.21.0/24 maxlen: 24
62.75.22.0/24 maxlen: 24
62.75.23.0/24 maxlen: 24
62.75.24.0/23 maxlen: 23
62.75.52.0/24 maxlen: 24
62.75.54.0/24 maxlen: 24
62.75.58.0/24 maxlen: 24
62.75.62.0/24 maxlen: 24
62.75.64.0/24 maxlen: 24
62.75.107.0/24 maxlen: 24
62.75.108.0/24 maxlen: 24
2a00:1cb8:1::/48 maxlen: 48
2a00:1cb8:2::/48 maxlen: 48
2a00:1cb8:2:1::/64 maxlen: 64
2a00:1cb8:2:2::/64 maxlen: 64
2a00:1cb8:2:3::/64 maxlen: 64
2a00:1cb8:2:6::/64 maxlen: 64
2a00:1cb8:2:7::/64 maxlen: 64
2a00:1cb8:2:8::/64 maxlen: 64
2a00:1cb8:2:a::/64 maxlen: 64
2a00:1cb8:2:b::/64 maxlen: 64
2a00:1cb8:2:c::/64 maxlen: 64
2a00:1cb8:2:d::/64 maxlen: 64
2a00:1cb8:2000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:49:93:9c:53:e8:a0:8f:e8:1e:df:c1:73:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bb17c8b5c847cd305837c2978e5b4f85641b708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:2d:9c:6e:91:43:7a:a3:f5:fa:4a:5b:6c:
ce:c5:ac:2f:03:09:c5:8a:e9:d0:77:31:39:e4:13:
2a:30:ab:86:13:41:06:97:1a:05:53:99:ee:e3:b8:
89:09:2a:33:37:9d:7f:04:c0:08:0a:fd:11:ea:0d:
70:55:a2:35:bd:38:3d:e6:38:85:60:75:08:74:fd:
e5:a1:96:49:9d:7f:46:8c:45:84:4c:17:94:2d:e3:
aa:5f:94:15:30:15:86:7d:34:d6:36:5b:52:5f:b6:
08:01:51:09:91:0e:a5:1a:49:99:55:93:31:72:83:
63:51:18:c8:c9:e2:97:e6:ac:51:ca:79:0d:a7:a4:
2c:9d:a7:7c:29:6d:03:36:18:9c:f6:18:91:4a:71:
85:4f:54:80:90:1c:bc:ed:26:a4:ca:f6:fb:7b:4a:
c9:ff:1a:fd:65:2c:09:5d:d7:ad:cb:68:48:08:ca:
7a:14:c9:f6:31:95:57:42:44:ee:11:99:88:1a:59:
08:ce:fb:bf:3e:ab:55:f7:2f:23:68:5b:37:7f:f6:
9a:b5:c4:33:96:21:e2:36:ed:91:23:7a:62:58:ed:
2a:08:4d:9c:e1:98:4f:7e:26:57:e5:00:bc:1e:f7:
a9:7e:01:ba:2e:b9:2a:53:c8:0f:dd:4e:2a:62:cf:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B1:7C:8B:5C:84:7C:D3:05:83:7C:29:78:E5:B4:F8:56:41:B7:08
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.75.1.0-62.75.3.255
62.75.8.0/24
62.75.10.0/24
62.75.13.0/24
62.75.15.0-62.75.25.255
62.75.52.0/24
62.75.54.0/24
62.75.58.0/24
62.75.62.0/24
62.75.64.0/24
62.75.107.0-62.75.108.255
IPv6:
2a00:1cb8:1::-2a00:1cb8:2:ffff:ffff:ffff:ffff:ffff
2a00:1cb8:2000::/35
Signature Algorithm: sha256WithRSAEncryption
6d:80:54:85:cf:4e:bb:37:1b:00:1d:7c:0b:c6:04:d5:09:ea:
d8:74:fe:0a:b9:d2:67:22:19:7c:19:90:23:2a:d1:db:cb:93:
a3:28:d3:86:2c:99:28:56:f5:4e:61:8f:b2:a9:c5:ae:86:3c:
eb:4d:73:cc:97:05:8e:76:1e:e6:8e:61:6c:fa:7d:2d:1d:ab:
dc:95:23:62:cc:e4:ea:1c:99:86:42:aa:a7:bf:e0:9c:d6:b0:
8d:2c:00:aa:fd:14:f6:2c:0f:1c:c1:38:55:ba:f0:fe:14:e7:
38:eb:3f:b5:82:f3:c4:1e:aa:28:3f:60:70:80:b1:92:bd:1c:
ec:9b:ff:e7:c1:9f:ce:07:0f:8b:57:24:5b:d4:f9:08:17:8f:
14:1f:5d:a0:51:12:a8:62:ec:d4:9c:e1:6d:1d:96:d5:b7:26:
14:70:19:3c:0a:17:bd:e6:3c:4b:0a:00:c7:f5:9f:e8:4a:7d:
06:25:a3:33:bb:bd:36:7b:01:7c:bc:42:f3:af:12:13:f3:d6:
63:5b:b3:41:a9:58:37:6d:cc:67:95:bb:6f:0e:8e:1f:54:73:
ec:52:ed:ce:7c:27:ff:36:25:0b:e0:ea:35:d8:81:41:60:d5:
69:fb:e0:4f:fa:c4:ba:40:9c:a8:75:fd:a3:3e:6f:67:6d:39:
9d:55:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net