Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/w1-75ZX9HBx8AUrVwUOKynI5k3I.roa
File: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (raw, json)
Hash identifier: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=
Subject key identifier: C3:5F:BB:E5:95:FD:1C:1C:7C:01:4A:D5:C1:43:8A:CA:72:39:93:72
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019423D74F1D9E4C069E8705C91E7A726FD3
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/w1-75ZX9HBx8AUrVwUOKynI5k3I.roa
Signing time: Wed 01 Jan 2025 21:48:20 +0000
ROA not before: Wed 01 Jan 2025 21:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56924
IP address blocks: 62.174.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:4f:1d:9e:4c:06:9e:87:05:c9:1e:7a:72:6f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 21:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c35fbbe595fd1c1c7c014ad5c1438aca72399372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:d7:68:82:92:a5:4d:9d:97:a5:a2:8b:75:
79:84:d4:fe:3a:4d:b1:21:c0:a8:14:3e:6b:6b:41:
b5:20:a1:07:a2:40:51:f0:4e:69:27:4d:84:38:8e:
b1:e8:63:d7:db:a3:30:f7:ea:f8:70:8c:c2:e3:17:
32:8d:06:89:e3:fe:6b:d0:84:27:77:7b:3b:4a:ba:
ee:6f:d8:72:b5:33:ce:f7:70:a8:07:bd:04:51:97:
17:27:3b:32:0f:7f:03:17:aa:8c:80:7f:08:f8:d0:
d0:21:90:5f:2d:2b:90:ac:55:5c:fd:7e:e9:ec:2e:
4a:84:2f:5d:b6:e5:e9:4e:7a:8c:35:5f:24:16:a2:
d4:96:cf:a8:45:63:93:6d:07:b5:74:ba:ca:b2:79:
8d:ae:57:95:46:37:be:05:65:3b:85:d0:f4:6b:87:
a2:da:d4:e9:6b:4c:e5:2e:91:22:2e:5f:41:92:e5:
26:ea:54:4d:2c:7d:02:4b:81:c4:ec:ef:66:aa:bd:
ce:95:fa:3d:46:14:51:f5:2c:3e:53:e2:7d:cc:ba:
92:46:e0:c1:a6:74:98:4a:cf:20:8a:b3:b1:1a:d7:
a6:c4:da:a5:c2:a5:c4:ea:ef:9c:a3:37:43:9e:d3:
eb:4a:05:fb:20:7b:46:50:6c:2f:8e:48:94:ea:d6:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5F:BB:E5:95:FD:1C:1C:7C:01:4A:D5:C1:43:8A:CA:72:39:93:72
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/w1-75ZX9HBx8AUrVwUOKynI5k3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.174.87.0/24
Signature Algorithm: sha256WithRSAEncryption
98:0b:a7:47:7c:7a:b5:85:29:0f:ea:e7:6b:bb:cd:f4:fd:99:
39:f1:bf:7a:c9:e5:96:b5:d4:9f:14:1a:d4:f0:4b:a9:fd:b8:
cf:61:3a:5a:c2:65:6e:8e:4d:da:0c:30:ab:f8:ae:e3:15:15:
d3:01:48:57:e5:e0:68:8b:73:a3:b6:3e:12:f4:6f:7b:b4:c0:
db:16:4e:67:a9:3b:34:9e:88:52:b5:1f:6f:16:da:2a:84:03:
75:42:91:6b:db:18:8f:57:84:68:83:38:70:7e:3f:18:b4:03:
d1:b0:70:c0:c7:5f:53:3c:8e:d8:93:80:e3:02:b1:44:7e:83:
f1:75:4c:5c:83:19:67:9c:4b:be:bc:20:21:66:5d:59:b9:ac:
17:62:be:52:0e:d0:a2:a3:40:98:eb:eb:2b:39:b7:ed:bf:f5:
36:25:1d:1c:81:08:e0:83:ab:59:d5:db:83:6d:b9:b1:68:cc:
8b:b7:ee:56:86:56:76:8a:27:aa:ff:d3:34:51:77:17:1c:8d:
f4:99:98:62:81:06:6f:9b:67:7c:1f:8c:b0:78:0a:f3:c1:13:
62:50:fd:cb:e1:2b:c6:8b:23:88:f6:dc:70:67:ad:07:f1:46:
be:e7:c3:e2:bc:b2:4b:fa:b1:f9:de:20:53:eb:fa:26:eb:03:
64:77:74:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net