Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa
File: CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa (raw, json)
Hash identifier: 044BEtCX+z6xTX9a6h7LlWK6XDMZtx+8nHOMokajsWY=
Subject key identifier: 09:E6:70:98:69:A1:98:F5:8F:6F:83:18:1E:CE:54:9B:2B:F6:BC:DF
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019428278D95E15B86B60AAE67C055F1D322
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa
Signing time: Thu 02 Jan 2025 17:54:28 +0000
ROA not before: Thu 02 Jan 2025 17:54:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31141
IP address blocks: 62.192.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:8d:95:e1:5b:86:b6:0a:ae:67:c0:55:f1:d3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09e6709869a198f58f6f83181ece549b2bf6bcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:a9:9a:11:55:53:b0:44:d7:4c:d0:d7:8f:
c8:eb:7e:6a:e5:ce:fe:e8:e7:b8:db:17:a0:ad:4d:
cb:2c:84:a5:a7:a7:b2:36:dd:48:36:64:a3:90:90:
b4:cf:4e:3f:ec:9a:e4:bd:94:54:1f:d5:db:e9:7b:
f7:af:14:ee:74:61:2c:2f:6e:aa:c8:38:7c:a8:da:
1f:55:7c:b9:11:bf:89:ca:a1:3a:b7:82:62:1f:f7:
c9:b9:22:04:d2:eb:ae:f5:76:47:ab:a3:13:43:12:
37:23:30:d6:25:1c:bd:12:82:18:d9:ea:e5:60:d0:
7a:da:67:a7:73:a2:c9:05:d9:a1:1e:1f:36:38:84:
ee:ee:7b:0b:9a:f4:0c:fc:76:8d:df:91:b2:42:b9:
7f:62:07:40:1e:df:ee:34:fc:2a:42:14:09:35:40:
22:0a:db:21:58:61:2e:31:44:02:49:ca:4c:c2:e1:
b4:87:e1:cb:8e:7f:43:82:a5:55:6c:93:eb:c7:a8:
74:f7:cb:bb:57:b4:dd:ea:85:34:d9:e6:e1:ed:44:
bd:51:05:68:d2:9a:70:d6:e8:1f:68:d6:55:aa:f2:
4b:39:83:4e:bd:4f:d3:21:15:9b:8f:de:0c:9a:c6:
c9:a3:82:5d:46:50:3a:d2:09:cc:fd:37:21:16:aa:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:70:98:69:A1:98:F5:8F:6F:83:18:1E:CE:54:9B:2B:F6:BC:DF
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.17.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8b:31:0c:56:a4:3b:e9:7c:67:01:d1:3e:14:d2:80:73:3f:
86:99:78:e4:03:12:0b:09:16:cb:96:9c:d3:91:45:37:ae:ab:
86:4f:da:16:31:c0:90:7e:f2:7c:be:10:21:1d:7d:b7:05:e0:
1c:e4:c5:7b:f2:19:45:8f:b2:01:7f:75:e3:bd:bd:28:0f:ec:
66:a1:3d:bc:1e:ae:c2:b3:b3:89:c9:ea:91:db:73:21:7b:60:
bd:99:32:f7:2f:08:2c:28:f7:e8:ba:ed:4c:a4:0d:8d:ee:73:
aa:72:c0:f5:51:25:46:d8:a9:46:08:e1:5e:2a:ab:0a:ca:74:
47:e7:2e:b7:1b:1d:dd:3c:3b:41:06:76:b7:f1:7f:02:d6:c5:
fa:c5:01:59:4a:73:d8:3d:e5:ac:d2:37:72:f6:39:89:1d:93:
81:66:16:93:3b:d0:5b:ee:a7:a3:f2:d0:e7:6a:66:ca:11:7d:
35:a6:0d:b1:6f:a1:6e:89:fd:c6:c8:d7:9a:67:75:47:85:1d:
a0:a6:57:84:64:b6:19:86:c1:ae:d4:ee:45:53:05:9c:0d:85:
86:92:71:f2:93:64:48:a6:d3:3f:59:54:24:37:4a:a7:d4:35:
cc:48:31:06:5c:12:d8:17:0e:54:8e:c2:43:07:ff:89:9b:fc:
c8:98:ae:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ42V4VuGtgquZ8BV8dMiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjUwMTAyMTc1NDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWU2NzA5ODY5YTE5OGY1OGY2ZjgzMTgxZWNlNTQ5YjJiZjZiY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRmpmhFVU7BE10zQ14/I635q5c7+
6Oe42xegrU3LLISlp6eyNt1INmSjkJC0z04/7JrkvZRUH9Xb6Xv3rxTudGEsL26q
yDh8qNofVXy5Eb+JyqE6t4JiH/fJuSIE0uuu9XZHq6MTQxI3IzDWJRy9EoIY2erl
YNB62menc6LJBdmhHh82OITu7nsLmvQM/HaN35GyQrl/YgdAHt/uNPwqQhQJNUAi
CtshWGEuMUQCScpMwuG0h+HLjn9DgqVVbJPrx6h098u7V7Td6oU02ebh7US9UQVo
0ppw1ugfaNZVqvJLOYNOvU/TIRWbj94MmsbJo4JdRlA60gnM/TchFqqOOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnmcJhpoZj1j2+DGB7OVJsr9rzfMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvQ2Vad21HbWhtUFdQYjRNWUhzNVVteXYydk44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsARMA0G
CSqGSIb3DQEBCwUAA4IBAQAGizEMVqQ76XxnAdE+FNKAcz+GmXjkAxILCRbLlpzT
kUU3rquGT9oWMcCQfvJ8vhAhHX23BeAc5MV78hlFj7IBf3Xjvb0oD+xmoT28Hq7C
s7OJyeqR23Mhe2C9mTL3LwgsKPfouu1MpA2N7nOqcsD1USVG2KlGCOFeKqsKynRH
5y63Gx3dPDtBBna38X8C1sX6xQFZSnPYPeWs0jdy9jmJHZOBZhaTO9Bb7qej8tDn
ambKEX01pg2xb6Fuif3GyNeaZ3VHhR2gpleEZLYZhsGu1O5FUwWcDYWGknHyk2RI
ptM/WVQkN0qn1DXMSDEGXBLYFw5UjsJDB/+Jm/zImK54
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:02 2025 by rpki-client