Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/2J5UnUMvq-qGfYNs8HJ4cKWq4lo.roa
File: 2J5UnUMvq-qGfYNs8HJ4cKWq4lo.roa (raw, json)
Hash identifier: TJuYz3grJuZFdZIJROFKgvsBfERD5fVdt4FQiphkrtY=
Subject key identifier: D8:9E:54:9D:43:2F:AB:EA:86:7D:83:6C:F0:72:78:70:A5:AA:E2:5A
Certificate issuer: /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial: 0AC5CD
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/2J5UnUMvq-qGfYNs8HJ4cKWq4lo.roa
Signing time: Fri 25 Mar 2022 06:39:22 +0000
ROA not before: Fri 25 Mar 2022 06:39:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705997 (0xac5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Validity
Not Before: Mar 25 06:39:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d89e549d432fabea867d836cf0727870a5aae25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:26:42:64:f7:94:52:a3:31:41:10:6d:1d:
c2:75:a0:3e:39:42:11:30:f6:a7:d7:77:4a:20:ac:
83:b0:58:5e:aa:8d:13:d6:8e:57:e7:3f:1f:2e:19:
6b:fc:82:31:b0:6e:ed:5b:b3:2b:b8:cc:11:a5:4f:
42:9e:b5:a2:46:6d:36:2a:49:99:04:80:f3:07:7b:
b6:f2:0c:32:ee:43:45:3e:82:61:9c:49:fc:b3:69:
37:1a:81:a5:23:ff:f4:75:c6:a2:6a:5e:6c:58:81:
55:cf:aa:5d:4f:2b:7f:48:45:af:3e:53:a4:70:09:
89:50:6c:e0:9e:0a:08:fd:fb:dd:5b:73:7e:02:39:
7d:99:73:96:2e:28:19:ec:ce:d3:11:c8:ec:2e:15:
44:53:77:c0:50:77:7c:a1:e9:48:df:c8:c6:38:6f:
3d:33:e7:4d:0d:89:42:bd:64:7d:24:29:f5:02:22:
29:98:4b:19:dc:27:e0:ee:d6:33:d5:2b:ed:d7:57:
bf:7e:ea:fb:84:c1:af:42:d6:e2:11:7e:8f:a2:e6:
cd:e2:0c:e7:fd:15:ec:9b:29:29:40:18:90:bd:95:
37:0f:d3:af:64:58:92:2b:4e:0d:30:d4:76:87:1f:
12:c0:fc:2b:5b:76:ff:15:6e:e6:4c:fb:28:e1:56:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:54:9D:43:2F:AB:EA:86:7D:83:6C:F0:72:78:70:A5:AA:E2:5A
X509v3 Authority Key Identifier:
keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/2J5UnUMvq-qGfYNs8HJ4cKWq4lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a5:5b:ba:be:37:f2:a1:1f:44:f2:65:8d:e4:b1:c4:8c:0c:
38:df:19:93:fb:c7:f2:b3:61:32:62:d8:1a:4a:43:5b:ac:51:
bc:7a:55:0d:42:12:e4:d5:cf:ed:43:ea:e7:8e:59:52:e6:7d:
ca:24:09:58:94:6f:59:2a:1f:59:66:0c:e8:72:e4:cd:67:71:
6d:7f:ac:13:40:44:8e:56:46:39:22:92:a9:f9:c8:6e:8a:92:
1f:7e:96:3d:5d:d4:79:c6:44:42:ee:01:40:83:b7:5d:2e:23:
c9:97:58:a6:bf:3a:47:73:c7:27:69:d4:69:48:0b:87:83:cf:
25:86:59:ca:2e:0e:55:78:e6:dd:fc:1f:7b:99:d0:42:b7:52:
20:ca:a9:0f:86:9b:c3:00:17:e5:26:3f:96:49:1c:e1:db:8c:
8c:4c:b6:a7:26:48:1e:97:63:10:4c:f1:33:1a:87:6e:c5:cb:
ec:61:a2:7c:cb:48:9f:45:c9:93:fe:e4:fd:af:76:80:15:ad:
bb:1a:7e:85:3c:67:6a:03:7b:d6:cb:a3:f9:b0:b2:c5:ba:e0:
4d:17:4e:ad:ef:17:08:5e:c3:82:f7:34:e2:96:f5:f3:0d:c6:
0b:7b:fd:81:8c:31:a8:eb:cd:09:a9:c5:72:76:fa:8e:55:40:
ad:1c:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:00 2025 by rpki-client