Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/KBlH-pBEuDJ9oR7hmRoIHa2Qq8U.roa
File: KBlH-pBEuDJ9oR7hmRoIHa2Qq8U.roa (raw, json)
Hash identifier: BpLtvDsC3YLfzkvqzevIJKavngHyEc7z7bRvIklugMw=
Subject key identifier: 28:19:47:FA:90:44:B8:32:7D:A1:1E:E1:99:1A:08:1D:AD:90:AB:C5
Certificate issuer: /CN=93410b61a8025a526f23bc20024179d322db16ce
Certificate serial: 06C8E53B
Authority key identifier: 93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0ELYagCWlJvI7wgAkF50yLbFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/KBlH-pBEuDJ9oR7hmRoIHa2Qq8U.roa
Signing time: Thu 20 Jan 2022 15:11:51 +0000
ROA not before: Thu 20 Jan 2022 15:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57674
IP address blocks: 62.192.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113829179 (0x6c8e53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93410b61a8025a526f23bc20024179d322db16ce
Validity
Not Before: Jan 20 15:11:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=281947fa9044b8327da11ee1991a081dad90abc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:9a:e3:7e:8e:f2:13:c9:f7:92:04:71:58:
04:bd:c5:48:f4:41:e6:fc:b0:32:67:c2:cb:42:35:
a6:c5:81:6b:c7:18:15:6a:cd:16:13:35:8f:6b:24:
39:a4:9e:15:bd:47:3e:63:ae:d3:7c:50:e1:39:ba:
a6:9d:ac:82:20:a7:ea:8d:2f:81:d8:f7:12:7f:f1:
66:c3:38:e6:81:7e:a1:90:02:d4:08:90:ba:b9:10:
9f:e5:27:ec:96:8c:b4:c6:3f:8d:64:08:8e:b4:3d:
85:b7:c0:ba:35:b3:f6:36:2e:4d:c5:fb:09:aa:e3:
65:aa:5b:eb:40:08:c8:6a:b0:fd:70:4b:7a:39:c7:
e3:8e:ac:01:43:cf:c8:27:56:cf:c2:1c:49:43:b2:
3f:9e:19:e2:89:d2:84:1e:e8:0a:75:0d:c0:04:6b:
24:89:80:ce:b4:59:fc:f6:b2:19:2e:12:6b:e1:32:
e3:36:f0:71:cf:2a:37:73:59:68:76:64:92:14:7e:
ca:75:1d:04:e3:0c:fb:86:8d:f7:98:39:ef:66:fa:
4d:f5:1e:00:f6:04:df:a6:c9:e3:e8:cb:cb:4b:93:
4b:25:55:e5:33:8a:2a:a7:03:ab:54:25:8c:df:be:
b1:87:e5:6d:1f:3b:4c:90:58:89:60:a4:a7:e4:97:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:19:47:FA:90:44:B8:32:7D:A1:1E:E1:99:1A:08:1D:AD:90:AB:C5
X509v3 Authority Key Identifier:
keyid:93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0ELYagCWlJvI7wgAkF50yLbFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/KBlH-pBEuDJ9oR7hmRoIHa2Qq8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/k0ELYagCWlJvI7wgAkF50yLbFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.168.0/24
Signature Algorithm: sha256WithRSAEncryption
70:22:37:dc:cc:ab:16:af:e3:f4:df:df:e3:cf:50:71:ee:e9:
b0:fd:05:39:9d:4c:b5:7b:1d:11:6e:c7:5a:00:fc:fb:1c:23:
dc:18:ab:c6:e0:81:59:01:b5:45:79:a9:88:a9:8d:ba:3f:fc:
40:62:78:3e:84:55:22:2c:2b:b6:f0:fb:dc:a4:e7:b4:62:e9:
4a:93:51:b7:dc:06:26:58:0f:69:91:ac:3b:3b:62:6a:ea:fe:
ce:cc:c7:8a:7b:52:27:f8:55:12:bb:a4:d4:a2:ff:7a:1d:9b:
26:82:69:93:2c:0b:f0:86:31:c0:04:60:d3:2a:c1:21:a3:76:
3a:6c:03:39:11:fb:fe:85:51:96:55:7c:f6:b2:20:44:29:57:
e5:09:ff:07:59:e9:07:69:be:06:e0:2a:fb:82:e7:5b:95:54:
7c:92:ed:7d:8d:36:1b:13:46:02:52:cf:86:7c:49:10:28:d4:
55:e4:f7:f4:b7:db:22:3b:e3:73:f0:c9:b3:98:13:52:95:79:
2f:5f:67:96:f9:9e:68:51:c9:c9:fa:55:d5:ed:41:2a:d1:f9:
c4:4d:74:d2:69:af:49:50:a5:5b:14:74:38:48:52:8f:a9:11:
b9:ef:35:2c:4b:0c:92:87:c8:6b:c4:91:88:fb:39:d1:7a:0a:
0f:90:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:35:04 2025 by rpki-client