Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/YMwfjFyJhtT0U14aztT4LSJrnYg.roa
File: YMwfjFyJhtT0U14aztT4LSJrnYg.roa (raw, json)
Hash identifier: 2CRE7RMFdybnsG8+L41xpEiIUUSFdqGOs2pjFoKYXcM=
Subject key identifier: 60:CC:1F:8C:5C:89:86:D4:F4:53:5E:1A:CE:D4:F8:2D:22:6B:9D:88
Certificate issuer: /CN=93410b61a8025a526f23bc20024179d322db16ce
Certificate serial: 06C09245
Authority key identifier: 93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0ELYagCWlJvI7wgAkF50yLbFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/YMwfjFyJhtT0U14aztT4LSJrnYg.roa
Signing time: Mon 17 Jan 2022 15:01:29 +0000
ROA not before: Mon 17 Jan 2022 15:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397373
IP address blocks: 62.192.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113283653 (0x6c09245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93410b61a8025a526f23bc20024179d322db16ce
Validity
Not Before: Jan 17 15:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60cc1f8c5c8986d4f4535e1aced4f82d226b9d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:5f:75:da:60:95:c1:d5:10:ba:c9:d6:e5:
52:1c:3d:31:6c:89:d2:47:38:50:5b:b0:d2:ff:75:
fd:e2:a7:61:65:a2:eb:df:f4:6c:4b:f8:60:aa:d8:
e0:d8:ce:be:0b:a3:6a:03:16:c0:31:4b:5f:ef:94:
8b:a4:a5:bf:03:b5:31:bd:61:74:77:4c:f6:31:75:
8f:89:57:cc:01:91:8f:8b:4a:3e:b4:1f:55:69:5b:
d7:c4:93:4b:68:b4:ea:56:ee:b5:84:98:e5:36:56:
fd:ff:d3:61:77:94:45:c6:98:6f:df:6f:0e:90:18:
19:64:95:40:6f:28:d1:f2:7f:38:d6:d9:59:cd:3c:
a8:8d:48:2f:40:d8:f2:4a:3a:e1:4f:9d:01:52:e1:
d9:5d:ad:fa:f9:cd:f3:d2:42:75:ed:ab:9b:31:d5:
05:ce:51:19:24:6e:de:e3:74:14:fc:7c:3a:17:eb:
88:c3:b0:81:9d:9a:6f:6f:67:2f:d2:0d:34:08:f2:
0b:95:41:06:b9:ae:7c:ab:a0:3b:b6:17:f9:49:e9:
35:9e:43:92:64:0b:86:2a:d4:a2:15:10:f5:55:0e:
de:ce:f4:f7:61:aa:ca:a9:0f:a3:c9:fc:92:e7:77:
a5:13:e9:75:8f:bd:20:55:3e:e4:0d:33:20:63:4c:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CC:1F:8C:5C:89:86:D4:F4:53:5E:1A:CE:D4:F8:2D:22:6B:9D:88
X509v3 Authority Key Identifier:
keyid:93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0ELYagCWlJvI7wgAkF50yLbFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/YMwfjFyJhtT0U14aztT4LSJrnYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/k0ELYagCWlJvI7wgAkF50yLbFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.170.0/23
Signature Algorithm: sha256WithRSAEncryption
10:fb:f6:e4:e4:f2:39:0c:86:96:45:b1:c6:27:b5:d4:dc:3c:
d4:14:1e:35:aa:a6:76:bc:80:6c:11:65:48:4f:36:d4:ed:f9:
be:67:73:b1:b0:4b:5d:79:b8:41:27:97:2e:92:34:93:03:30:
39:a8:e3:56:65:ad:3e:87:71:30:99:8d:e2:08:3b:d0:3e:7e:
a0:a5:8d:3c:5c:73:73:a1:91:50:2b:9d:0a:e8:ca:a9:f6:be:
11:16:3b:46:e0:cc:81:f8:d6:cf:42:58:8a:06:04:f1:af:e6:
c9:30:d9:5c:48:82:6c:18:6a:75:7d:6f:fd:c2:51:f7:63:78:
44:54:22:bf:6f:e4:3a:f1:77:71:11:63:f9:e6:1c:ec:96:2b:
dd:be:17:f3:7d:0f:38:88:4d:de:49:00:af:88:f4:a2:ee:1e:
a4:bc:77:bf:e5:18:41:2e:3a:8e:f6:a9:3a:83:68:88:3d:14:
96:71:3c:3c:f1:63:ab:28:0f:11:10:d5:26:28:d3:eb:73:17:
63:be:1f:ec:36:e6:66:47:b8:c8:1e:ce:11:84:c4:91:46:42:
8a:96:c2:44:9e:0b:0e:50:cc:79:56:19:27:10:d9:23:70:bb:
f9:09:af:2c:c6:66:68:3b:54:02:6d:be:99:1b:ed:5f:24:a1:
3e:4b:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:55:02 2025 by rpki-client