Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/KO_yCegPTaYgnGmPPeV-u2FbJ7s.roa
File: KO_yCegPTaYgnGmPPeV-u2FbJ7s.roa (raw, json)
Hash identifier: 4IvjtsfFTMmkeXzP+qQEfVBa0Jqi5yt97I2XLU44nQY=
Subject key identifier: 28:EF:F2:09:E8:0F:4D:A6:20:9C:69:8F:3D:E5:7E:BB:61:5B:27:BB
Certificate issuer: /CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Certificate serial: 018AE31EC84567D36F4E66EC11B8FF376CB9
Authority key identifier: 53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/KO_yCegPTaYgnGmPPeV-u2FbJ7s.roa
Signing time: Fri 29 Sep 2023 22:45:59 +0000
ROA not before: Fri 29 Sep 2023 22:45:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207372
IP address blocks: 62.204.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e3:1e:c8:45:67:d3:6f:4e:66:ec:11:b8:ff:37:6c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Validity
Not Before: Sep 29 22:45:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28eff209e80f4da6209c698f3de57ebb615b27bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:1b:6c:ee:82:3e:d2:1b:d6:22:4d:5e:43:
c2:16:ce:8f:b0:e6:e3:9f:79:6a:ac:40:3e:e5:80:
62:be:5c:a1:1f:74:4a:6d:9f:36:9d:fe:cb:c9:66:
b7:b6:32:9c:04:9f:02:0e:b3:1e:bd:7b:2b:54:de:
87:dc:91:e7:c1:56:9e:38:1f:8c:7f:84:48:c0:e2:
ab:d7:39:8d:d6:c3:4d:6c:90:52:79:be:cc:d1:c2:
35:b2:aa:da:3b:08:1c:7f:33:52:ec:3e:24:7e:89:
6d:ed:ab:cd:1d:27:ea:d2:1e:6c:52:61:8c:47:8f:
36:55:19:cd:9f:28:8e:f1:8e:e9:35:be:9e:de:67:
cb:9f:89:8d:55:f1:ad:4d:8e:30:33:3e:26:73:d5:
87:4d:bc:50:79:50:77:43:a4:a4:61:5c:41:f7:f3:
69:e2:4b:d1:3a:a7:9c:c9:9f:11:12:bd:41:d6:17:
8e:6f:44:fd:b7:24:d3:69:af:2b:f4:88:ff:d4:38:
2d:b2:f2:f7:f9:46:2b:d4:f6:cf:14:bf:e9:36:f3:
09:b4:a2:b2:c7:23:9a:b9:1a:ba:9d:e1:9e:98:27:
b9:2b:2a:e6:fb:7f:73:67:2f:30:4e:e4:39:53:f4:
2c:cf:74:ae:e2:36:c0:b4:0d:3c:f6:d3:2c:60:71:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EF:F2:09:E8:0F:4D:A6:20:9C:69:8F:3D:E5:7E:BB:61:5B:27:BB
X509v3 Authority Key Identifier:
keyid:53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/KO_yCegPTaYgnGmPPeV-u2FbJ7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/U3GSzI_PUugejQUwRm_pmlaq89E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.43.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d1:ae:46:2c:9e:ae:e6:a9:5d:7a:f8:34:2a:ac:bc:94:80:
9d:32:16:83:00:d0:61:24:ad:17:df:22:bf:1f:62:f6:f8:27:
3d:e4:53:12:15:73:91:38:24:58:15:2e:25:1c:42:9e:6d:be:
db:34:6a:8f:b1:bf:48:34:0c:f1:4d:07:74:69:01:ea:e8:cc:
b3:43:66:57:ac:24:17:3f:34:79:86:cc:8d:2d:a5:4f:6e:3e:
ff:b4:9d:9d:a6:e4:d8:35:5e:eb:12:04:82:30:47:75:f1:48:
2e:46:ce:c5:18:a8:17:99:49:e1:83:9f:96:a5:77:48:60:01:
96:8e:1b:1d:ed:ab:b2:2c:b0:d9:58:d1:b4:4a:b7:b8:43:3a:
71:d4:43:3e:b4:f6:28:38:99:f9:59:0a:f7:98:99:82:19:bb:
35:1d:26:a0:8f:9f:b4:ce:74:6f:a8:98:62:35:6e:f1:2f:aa:
8e:21:3e:58:a2:7e:89:2a:87:59:7c:10:d0:fe:39:fe:c8:3e:
6e:b4:8c:6f:31:c7:41:32:6b:ee:2e:35:67:97:9e:7d:5f:94:
b4:cb:e2:47:95:7b:73:41:bd:c4:b4:3d:57:e4:ac:13:d8:43:
71:fa:c6:e0:b8:b7:84:c3:d1:b4:d0:b9:f2:83:30:ea:8b:9f:
94:ea:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:39 2025 by rpki-client