Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k3eRK9cSiw7_NcRKuW9zUvkuXRA.roa
File: k3eRK9cSiw7_NcRKuW9zUvkuXRA.roa (raw, json)
Hash identifier: 2dK6lgG70dvk7c+DI/AuZ/VVIUgF6VzBXFg3G3BNPoU=
Subject key identifier: 93:77:91:2B:D7:12:8B:0E:FF:35:C4:4A:B9:6F:73:52:F9:2E:5D:10
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01959E1EFD759CF1BD4CE4AE528734D6A870
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k3eRK9cSiw7_NcRKuW9zUvkuXRA.roa
Signing time: Sun 16 Mar 2025 08:43:05 +0000
ROA not before: Sun 16 Mar 2025 08:43:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.172.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9e:1e:fd:75:9c:f1:bd:4c:e4:ae:52:87:34:d6:a8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 16 08:43:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9377912bd7128b0eff35c44ab96f7352f92e5d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:93:f2:3b:58:b6:5d:6e:52:b8:5a:45:04:
da:2e:a3:22:c9:12:64:05:74:1a:79:84:45:df:d0:
04:22:21:89:d1:4b:6a:f9:31:a6:2d:e3:6a:4e:59:
ce:4b:34:47:55:6a:1f:4a:3f:46:6a:5e:8b:4e:0e:
25:a9:37:04:d8:d0:df:fd:b8:f5:58:c7:ca:0f:23:
c6:e3:70:ec:f6:30:76:e8:09:8b:c8:1c:c1:0a:1c:
4b:d0:ff:4e:6a:43:f0:31:1c:d3:10:7e:e6:ff:b9:
f5:a4:58:c9:82:75:ff:7e:4a:0b:6f:41:a7:8f:7d:
38:3c:68:e9:9f:8f:a1:db:44:e4:1b:8f:c5:85:7c:
50:2a:c4:0e:64:43:95:12:52:67:97:bf:7f:9e:04:
cf:7a:fd:e6:3a:b4:54:10:e8:8d:2b:3f:b8:24:5d:
1b:5e:40:d9:3d:c9:3b:51:98:bd:d2:ff:dd:4e:f0:
fa:d0:50:78:c6:12:48:52:d4:de:0b:ec:3c:a2:d9:
e4:89:00:28:86:62:b3:30:c7:4f:2d:29:f1:c2:a1:
bf:8b:86:9e:73:f1:cd:2d:5f:27:7c:ed:f7:25:5d:
3a:ef:cb:cd:48:17:12:33:c5:f2:30:03:61:d2:14:
fa:21:2f:87:27:53:e6:2d:8e:80:3f:ca:e6:58:10:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:77:91:2B:D7:12:8B:0E:FF:35:C4:4A:B9:6F:73:52:F9:2E:5D:10
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k3eRK9cSiw7_NcRKuW9zUvkuXRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.172.0/23
62.72.184.0/23
62.72.191.0/24
81.21.2.0-81.21.7.255
176.57.51.0/24
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6b:85:62:b1:ef:ae:38:90:58:5d:31:37:0c:cb:dd:70:cb:
de:14:f3:0b:0b:7f:25:a0:a4:e6:4c:79:b0:15:59:c2:c7:4f:
88:84:e6:32:bd:07:b4:ea:98:72:8f:90:fc:9c:e3:dd:e2:17:
eb:8b:05:d0:dd:88:67:7b:8e:18:e8:cc:3c:c4:c3:9d:cd:c2:
cc:3a:27:06:ab:cd:ad:a6:eb:47:11:b3:c6:c5:bf:7d:c9:db:
5c:f1:c3:0f:fe:78:af:df:2a:da:1b:a6:59:2d:45:23:63:d6:
a7:77:bb:01:88:9c:24:e4:4b:14:f0:65:7d:24:e3:86:57:74:
f3:98:cf:5c:31:30:57:2e:32:d6:ac:d9:7d:bb:49:43:6a:e7:
35:48:fd:27:c5:28:fd:63:43:d5:65:d2:d2:bf:f6:9d:7d:02:
48:fe:a1:16:a2:e6:59:05:63:5c:35:15:86:14:0d:ac:c9:05:
35:2e:53:20:a5:b7:4d:1c:31:23:fe:61:ae:55:99:53:38:a5:
a9:df:a9:12:34:bd:76:6e:6d:2d:cd:e3:43:e1:ec:6b:fa:23:
28:30:db:3e:2d:1a:f8:5a:21:33:7e:a9:44:0f:e9:2c:4d:d7:
31:d9:a2:0e:fe:8c:b6:1a:31:4c:86:b5:bb:16:84:c1:2b:a9:
0b:de:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:41 2025 by rpki-client