Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/pEwSdYVaffzNQpPsricc7MzKDAg.roa
File: pEwSdYVaffzNQpPsricc7MzKDAg.roa (raw, json)
Hash identifier: 5B3ChBwB6ot+7D7ygHvFwPbiSIRyqZIYIbeSiVWToSc=
Subject key identifier: A4:4C:12:75:85:5A:7D:FC:CD:42:93:EC:AE:27:1C:EC:CC:CA:0C:08
Certificate issuer: /CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Certificate serial: 090D951D
Authority key identifier: 6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/pEwSdYVaffzNQpPsricc7MzKDAg.roa
Signing time: Sat 01 Jan 2022 03:57:29 +0000
ROA not before: Sat 01 Jan 2022 03:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12843
IP address blocks: 62.182.102.0/24 maxlen: 24
62.182.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151885085 (0x90d951d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Validity
Not Before: Jan 1 03:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a44c1275855a7dfccd4293ecae271cecccca0c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:2b:a9:be:e6:b2:53:85:c5:13:da:e6:9b:
78:c0:f0:c6:51:6d:b5:56:97:9f:e5:32:ef:82:26:
a2:d2:08:9e:cc:da:52:c3:29:d5:35:29:24:9b:a7:
a9:6f:92:49:bd:d9:ef:68:a6:03:fd:83:3f:30:33:
e9:df:c2:32:ed:db:59:ee:58:6a:e6:2f:40:cc:8b:
ca:ab:35:5c:3b:25:b2:e9:8e:1d:a2:9d:16:39:34:
c6:6e:dc:fc:90:4a:f4:77:a1:58:a8:e6:5e:86:8a:
6b:78:b0:e4:95:87:67:5f:b6:92:56:24:5f:d4:47:
09:7a:e9:69:ff:ba:8e:4b:2b:37:25:89:a4:27:13:
94:39:d9:bb:6b:f3:48:9c:a2:5a:8a:24:8e:c1:d9:
bb:5d:bb:6a:71:a7:ac:d0:4f:9b:3e:36:6c:bb:b0:
0f:14:4e:87:58:bc:0b:7a:b2:96:a1:08:02:47:19:
12:8f:17:0a:8c:33:78:4a:d4:f4:bd:9d:dd:b2:fe:
7f:ec:62:d4:35:90:36:fa:42:91:42:11:b8:70:12:
db:25:d5:a3:ec:2b:da:7e:07:f8:ce:d7:d0:d9:31:
66:87:da:d4:88:22:05:f0:a2:14:d7:5e:59:c4:9f:
6a:04:e3:fd:28:b5:c4:b4:9a:2e:5f:a0:7e:9a:15:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:12:75:85:5A:7D:FC:CD:42:93:EC:AE:27:1C:EC:CC:CA:0C:08
X509v3 Authority Key Identifier:
keyid:6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/pEwSdYVaffzNQpPsricc7MzKDAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.102.0/23
Signature Algorithm: sha256WithRSAEncryption
76:ae:a6:78:fd:8a:79:a4:5e:a8:66:15:33:a5:1e:3c:56:9f:
54:be:c5:19:ee:59:50:5d:2e:99:ac:68:29:67:3f:fb:86:4f:
f1:90:d5:67:75:85:51:ca:5f:6e:17:87:dd:5a:34:09:fd:5d:
8d:1b:c9:6b:7a:71:4a:08:21:0d:18:f8:7f:86:97:2f:89:dc:
07:f8:21:50:b4:60:c2:b0:50:81:e2:61:3b:05:40:a3:c3:ec:
6b:f0:2b:6c:cb:48:7b:f4:f3:57:66:7f:32:ff:47:50:43:b3:
cd:0f:cd:6a:f7:6b:c1:2b:96:17:ba:c5:9e:39:d8:43:16:da:
91:2e:0d:b3:3b:73:e8:84:4e:97:44:dd:7b:81:6c:45:6c:1a:
bb:54:9a:f2:ee:47:ce:44:b4:39:ea:6e:fc:e5:d2:e8:ce:07:
ec:94:fa:8f:1b:d8:9c:c5:5b:6b:69:1d:ce:52:1a:f5:7e:74:
a4:62:6d:2d:33:e2:1b:f7:8b:ac:1c:ce:45:1e:14:b1:b1:21:
b5:f1:57:d9:88:a4:85:a1:ab:aa:c8:5d:ca:9d:bb:47:ea:3e:
f7:b7:6b:1b:cb:37:95:38:af:49:6e:d7:ef:06:4d:97:3a:e3:
aa:36:18:d7:34:2b:88:e4:20:77:3e:b4:50:76:bd:69:cc:34:
23:09:f5:b0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECQ2VHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YTljZjVhNTdiYzc0NTZkNzQwYjQ1ZTFmZTA4ZTM2OWE5YTE3MTRhMB4XDTIyMDEw
MTAzNTcyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQ0YzEyNzU4NTVh
N2RmY2NkNDI5M2VjYWUyNzFjZWNjY2NhMGMwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/KK6m+5rJThcUT2uabeMDwxlFttVaXn+Uy74ImotIInsza
UsMp1TUpJJunqW+SSb3Z72imA/2DPzAz6d/CMu3bWe5YauYvQMyLyqs1XDslsumO
HaKdFjk0xm7c/JBK9HehWKjmXoaKa3iw5JWHZ1+2klYkX9RHCXrpaf+6jksrNyWJ
pCcTlDnZu2vzSJyiWookjsHZu127anGnrNBPmz42bLuwDxROh1i8C3qylqEIAkcZ
Eo8XCowzeErU9L2d3bL+f+xi1DWQNvpCkUIRuHAS2yXVo+wr2n4H+M7X0NkxZofa
1IgiBfCiFNdeWcSfagTj/Si1xLSaLl+gfpoVH/ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSkTBJ1hVp9/M1Ck+yuJxzszMoMCDAfBgNVHSMEGDAWgBRqnPWle8dFbXQL
ReH+CONpqaFxSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FwejFwWHZIUlcxMEMwWGhfZ2pqYWFtaGNVby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMWZlM2Q3LTkyMTQtNGRlMy04ZjFjLTJjMGFiYmQyZTg1ZC8x
L3BFd1NkWVZhZmZ6TlFwUHNyaWNjN016S0RBZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MWZlM2Q3LTkyMTQtNGRlMy04ZjFjLTJjMGFiYmQyZTg1ZC8xL2FwejFwWHZIUlcx
MEMwWGhfZ2pqYWFtaGNVby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAT62ZjANBgkqhkiG9w0BAQsFAAOC
AQEAdq6meP2KeaReqGYVM6UePFafVL7FGe5ZUF0umaxoKWc/+4ZP8ZDVZ3WFUcpf
bheH3Vo0Cf1djRvJa3pxSgghDRj4f4aXL4ncB/ghULRgwrBQgeJhOwVAo8Psa/Ar
bMtIe/TzV2Z/Mv9HUEOzzQ/NavdrwSuWF7rFnjnYQxbakS4Nsztz6IROl0Tde4Fs
RWwau1Sa8u5HzkS0Oepu/OXS6M4H7JT6jxvYnMVba2kdzlIa9X50pGJtLTPiG/eL
rBzORR4UsbEhtfFX2YikhaGrqshdyp27R+o+97drG8s3lTivSW7X7wZNlzrjqjYY
1zQriOQgdz60UHa9acw0Iwn1sA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:04 2025 by rpki-client