Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/Kp6f9xqvt3BJJofMb65Q5YABnCs.roa
File: Kp6f9xqvt3BJJofMb65Q5YABnCs.roa (raw, json)
Hash identifier: uX2AUermRcrCPsjOXeTxd1I1yGVdCLnEjzh+9vZjUkc=
Subject key identifier: 2A:9E:9F:F7:1A:AF:B7:70:49:26:87:CC:6F:AE:50:E5:80:01:9C:2B
Certificate issuer: /CN=99f95c37d71aa2f49695e13f417e30a97304aaf4
Certificate serial: 01847B4EABF102ECFA2A251C74DAFF616487
Authority key identifier: 99:F9:5C:37:D7:1A:A2:F4:96:95:E1:3F:41:7E:30:A9:73:04:AA:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/Kp6f9xqvt3BJJofMb65Q5YABnCs.roa
Signing time: Tue 15 Nov 2022 12:41:04 +0000
ROA not before: Tue 15 Nov 2022 12:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212097
IP address blocks: 62.133.38.0/24 maxlen: 24
62.133.36.0/22 maxlen: 22
62.133.36.0/24 maxlen: 24
62.133.37.0/24 maxlen: 24
62.133.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:4e:ab:f1:02:ec:fa:2a:25:1c:74:da:ff:61:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f95c37d71aa2f49695e13f417e30a97304aaf4
Validity
Not Before: Nov 15 12:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a9e9ff71aafb770492687cc6fae50e580019c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f9:c7:76:31:4c:0c:2a:77:9c:fa:f9:fe:ce:
83:aa:8c:d2:11:ea:53:49:ef:90:38:d4:ad:2d:e6:
42:0c:4c:02:33:c6:f6:3f:76:e2:32:b5:75:fb:5d:
ea:72:ea:d6:d2:38:18:b8:b7:8e:2a:63:b2:bd:77:
2d:09:36:7a:48:86:90:3f:fc:77:d8:ee:5b:85:dc:
65:9d:49:2d:07:98:a2:d2:c4:c6:d6:6b:9c:0c:6e:
c8:62:e6:c1:30:48:a7:a1:8a:13:06:b4:36:77:26:
a2:b6:15:5e:41:e7:f4:fb:36:20:72:34:a4:12:fe:
ab:40:dc:b9:93:c3:53:e9:f6:74:07:23:b3:02:09:
f1:02:b2:6a:8f:f5:bf:ec:21:62:d4:10:83:4d:d8:
90:a5:40:04:77:95:42:2c:7f:6e:1f:3e:52:0c:39:
94:a8:76:ed:2b:15:5f:be:9b:c2:5c:5c:a5:1b:18:
ce:f0:fa:fd:91:a9:ea:cc:71:17:8a:77:d2:4b:ce:
69:60:03:3f:cf:68:08:eb:54:ab:a5:ea:1d:c3:1d:
1a:1e:3b:38:4b:6b:30:31:c5:c5:c1:ad:56:64:bd:
6a:ba:4f:82:20:01:74:5c:a4:2e:6b:6c:69:91:6c:
8d:b9:a3:88:0b:21:a8:74:93:5a:74:ff:ee:ad:ad:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:9F:F7:1A:AF:B7:70:49:26:87:CC:6F:AE:50:E5:80:01:9C:2B
X509v3 Authority Key Identifier:
keyid:99:F9:5C:37:D7:1A:A2:F4:96:95:E1:3F:41:7E:30:A9:73:04:AA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/Kp6f9xqvt3BJJofMb65Q5YABnCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:2d:5c:c8:28:3a:d1:15:0e:c5:aa:32:9d:c2:05:90:03:8f:
df:9a:3c:c5:0e:c3:ce:bc:9d:f2:91:0b:ff:5c:69:81:32:b9:
50:1a:98:d7:ee:ef:20:da:b3:f1:d1:c5:5d:5d:61:f4:11:ba:
32:59:30:74:66:61:57:65:dc:b4:f9:d3:e2:92:d9:2c:df:b9:
99:3c:42:f1:c0:63:7c:1c:37:9d:6e:35:0a:b0:90:de:95:ca:
78:ae:ff:3b:b9:4c:5e:b8:a1:2a:50:c5:1f:a8:37:ac:88:0c:
f1:a7:2d:f5:1e:55:39:9a:26:6b:15:90:34:0f:f9:c6:41:10:
ee:7e:d5:62:79:1f:f2:96:31:a8:0f:52:2d:cd:cf:45:30:76:
a3:a2:9e:ee:f2:cf:ae:34:0b:af:b2:81:90:1a:8f:98:93:bb:
6a:b1:75:3b:5e:15:88:2f:63:fd:56:19:67:0c:1e:95:75:22:
92:8f:3f:03:d2:cc:75:6b:d2:8f:3a:11:9b:2e:d6:0d:d8:98:
43:8e:a2:c0:f5:93:c2:09:b2:cd:c9:f2:06:fa:eb:45:1b:74:
75:65:9d:fc:32:4a:ca:66:cf:82:7f:d0:9f:40:b4:bb:36:db:
6b:09:9f:9d:41:d6:fa:6c:99:cd:64:a7:08:83:60:59:38:5c:
40:3c:6d:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYR7TqvxAuz6KiUcdNr/YWSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Zjk1YzM3ZDcxYWEyZjQ5Njk1ZTEzZjQxN2UzMGE5NzMw
NGFhZjQwHhcNMjIxMTE1MTI0MTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTllOWZmNzFhYWZiNzcwNDkyNjg3Y2M2ZmFlNTBlNTgwMDE5YzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPnHdjFMDCp3nPr5/s6DqozSEepT
Se+QONStLeZCDEwCM8b2P3biMrV1+13qcurW0jgYuLeOKmOyvXctCTZ6SIaQP/x3
2O5bhdxlnUktB5ii0sTG1mucDG7IYubBMEinoYoTBrQ2dyaithVeQef0+zYgcjSk
Ev6rQNy5k8NT6fZ0ByOzAgnxArJqj/W/7CFi1BCDTdiQpUAEd5VCLH9uHz5SDDmU
qHbtKxVfvpvCXFylGxjO8Pr9kanqzHEXinfSS85pYAM/z2gI61Srpeodwx0aHjs4
S2swMcXFwa1WZL1quk+CIAF0XKQua2xpkWyNuaOICyGodJNadP/ura1GXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCqen/car7dwSSaHzG+uUOWAAZwrMB8GA1UdIwQY
MBaAFJn5XDfXGqL0lpXhP0F+MKlzBKr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZsY045Y2FvdlNXbGVFX1FYNHdxWE1FcXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjgzMDEtOTM5MS00Mzg0LWI5NTEt
NWVlZTEyM2IzOGRjLzEvS3A2Zjl4cXZ0M0JKSm9mTWI2NVE1WUFCbkNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YjgzMDEtOTM5MS00Mzg0LWI5NTEtNWVlZTEyM2IzOGRj
LzEvbWZsY045Y2FvdlNXbGVFX1FYNHdxWE1FcXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPoUkMA0G
CSqGSIb3DQEBCwUAA4IBAQAOLVzIKDrRFQ7FqjKdwgWQA4/fmjzFDsPOvJ3ykQv/
XGmBMrlQGpjX7u8g2rPx0cVdXWH0EboyWTB0ZmFXZdy0+dPiktks37mZPELxwGN8
HDedbjUKsJDelcp4rv87uUxeuKEqUMUfqDesiAzxpy31HlU5miZrFZA0D/nGQRDu
ftVieR/yljGoD1Itzc9FMHajop7u8s+uNAuvsoGQGo+Yk7tqsXU7XhWIL2P9Vhln
DB6VdSKSjz8D0sx1a9KPOhGbLtYN2JhDjqLA9ZPCCbLNyfIG+utFG3R1ZZ38MkrK
Zs+Cf9CfQLS7NttrCZ+dQdb6bJnNZKcIg2BZOFxAPG0/
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:29:01 2025 by rpki-client