Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/RJOKKcU46d29DlRZksZm4UP5pLw.roa
File: RJOKKcU46d29DlRZksZm4UP5pLw.roa (raw, json)
Hash identifier: Z0PSBu0dZgSkm/Uvpv7e31JVwYe/94ou9yLZa4kvRyY=
Subject key identifier: 44:93:8A:29:C5:38:E9:DD:BD:0E:54:59:92:C6:66:E1:43:F9:A4:BC
Certificate issuer: /CN=99f95c37d71aa2f49695e13f417e30a97304aaf4
Certificate serial: 01DB7E
Authority key identifier: 99:F9:5C:37:D7:1A:A2:F4:96:95:E1:3F:41:7E:30:A9:73:04:AA:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/RJOKKcU46d29DlRZksZm4UP5pLw.roa
Signing time: Thu 13 Jan 2022 17:33:55 +0000
ROA not before: Thu 13 Jan 2022 17:33:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212097
IP address blocks: 62.133.38.0/24 maxlen: 24
62.133.36.0/24 maxlen: 24
62.133.37.0/24 maxlen: 24
62.133.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121726 (0x1db7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f95c37d71aa2f49695e13f417e30a97304aaf4
Validity
Not Before: Jan 13 17:33:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44938a29c538e9ddbd0e545992c666e143f9a4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:d0:04:57:02:1d:b3:42:4d:0e:34:55:a1:
fe:5d:48:04:27:9c:ff:19:30:50:db:b0:b1:d6:35:
f1:f9:38:7d:10:b5:c0:34:b4:01:30:f9:73:2c:7a:
ce:74:b0:ff:78:16:04:43:05:45:f9:18:a1:8d:31:
21:37:ab:19:27:5c:66:5b:2d:95:3b:d0:d5:f3:6e:
de:c2:02:4c:2f:9d:33:66:bc:f8:1b:db:ce:4b:58:
e9:41:21:c2:8c:77:ee:bf:6d:40:62:70:3a:f1:74:
74:0f:1a:14:a9:f2:ef:f1:da:28:d5:a7:62:f4:22:
79:7e:61:4f:2f:40:7e:74:4e:46:84:a1:43:56:32:
58:0c:51:a4:fa:66:a7:87:5b:0e:85:5c:91:87:db:
a1:0a:89:1d:4a:a1:07:70:af:4b:f7:3c:88:30:59:
c2:c2:60:07:af:89:36:56:3a:d5:9d:cd:6e:00:7e:
ea:00:cc:7f:09:8c:47:85:a7:f5:61:43:62:d0:98:
8b:c3:d7:93:3f:18:ab:ea:c1:ea:9f:79:05:b0:18:
0e:25:49:60:b6:fb:a0:fa:f9:e3:76:00:2e:b8:82:
d6:c0:ad:59:a0:b0:30:86:50:5c:36:93:4f:47:3f:
6c:0a:65:a2:f1:89:92:4f:6c:79:29:c6:83:4c:5c:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:93:8A:29:C5:38:E9:DD:BD:0E:54:59:92:C6:66:E1:43:F9:A4:BC
X509v3 Authority Key Identifier:
keyid:99:F9:5C:37:D7:1A:A2:F4:96:95:E1:3F:41:7E:30:A9:73:04:AA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/RJOKKcU46d29DlRZksZm4UP5pLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.36.0/22
Signature Algorithm: sha256WithRSAEncryption
61:df:5f:9f:c4:d6:cc:9e:f2:f3:ee:b9:d7:2e:2f:f4:c6:51:
4c:92:d0:7e:1a:cb:a1:a0:3a:82:7e:f6:1a:34:3b:d9:44:f2:
b2:b4:4a:fb:54:55:74:09:bf:0c:f8:60:ca:35:4c:9b:f6:1b:
77:7e:39:4c:cd:bb:06:53:ab:2e:d9:eb:dc:8d:b5:05:69:66:
0f:7d:16:15:80:19:e8:c3:ce:eb:62:d9:09:7c:ed:4c:e0:88:
a7:f4:a0:10:db:9d:f3:98:18:68:b6:0e:73:70:90:5a:1a:f3:
0c:da:b1:0e:32:57:25:06:22:b4:cb:01:b7:a8:0d:74:e4:93:
37:6b:9f:94:38:02:cf:97:8a:76:8c:70:e1:4e:a9:d5:d1:5d:
2b:92:27:4a:2d:73:e4:c6:fa:d8:a6:f6:f1:69:c3:d1:25:ba:
ef:50:90:6a:37:71:21:64:a2:99:8b:52:d4:fd:b5:24:3e:f7:
55:ab:a6:9e:06:12:88:6d:0e:f4:16:e8:14:7f:13:f5:14:32:
8c:ee:85:d2:16:e2:eb:f3:07:8d:8f:33:8d:fb:32:48:0f:57:
9d:a7:a8:a1:44:bb:89:b6:27:ff:ad:06:d4:f4:2b:fb:53:11:
a8:43:04:45:99:0c:00:c9:ff:21:71:0d:cb:4a:a2:aa:6e:ce:
58:37:d9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:43 2025 by rpki-client