Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5ksPiTkh_sbQ8kNxC7UpmEmd5ZQ.roa
File: 5ksPiTkh_sbQ8kNxC7UpmEmd5ZQ.roa (raw, json)
Hash identifier: P1uHf3VCv82SIh/Zl2+oxF83hacWZOmbrdRZYTXDrEE=
Subject key identifier: E6:4B:0F:89:39:21:FE:C6:D0:F2:43:71:0B:B5:29:98:49:9D:E5:94
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3A30131D5D6A28E5504998443ABA
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5ksPiTkh_sbQ8kNxC7UpmEmd5ZQ.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204230
IP address blocks: 62.89.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3a:30:13:1d:5d:6a:28:e5:50:49:98:44:3a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e64b0f893921fec6d0f243710bb52998499de594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:56:5a:7b:4d:02:46:0b:c7:59:95:aa:a5:
76:81:3a:29:d7:b0:73:96:13:81:da:f9:e6:70:bf:
08:52:14:ad:81:91:b0:51:6b:e5:0e:91:96:7f:50:
f7:0b:ae:f5:58:df:18:73:5e:03:3a:8f:73:4f:bb:
66:c9:bd:aa:52:5d:8e:61:b9:d4:d1:d7:12:c2:ca:
7d:59:b5:de:8a:59:4a:fa:68:bb:6c:1b:99:2e:c9:
bd:c5:37:8d:37:6d:46:d6:7c:c8:88:ee:11:02:8d:
4e:06:f7:59:5b:7f:2c:5a:fb:45:d3:7b:65:cb:b4:
1a:1b:df:47:77:02:18:d6:c1:da:2c:c6:eb:d4:c8:
c7:7e:48:a3:65:87:c4:5c:14:c3:71:51:7d:25:ad:
36:3d:06:ca:e8:77:25:17:12:ca:2e:ed:b5:3e:15:
70:b1:9e:0a:44:97:de:8c:a8:5b:bb:43:d4:4b:36:
6b:51:df:e6:36:52:39:82:18:d1:62:f2:5f:fd:f0:
f5:e1:4b:e6:dd:ea:b9:af:fa:7f:fa:3d:39:b1:dc:
42:18:d4:f6:21:78:63:25:60:94:dc:9a:e5:27:d4:
8f:ef:25:19:a4:9c:09:70:ff:85:ec:e7:3e:89:92:
ff:15:39:a2:67:e2:9e:e3:b6:c3:16:6d:2d:ba:92:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4B:0F:89:39:21:FE:C6:D0:F2:43:71:0B:B5:29:98:49:9D:E5:94
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5ksPiTkh_sbQ8kNxC7UpmEmd5ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
71:71:35:37:58:dc:d7:04:d6:4a:d0:45:36:c7:06:b9:17:6b:
36:39:25:60:1c:4e:17:1e:fa:c1:20:e6:8f:9d:ae:1f:86:b0:
35:14:5e:17:b4:16:69:54:01:75:89:a2:0a:75:e3:54:bc:e8:
f4:65:a4:21:de:d6:09:b4:91:ef:5a:9f:ba:82:1b:48:41:ac:
27:45:d2:1d:04:e3:3b:18:b7:52:37:02:48:27:f9:10:14:1c:
02:ed:2e:91:12:6d:9c:22:04:0a:16:b5:96:c2:4a:c0:32:fb:
f9:c7:c9:7d:2b:46:94:97:fa:c5:b8:8e:dd:f1:f6:09:a2:42:
54:b2:c9:cb:d2:3c:b9:0c:33:dc:09:30:b8:b2:71:60:d4:8b:
85:8b:56:bb:a5:0e:e3:83:3b:4c:e1:8b:0d:ff:80:0a:37:e8:
28:0b:d6:3d:c9:16:50:1f:6a:5a:14:68:45:35:d7:e7:8e:f6:
db:0a:99:a7:59:71:23:72:e3:0b:82:84:e1:af:59:6d:07:ca:
31:08:f0:ff:fa:83:c8:12:a3:ff:2b:9b:d6:6f:1a:71:b9:9f:
93:e5:94:9a:68:04:43:e8:64:4e:78:be:3b:b8:db:91:e6:8f:
25:df:aa:c7:0c:5f:2b:77:d2:3b:42:8e:37:b2:df:99:b1:cb:
f1:a0:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:34 2025 by rpki-client