Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Vo-DB09zdPaJ9qwDyqMmGLLCWUY.roa
File: Vo-DB09zdPaJ9qwDyqMmGLLCWUY.roa (raw, json)
Hash identifier: 01AskEVWN5f/Wuc5wRmNvP1X7t1wSGpTYWE/kr03xYs=
Subject key identifier: 56:8F:83:07:4F:73:74:F6:89:F6:AC:03:CA:A3:26:18:B2:C2:59:46
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D40122CEA6DE6035E5FC769E6CC4E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Vo-DB09zdPaJ9qwDyqMmGLLCWUY.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215106
IP address blocks: 62.89.216.0/24 maxlen: 24
81.23.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:40:12:2c:ea:6d:e6:03:5e:5f:c7:69:e6:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=568f83074f7374f689f6ac03caa32618b2c25946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:da:d8:1f:e6:41:7d:bc:af:8f:0b:2c:dd:
a6:23:be:cf:c3:b6:5a:cf:72:98:c2:77:54:d7:e2:
01:1d:ee:ce:f1:04:a7:ce:04:4b:a7:02:f8:3c:d3:
14:dd:2d:59:31:6b:46:4d:50:7b:00:b0:05:f7:6f:
ae:33:c0:29:9a:50:65:1c:5c:54:a5:a7:13:39:ca:
50:53:b6:85:81:d6:22:32:c2:f3:4b:a1:fc:a7:03:
23:f5:d1:bf:32:9c:fc:08:4f:c7:20:89:43:a0:b8:
1a:c9:b9:07:56:01:47:61:0c:f3:2b:c0:85:7b:e9:
f0:92:6d:1b:ad:0c:73:6e:da:a6:75:0a:3f:3a:e9:
19:7d:39:4a:9d:2c:dd:f1:1b:6f:95:32:aa:9a:c8:
34:f8:10:49:85:30:16:a9:7e:85:b2:94:06:ca:98:
db:3a:7c:5a:7b:cb:65:c3:10:45:98:9d:97:47:44:
45:7b:32:25:4d:5d:8f:3b:0c:4a:e6:d9:31:47:41:
a7:a1:9c:a8:61:02:20:ab:12:cc:95:af:72:a5:da:
67:2e:41:70:ab:28:90:ce:ca:23:82:e9:66:14:e5:
a2:2d:15:19:fb:b2:b5:3a:22:7f:0e:66:15:2c:b8:
f0:6a:58:58:c9:35:2e:ee:c4:22:6b:60:f3:f9:02:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:83:07:4F:73:74:F6:89:F6:AC:03:CA:A3:26:18:B2:C2:59:46
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Vo-DB09zdPaJ9qwDyqMmGLLCWUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.216.0/24
81.23.13.0/24
Signature Algorithm: sha256WithRSAEncryption
42:08:cd:4d:a1:51:c0:e4:fa:01:b6:a7:56:ba:8c:e6:4b:e6:
a0:96:af:41:5c:75:30:8d:3b:72:ce:a4:ed:2b:ec:e9:08:f8:
df:1d:d1:a4:b4:e2:9d:b3:91:fe:a4:8f:3e:af:d2:48:00:1f:
a6:f8:74:88:34:12:c2:7f:f9:c8:ed:c3:42:47:14:88:54:73:
06:b6:51:58:32:18:e7:11:54:7c:ce:1e:28:8b:59:61:31:59:
61:7f:e9:6f:5f:29:0e:8b:a8:57:13:20:33:e4:fe:bb:76:c1:
d1:14:f7:fe:3a:59:da:af:54:39:45:c1:68:b7:77:7f:65:e1:
3f:90:17:df:c4:6d:81:6c:c1:d5:bd:8e:03:8a:3f:ea:bc:75:
9e:4f:25:ba:16:af:d0:bb:41:86:99:70:8f:f5:d6:34:9c:ef:
80:7e:19:e9:07:a1:af:0c:16:fc:fe:6b:35:69:2a:09:9d:71:
dd:4a:0a:9d:72:78:44:30:60:92:0e:39:a7:07:b9:0d:45:b6:
a0:27:8e:a0:70:c1:a9:c5:6f:59:80:69:c9:2f:96:ce:15:5d:
35:9f:b5:67:bd:c2:c9:82:80:5b:65:31:b6:e4:31:78:7b:d6:
e7:29:78:14:c7:e1:7d:d1:d6:7b:3e:04:2c:fb:13:b1:43:7a:
5a:df:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:39 2025 by rpki-client