Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aPo__qv4stUgKqdCKWKKfZXYQSQ.roa
File: aPo__qv4stUgKqdCKWKKfZXYQSQ.roa (raw, json)
Hash identifier: JSKWpi2PGcMXwoHIcWgyj7vSHZX7Gp06HybntnKT5q4=
Subject key identifier: 68:FA:3F:FE:AB:F8:B2:D5:20:2A:A7:42:29:62:8A:7D:95:D8:41:24
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018413E2FE0F935F4B4B450E08D9C353F039
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aPo__qv4stUgKqdCKWKKfZXYQSQ.roa
Signing time: Wed 26 Oct 2022 10:42:33 +0000
ROA not before: Wed 26 Oct 2022 10:42:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207438
IP address blocks: 62.89.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:e2:fe:0f:93:5f:4b:4b:45:0e:08:d9:c3:53:f0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 10:42:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68fa3ffeabf8b2d5202aa74229628a7d95d84124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:65:b9:3c:aa:3e:1c:70:10:4b:0d:5f:31:
0c:25:b4:02:90:d2:39:80:26:a0:b8:5c:8a:85:6a:
4a:e4:85:96:97:ea:85:33:ee:38:48:6c:17:29:87:
6c:ab:46:5f:2e:16:64:46:e6:50:1a:5e:69:48:89:
e9:20:c8:52:50:3f:1d:7a:e2:a8:d5:0a:0d:ce:87:
cc:39:05:64:47:70:02:7b:13:94:a4:22:2a:c3:7b:
d2:53:a8:d6:e9:d4:f6:fc:49:54:9b:3d:f7:a1:6a:
9c:b8:e2:65:01:6b:81:6b:0d:a5:e5:88:02:2c:16:
96:21:6f:7a:5d:95:18:0c:26:26:fb:ec:a0:96:21:
62:1c:e4:3a:40:0e:a3:9a:4b:f2:26:05:ab:f6:a2:
5d:84:c1:38:ca:b5:48:f2:77:41:7c:05:3c:d1:69:
bc:3d:3e:48:60:74:71:d7:79:22:b9:66:c0:58:00:
13:6d:7d:76:84:17:2f:83:8a:64:ee:5b:45:0e:61:
8f:da:3b:1f:fe:4e:55:14:50:6b:85:06:d3:e5:e6:
94:91:7e:f1:b1:b2:a5:37:e7:7e:61:dd:a0:d5:5d:
8e:db:9a:5c:5e:bc:91:73:ee:01:4f:81:50:d9:3a:
ca:48:9e:18:a7:fc:0a:81:19:12:a3:df:29:27:e1:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FA:3F:FE:AB:F8:B2:D5:20:2A:A7:42:29:62:8A:7D:95:D8:41:24
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aPo__qv4stUgKqdCKWKKfZXYQSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.202.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c7:2d:fc:89:a0:5f:8a:9f:7a:0c:03:fa:00:7e:0e:eb:0f:
2d:39:cb:02:64:e1:35:5e:1a:ce:11:e5:dc:f4:39:a1:80:b9:
e4:1f:70:51:5f:03:bd:97:c9:f0:bb:0c:bb:38:2e:0b:ad:04:
c7:22:ca:91:2b:3c:c6:ce:bd:e3:d6:04:4a:37:74:46:38:69:
6c:f1:b1:58:34:f4:4d:0e:d0:c0:d1:e1:25:b4:c1:78:63:ec:
ae:33:a9:f2:98:05:40:9f:b5:e3:36:30:af:35:a0:67:16:3e:
2a:38:a7:c2:40:b4:00:17:0b:c1:26:37:da:c6:56:5a:54:d9:
91:5a:cd:5c:98:91:00:e6:9b:7c:09:3b:8a:58:8c:f3:6f:de:
a2:33:67:14:80:06:e0:d9:b6:6d:80:83:c7:cf:2d:fa:a7:ad:
a9:6d:99:bf:df:27:a8:ae:7c:ec:a6:a2:c7:10:5e:41:1a:58:
9b:c8:82:17:00:3f:cc:5d:86:4a:6d:b2:05:67:11:a9:6c:11:
ae:ea:f3:10:42:db:ea:d7:cd:2b:9a:a5:2d:d1:f0:4e:d1:5d:
13:b0:64:c0:f1:92:5d:e0:14:ff:1d:bd:25:ad:a5:6b:d9:0a:
bc:46:6e:56:ed:bd:e3:42:4a:ee:31:f2:4c:e1:77:80:a8:26:
15:12:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:33 2025 by rpki-client