Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wDtnM-W_Ou0loDCMdGDPyASZCTw.roa
File: wDtnM-W_Ou0loDCMdGDPyASZCTw.roa (raw, json)
Hash identifier: pBu1d/fvwBfzsnoS9P5hjAL5b02WSbfscz2q8rOQCEU=
Subject key identifier: C0:3B:67:33:E5:BF:3A:ED:25:A0:30:8C:74:60:CF:C8:04:99:09:3C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018413E2FBAB49E7548D1107058FEB762BD3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wDtnM-W_Ou0loDCMdGDPyASZCTw.roa
Signing time: Wed 26 Oct 2022 10:42:33 +0000
ROA not before: Wed 26 Oct 2022 10:42:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200823
IP address blocks: 62.89.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:e2:fb:ab:49:e7:54:8d:11:07:05:8f:eb:76:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 10:42:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c03b6733e5bf3aed25a0308c7460cfc80499093c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:81:15:59:88:68:41:c2:ca:1b:e3:7f:2c:
b4:c2:52:42:6a:86:13:b8:41:6a:08:77:76:d0:87:
3e:6b:a6:9d:a7:c7:0b:84:61:29:6d:d2:11:9b:99:
0f:2e:79:8f:17:58:55:1f:fd:82:0f:20:63:6d:40:
41:9e:02:03:e7:09:2c:5d:47:f1:12:00:a5:6a:1a:
10:4a:f5:75:a0:52:c8:12:32:bd:b8:11:59:cf:f2:
13:b3:60:74:ed:8f:d2:a6:e8:72:d6:97:ab:6a:57:
29:80:72:72:48:29:83:11:98:b1:1c:9d:6c:ef:c8:
7e:49:76:61:2e:eb:2b:70:9a:e1:fe:db:ed:68:2e:
30:6b:d1:74:2e:d3:ed:b7:e4:bd:c9:57:88:d3:35:
80:2a:0a:f3:45:82:3b:24:d8:7d:37:c1:63:20:e9:
1a:b0:09:1e:f5:39:53:4b:d0:18:61:20:29:69:c3:
3f:bb:e2:1f:64:e6:1e:cc:c6:78:73:2c:d9:04:26:
3e:61:8f:fa:e2:e0:e9:4e:3e:31:34:0f:24:22:57:
c9:5b:75:af:27:b8:f4:b3:74:c9:ff:ed:59:f3:5a:
15:19:80:e6:d4:84:9a:30:91:ea:ea:7f:ec:83:bd:
89:c9:88:29:61:79:d8:9e:0f:0c:4c:53:5e:e9:88:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3B:67:33:E5:BF:3A:ED:25:A0:30:8C:74:60:CF:C8:04:99:09:3C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wDtnM-W_Ou0loDCMdGDPyASZCTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:fb:12:6f:cb:4b:09:8a:11:ed:30:b4:6d:83:52:7c:85:f1:
01:3c:86:7d:5b:91:fc:bc:e0:ef:23:1f:5a:5a:9c:76:77:36:
6d:de:1c:30:26:40:17:ea:42:d5:f3:f2:20:c6:32:c6:2c:c0:
ca:31:c6:ef:a2:ba:d6:4a:a7:52:fe:17:de:18:57:d7:d5:83:
02:e0:d3:77:ba:01:08:c4:63:7b:bd:9b:61:94:db:ec:cd:24:
d8:8b:f1:e2:a9:b3:cd:f5:8c:ad:6c:03:ea:3c:b4:98:d3:9c:
ae:e7:1a:06:d6:bb:fe:78:5b:d8:c9:d1:52:66:b0:27:fd:33:
c4:79:40:ed:3c:8b:9d:bc:5d:30:bf:60:62:2f:21:12:af:8f:
e4:db:73:ba:24:0e:65:07:a6:88:e0:28:96:6a:25:2e:c1:48:
8b:ba:bf:ff:a8:08:b0:35:c8:b1:0d:0b:70:e6:50:5b:7e:21:
03:bc:9e:3d:bd:47:9a:49:31:60:fd:16:00:32:c5:d1:5b:e6:
82:dc:1b:1a:ac:3e:c5:7f:5a:21:2d:7c:1d:0d:e9:a4:1b:7c:
0b:19:cb:ca:52:c2:94:af:fc:26:86:33:57:92:69:d4:dd:56:
8e:26:78:f6:a2:3f:27:25:2d:5e:d5:25:07:f7:65:eb:3a:39:
10:59:d7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:31:27 2025 by rpki-client