Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/k-k62kDMiGWruo4LefHf1A6LOXM.roa
File: k-k62kDMiGWruo4LefHf1A6LOXM.roa (raw, json)
Hash identifier: QpM3aPj/5laVQHfJpMVvdTpBkO8enXJrdQsf94/r+1c=
Subject key identifier: 93:E9:3A:DA:40:CC:88:65:AB:BA:8E:0B:79:F1:DF:D4:0E:8B:39:73
Certificate issuer: /CN=7509f20e19fea6a79e68ad228bdb85cc9df93ab9
Certificate serial: 0109A7
Authority key identifier: 75:09:F2:0E:19:FE:A6:A7:9E:68:AD:22:8B:DB:85:CC:9D:F9:3A:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQnyDhn-pqeeaK0ii9uFzJ35Ork.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/k-k62kDMiGWruo4LefHf1A6LOXM.roa
Signing time: Thu 28 Apr 2022 08:31:14 +0000
ROA not before: Thu 28 Apr 2022 08:31:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35756
IP address blocks: 195.10.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68007 (0x109a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7509f20e19fea6a79e68ad228bdb85cc9df93ab9
Validity
Not Before: Apr 28 08:31:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93e93ada40cc8865abba8e0b79f1dfd40e8b3973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:a7:a2:61:00:99:23:91:90:fc:2c:a5:c6:
4d:1f:b9:cd:a5:8d:91:a5:76:24:f8:1e:8e:4a:c0:
26:4c:cc:92:66:56:66:3a:47:dc:09:17:66:76:46:
0c:8b:ac:89:e5:9e:d5:59:b5:00:cc:68:ef:02:71:
f6:3a:dc:a6:4a:12:e3:eb:0c:85:8c:85:47:42:45:
09:16:f0:a8:08:db:15:d2:d1:96:c9:fc:39:24:7f:
26:94:1b:84:b7:55:c0:b7:5f:90:94:f2:ab:88:f0:
35:19:22:d2:6a:c3:bf:14:c6:62:3d:f8:b5:2b:3f:
bb:9f:3d:3c:f7:c7:37:45:87:cf:1a:45:3f:42:a2:
64:eb:e1:6a:d4:9c:90:62:ce:2d:5b:a6:a2:2f:2f:
90:ed:a4:99:b6:dd:f2:33:6e:c5:6f:ed:82:32:d5:
22:e6:f1:1c:18:db:ac:ec:5c:90:a5:cf:85:a3:56:
61:95:99:1a:49:1c:7c:64:95:27:8d:f1:aa:ed:0b:
77:27:c3:b7:3e:df:61:3e:c5:82:1a:3b:a0:f6:52:
ea:c3:bd:ea:b0:bd:8f:83:de:30:35:dd:d1:ad:b1:
c6:e3:83:5e:07:02:45:61:48:01:24:a7:e5:2d:d8:
3a:73:66:88:c0:aa:bb:f6:c5:7c:98:18:b0:80:35:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E9:3A:DA:40:CC:88:65:AB:BA:8E:0B:79:F1:DF:D4:0E:8B:39:73
X509v3 Authority Key Identifier:
keyid:75:09:F2:0E:19:FE:A6:A7:9E:68:AD:22:8B:DB:85:CC:9D:F9:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQnyDhn-pqeeaK0ii9uFzJ35Ork.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/k-k62kDMiGWruo4LefHf1A6LOXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/dQnyDhn-pqeeaK0ii9uFzJ35Ork.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.193.0/24
Signature Algorithm: sha256WithRSAEncryption
68:71:82:ff:f5:b9:64:3f:cd:30:21:44:6b:76:5e:d4:53:38:
f3:83:e7:7f:95:56:10:53:83:f5:c2:8a:69:f1:b8:04:8e:47:
38:78:4a:77:35:ca:ad:ff:41:ad:57:11:2f:ea:10:90:c5:c9:
01:7f:85:7b:cf:43:65:db:33:3a:ca:02:43:81:9f:e9:47:b9:
c3:7b:8a:ec:28:6d:84:ed:8a:06:9e:fc:c1:3b:5c:b9:85:c6:
dc:95:74:c8:af:d1:1c:25:89:04:74:06:d7:76:1f:e4:a7:39:
95:97:a1:a3:52:f8:75:98:13:13:7d:67:78:0f:3a:12:41:6f:
f6:39:66:c1:7d:00:95:8b:b1:8a:1e:07:a0:28:47:d1:fc:77:
44:a3:b4:1d:61:b2:74:8a:5c:aa:df:73:d6:46:20:16:8e:ff:
38:35:04:1d:d5:8d:8b:16:8f:87:3b:f6:e9:60:42:11:e9:4b:
18:6d:51:78:38:51:3b:45:1b:65:c2:a4:4a:d8:9e:dc:82:b8:
b1:6b:b5:3c:44:bb:ed:8b:f0:ad:6b:b2:50:6f:e4:3a:ae:e5:
45:24:e8:31:23:ab:ee:0c:e9:90:79:c4:14:dc:86:06:a7:a0:
84:8c:27:93:ad:45:59:4b:63:97:03:c1:c9:5c:05:b6:50:42:
d6:b8:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:40:14 2025 by rpki-client