Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/Cc19cgugQdGGzWmKNe0-AV5tNOA.roa
File: Cc19cgugQdGGzWmKNe0-AV5tNOA.roa (raw, json)
Hash identifier: AdB3qWr4T5q3889qZQZVXkGWaD9whbwxZRKtQuF+C18=
Subject key identifier: 09:CD:7D:72:0B:A0:41:D1:86:CD:69:8A:35:ED:3E:01:5E:6D:34:E0
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 0194228E2BBCEC8B12FEB1BE4A022C13B3A7
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/Cc19cgugQdGGzWmKNe0-AV5tNOA.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31693
IP address blocks: 62.244.76.0/24 maxlen: 24
62.244.77.0/24 maxlen: 24
62.244.82.0/23 maxlen: 23
62.244.100.0/22 maxlen: 22
62.244.104.0/22 maxlen: 22
62.244.120.0/22 maxlen: 22
164.138.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2b:bc:ec:8b:12:fe:b1:be:4a:02:2c:13:b3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09cd7d720ba041d186cd698a35ed3e015e6d34e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:21:4b:c1:88:00:d8:a9:5f:a6:34:40:05:
23:ad:5e:65:73:22:1d:d0:93:48:65:35:36:c8:f2:
00:5d:4e:85:33:13:b6:8e:e5:e4:1f:80:03:ef:e4:
c6:11:c4:48:e0:5c:b2:c3:f7:ef:14:9e:ad:02:92:
b3:86:dc:90:6f:24:e1:bd:e6:ae:0b:5d:84:b9:cb:
04:04:c5:0d:67:a3:1b:7f:99:fa:35:16:2e:6b:37:
1e:26:16:7b:e4:23:0b:6e:30:57:5a:1a:ad:88:cf:
7d:18:61:5e:7d:6a:89:d1:c7:38:4f:34:5d:8d:e1:
54:0b:b4:8e:25:aa:9a:9f:25:eb:de:ba:79:c8:a4:
76:f6:f4:81:d1:1f:b6:ac:d2:38:5c:3b:7b:ac:fd:
99:91:11:9e:0f:05:aa:10:19:16:81:db:b7:e1:91:
09:13:6d:cb:c0:13:7b:66:d8:8c:a3:71:ad:a8:49:
00:09:f3:c0:27:3f:1b:b9:91:28:02:69:4f:74:6e:
77:2d:91:51:6c:50:3c:48:89:c3:53:8b:28:3e:b6:
8f:00:0d:94:3f:2b:b6:4b:b4:a3:45:1a:7f:4f:bc:
22:f7:23:3d:0d:04:4b:5a:16:3b:94:37:8c:8b:5b:
c3:0b:17:a7:f6:f1:c9:30:f5:e3:43:f5:bf:46:6e:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CD:7D:72:0B:A0:41:D1:86:CD:69:8A:35:ED:3E:01:5E:6D:34:E0
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/Cc19cgugQdGGzWmKNe0-AV5tNOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.76.0/23
62.244.82.0/23
62.244.100.0-62.244.107.255
62.244.120.0/22
164.138.56.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:87:41:a0:b3:ad:f3:b7:10:05:b5:af:8c:21:14:24:22:6d:
a9:a6:8a:d2:52:cf:f2:87:d3:99:f8:ad:c1:05:05:04:f5:23:
30:ec:f3:76:fe:94:bb:4f:17:0c:fe:3b:bb:89:fa:d5:ec:1f:
02:f6:a4:c1:e9:c2:2d:9a:19:23:5c:0f:54:a2:e8:3e:e9:0e:
c1:ee:bf:eb:57:dc:96:46:f8:f5:50:c7:a0:3f:1d:32:2a:a0:
e7:0f:e1:2d:34:28:7e:ad:5f:dc:6d:d1:b5:64:05:0b:71:48:
d5:6c:0a:0d:34:71:d0:8a:44:e3:31:41:db:c8:4c:90:40:ed:
62:b5:2b:a2:73:cc:44:32:0f:aa:ab:04:97:77:58:a4:ea:9f:
c9:6b:9e:a6:cb:c9:01:03:82:c1:15:10:e6:63:0e:4b:7a:9b:
a2:0c:c6:bd:88:d0:6d:4e:03:69:2b:c4:72:96:5a:b1:96:37:
34:c5:52:9a:91:1e:0a:1a:fb:1c:15:1c:8e:7d:42:cd:01:4d:
24:71:86:9f:b2:d4:1e:cb:26:50:92:4d:6e:f7:63:89:26:f7:
ea:68:98:ba:9f:0d:6f:f1:38:e4:97:ee:f9:8c:48:36:64:52:
54:e3:ba:b7:fc:10:07:ae:96:ad:fd:4e:5f:96:fd:76:a7:f3:
4d:3c:ed:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net