Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa
File: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (raw, json)
Hash identifier: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=
Subject key identifier: 0B:1C:AB:2A:12:14:E3:05:23:0B:2C:83:10:41:E2:34:5B:00:54:AA
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 019425222AFF8D53B1B3F653919514B27147
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48367
IP address blocks: 62.93.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2a:ff:8d:53:b1:b3:f6:53:91:95:14:b2:71:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b1cab2a1214e305230b2c831041e2345b0054aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:ee:df:b0:e8:f6:0d:fa:53:a7:ce:d3:71:
2d:69:c2:5c:37:2f:2b:41:c6:f6:56:f6:f5:97:5f:
f5:60:28:fe:0b:51:ff:3c:0e:40:3a:1b:6d:94:0b:
29:59:56:9f:ae:42:b9:90:53:f7:bb:d0:34:2f:26:
45:27:29:a1:d2:e8:ba:0c:19:0f:7b:38:58:ff:e6:
ea:51:3a:7a:d8:ce:16:49:da:ec:0a:c3:9f:e2:46:
f6:18:d2:e9:fc:7f:03:e5:8f:e2:49:50:53:d2:dc:
5d:fc:7e:69:a8:2d:96:62:b9:78:85:8d:84:d4:ec:
1f:5a:98:86:eb:67:6f:a3:40:f5:cd:ce:bd:a4:71:
3d:61:23:d4:a1:5f:64:98:77:bc:d5:bf:6f:b9:83:
d0:07:8a:66:df:e0:cf:77:42:21:d0:c2:89:5b:3f:
fe:11:95:a3:43:99:10:94:5f:50:19:2e:10:87:78:
b2:9f:e1:23:c3:2b:0f:82:7b:b3:a3:08:04:a0:db:
06:96:3b:df:70:46:33:c2:ba:5f:65:37:14:a1:bc:
b6:59:53:66:1d:ca:7c:9d:cf:66:d6:12:2b:51:ab:
39:09:1c:d9:9d:ca:b9:9d:6f:d4:ad:ec:39:f1:23:
24:ad:28:01:b2:9c:35:52:9e:d9:3b:83:a1:3b:15:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1C:AB:2A:12:14:E3:05:23:0B:2C:83:10:41:E2:34:5B:00:54:AA
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1a:d4:90:c0:45:75:03:69:83:3c:92:8e:55:3d:34:ac:ba:
d7:bd:42:5c:04:3d:58:a8:b3:3f:9b:78:f4:27:9f:7b:49:63:
41:02:5f:a8:28:00:0d:c4:74:41:e6:9a:74:a0:51:b6:40:e9:
ec:0b:60:f5:3e:30:d5:77:0c:3c:57:cd:5e:aa:38:b7:ac:72:
4d:5a:b1:59:1b:ac:f7:97:24:eb:db:3f:38:83:a9:db:46:32:
c0:15:34:fc:5d:31:e8:a8:b0:c9:11:39:33:ef:22:71:c9:c3:
bf:2e:ab:1b:80:6b:2c:4e:a9:44:73:d2:3d:09:12:8d:8a:c3:
0a:83:b4:eb:21:67:31:a8:6e:1e:3f:14:ee:0c:99:7c:ad:fc:
26:b3:c5:80:ff:2f:57:5a:a2:3a:85:6a:16:c5:93:e5:23:3c:
51:74:f8:d0:55:d4:dc:b6:65:01:ed:36:34:3f:ec:a4:f8:dc:
41:45:0b:52:80:cf:2c:c6:06:5e:c7:e5:7e:59:cd:04:0e:1e:
0a:7b:b5:5d:ae:67:73:00:4a:30:8f:39:9c:4d:d4:db:5e:c7:
35:5b:21:5a:72:8b:87:ea:e9:6d:ec:e9:bf:bb:40:ce:e9:e3:
b3:b3:65:cc:f4:0f:c8:93:ae:7d:01:77:da:34:0c:4f:8a:88:
67:0a:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net