Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/CpQOplnmKu5LLulHc8JnvbebR4w.roa
File: CpQOplnmKu5LLulHc8JnvbebR4w.roa (raw, json)
Hash identifier: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=
Subject key identifier: 0A:94:0E:A6:59:E6:2A:EE:4B:2E:E9:47:73:C2:67:BD:B7:9B:47:8C
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019426D99A655B798A3257D6A3B9928B304B
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/CpQOplnmKu5LLulHc8JnvbebR4w.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197653
IP address blocks: 62.122.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9a:65:5b:79:8a:32:57:d6:a3:b9:92:8b:30:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a940ea659e62aee4b2ee94773c267bdb79b478c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:29:77:ab:54:96:72:f9:1e:62:59:cf:67:
e0:50:52:d2:43:10:ae:60:59:59:bb:48:95:a2:97:
64:04:95:63:88:60:c1:cf:2d:f5:29:ce:b1:cd:3e:
cc:98:2d:fd:cf:fa:01:e7:e3:ef:3b:6d:36:45:c2:
4c:2f:9d:90:db:94:20:25:d4:b0:c4:a8:d9:48:57:
c0:a7:43:a5:4a:f7:8e:5b:4d:d3:a6:99:31:bc:f7:
38:c1:c6:f3:30:52:37:ee:a7:1c:b7:e7:c1:de:b2:
23:98:38:b3:25:d6:41:e9:c6:ad:b9:75:36:63:49:
9a:ee:55:0c:79:d9:c3:06:81:ce:3b:96:1f:1d:25:
31:8b:9c:d2:10:a9:d2:3a:61:27:e6:b9:fd:cb:a6:
fd:86:24:a9:c3:e3:06:9e:00:3e:85:20:3b:7b:f4:
7f:21:27:3c:7d:81:47:2d:58:15:bc:ec:fe:5d:53:
f7:7c:38:05:0e:b9:ac:91:2c:1e:f1:fc:46:0a:da:
c7:31:29:4c:0c:26:45:9b:b1:24:8b:2d:d0:5f:36:
e6:41:0c:8d:af:9e:b8:fb:f6:cf:0d:20:92:a0:5f:
a2:18:90:06:8c:8b:1f:c4:9a:35:9b:0a:4b:b4:b8:
51:41:58:13:e9:ad:7d:b8:f8:8f:bd:0a:63:60:0e:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:0E:A6:59:E6:2A:EE:4B:2E:E9:47:73:C2:67:BD:B7:9B:47:8C
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/CpQOplnmKu5LLulHc8JnvbebR4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.224.0/22
Signature Algorithm: sha256WithRSAEncryption
83:9e:ac:64:b9:39:2e:be:c8:37:9a:1c:c9:05:4e:02:e9:2f:
c7:d6:28:92:17:8a:bd:88:6a:e6:75:df:eb:59:08:56:42:3a:
9d:2f:32:59:e9:98:41:b6:7e:b2:97:a7:a2:be:d5:65:18:cd:
fc:96:11:d7:a0:7c:0e:45:4c:d1:d2:17:5e:00:92:67:ff:31:
4b:4d:30:98:de:1d:d9:7d:24:e5:c6:74:25:d9:a2:35:f6:d6:
a0:e2:79:ce:b1:28:bb:6f:87:13:20:dc:c8:8c:b1:dc:b4:87:
e2:72:82:18:1a:2e:7f:e5:b2:b9:e7:8f:fb:9b:2c:f1:cd:06:
a0:be:64:bb:c9:aa:1f:e5:7e:8f:87:21:24:72:1e:97:b0:5c:
23:dc:9e:45:7b:57:94:cc:17:c2:46:b9:61:1e:fe:68:6b:30:
4c:2b:b9:2c:c8:41:94:69:a5:7f:79:27:50:86:7e:f9:f0:97:
01:6c:ad:2d:63:ab:6c:26:8b:f8:ab:80:b4:b9:61:04:2d:c9:
49:c9:0f:d5:5c:69:ad:26:cd:d8:a4:89:a7:eb:e9:16:65:36:
ec:fb:bb:59:b3:46:ab:0a:38:47:88:3d:c0:5f:d3:c4:e2:90:
7e:44:ae:2d:5c:ea:44:61:61:c1:79:6e:29:21:11:b6:a7:23:
13:87:83:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net