Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa
File: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (raw, json)
Hash identifier: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=
Subject key identifier: 0A:1E:4E:E4:19:6A:87:5A:8B:4D:F2:A7:2D:6F:CF:C5:EA:84:AE:65
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 0194206859B6F31CE71C2DA66B369D6D5071
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202012
IP address blocks: 62.40.101.0/24 maxlen: 24
62.40.105.0/24 maxlen: 24
62.40.111.0/24 maxlen: 24
62.40.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:59:b6:f3:1c:e7:1c:2d:a6:6b:36:9d:6d:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a1e4ee4196a875a8b4df2a72d6fcfc5ea84ae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:b3:d3:55:ba:f9:78:54:ae:17:a9:2a:33:
e2:b4:c9:ed:6a:20:be:21:dc:13:49:7a:46:14:c8:
cc:ac:05:08:01:11:70:23:17:83:6f:38:9f:d5:33:
93:7f:96:55:ae:6c:2d:c9:58:4f:6b:95:35:29:c0:
ed:63:0b:64:12:b8:dc:14:5e:45:58:9b:f4:02:7a:
de:93:cb:4a:48:82:db:b3:72:40:5b:2f:85:a9:06:
da:d4:11:ef:17:41:e9:df:78:46:58:26:a0:4e:d5:
a1:8b:7f:93:4c:71:31:c5:8c:31:e9:52:a7:fb:16:
68:51:f0:9b:79:35:bc:e1:06:fb:a4:da:b7:57:92:
08:0a:14:fc:52:af:0e:dd:59:db:cf:6d:41:20:32:
36:58:27:da:8d:0c:1c:c8:89:ac:ce:35:62:9a:d8:
3b:9e:cc:fb:3a:25:49:56:54:00:c5:b0:71:12:09:
c8:51:95:2b:ee:23:f8:5f:8f:8d:7e:19:57:bc:84:
a2:21:86:3a:99:d5:0e:75:81:20:76:9b:91:73:32:
be:7f:c6:d8:17:8c:ca:75:b2:52:7b:54:b5:0c:70:
01:45:dd:c9:b8:65:4e:71:4b:3b:97:f4:34:b7:e1:
24:22:48:a0:38:98:c5:b3:ef:02:a8:a1:51:f4:d8:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1E:4E:E4:19:6A:87:5A:8B:4D:F2:A7:2D:6F:CF:C5:EA:84:AE:65
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.40.101.0/24
62.40.105.0/24
62.40.111.0-62.40.112.255
Signature Algorithm: sha256WithRSAEncryption
72:3b:23:e6:1d:e0:2d:e2:f8:bf:60:ed:d1:24:1f:47:03:59:
52:12:db:6f:68:40:e6:1d:b1:55:74:58:44:74:78:9a:6f:8b:
33:33:7d:51:b0:5c:9d:ee:90:33:e6:b2:fe:71:db:ed:09:3c:
a9:85:16:58:28:6f:d1:00:0c:14:ae:35:66:b9:d6:2b:1c:df:
cc:6d:44:3c:13:a8:de:87:ef:ec:64:eb:91:dd:70:fa:0e:43:
af:eb:77:a2:12:9b:c8:35:44:70:f2:0b:57:00:dc:d2:47:fb:
9d:e7:b6:cf:3d:b4:41:db:ec:d3:fd:7d:f2:b3:39:d6:3b:37:
91:2f:c9:c5:e8:bd:70:0b:8f:07:71:e8:08:12:e9:4b:8e:77:
d9:4d:47:c8:53:cc:33:78:23:24:df:f4:30:d2:bd:1a:03:21:
ca:5d:05:fb:20:d8:f3:b0:d0:d9:e8:f4:7e:74:27:a0:67:d9:
7f:70:45:1a:84:15:d6:8e:5d:70:e1:ed:c5:48:51:47:42:be:
b3:10:f9:8c:ca:e2:d9:3d:43:90:36:d1:53:6f:af:a7:f8:d3:
23:77:87:79:ef:65:5a:c6:8e:27:9b:19:9f:94:64:21:5f:79:
5a:80:27:d1:86:cd:6d:0c:04:3d:2d:30:8b:c6:02:81:27:4b:
ea:72:12:3e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQgaFm28xznHC2mazadbVBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk
OTRmNjEwHhcNMjUwMTAxMDU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTFlNGVlNDE5NmE4NzVhOGI0ZGYyYTcyZDZmY2ZjNWVhODRhZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld2z01W6+XhUrhepKjPitMntaiC+
IdwTSXpGFMjMrAUIARFwIxeDbzif1TOTf5ZVrmwtyVhPa5U1KcDtYwtkErjcFF5F
WJv0Anrek8tKSILbs3JAWy+FqQba1BHvF0Hp33hGWCagTtWhi3+TTHExxYwx6VKn
+xZoUfCbeTW84Qb7pNq3V5IIChT8Uq8O3Vnbz21BIDI2WCfajQwcyImszjVimtg7
nsz7OiVJVlQAxbBxEgnIUZUr7iP4X4+NfhlXvISiIYY6mdUOdYEgdpuRczK+f8bY
F4zKdbJSe1S1DHABRd3JuGVOcUs7l/Q0t+EkIkigOJjFs+8CqKFR9NhPlwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAoeTuQZaodai03ypy1vz8XqhK5lMB8GA1UdIwQY
MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt
ZWY0YjY1OWVmZjhkLzEvQ2g1TzVCbHFoMXFMVGZLbkxXX1B4ZXFFcm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUtZWY0YjY1OWVmZjhk
LzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAPihlAwQA
PihpMAwDBAA+KG8DBAA+KHAwDQYJKoZIhvcNAQELBQADggEBAHI7I+Yd4C3i+L9g
7dEkH0cDWVIS229oQOYdsVV0WER0eJpvizMzfVGwXJ3ukDPmsv5x2+0JPKmFFlgo
b9EADBSuNWa51isc38xtRDwTqN6H7+xk65HdcPoOQ6/rd6ISm8g1RHDyC1cA3NJH
+53nts89tEHb7NP9ffKzOdY7N5EvycXovXALjwdx6AgS6UuOd9lNR8hTzDN4IyTf
9DDSvRoDIcpdBfsg2POw0Nno9H50J6Bn2X9wRRqEFdaOXXDh7cVIUUdCvrMQ+YzK
4tk9Q5A20VNvr6f40yN3h3nvZVrGjiebGZ+UZCFfeVqAJ9GGzW0MBD0tMIvGAoEn
S+pyEj4=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:05 2025 by rpki-client on console.sobornost.net