Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/SE2ShGd3gpQqc3K2uW4_mxptIl4.roa
File: SE2ShGd3gpQqc3K2uW4_mxptIl4.roa (raw, json)
Hash identifier: j8a9qMsHTBDSwOdwbLNw1QyEJSolZsaQmJ5WxJKu2Fc=
Subject key identifier: 48:4D:92:84:67:77:82:94:2A:73:72:B6:B9:6E:3F:9B:1A:6D:22:5E
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA309C13113B4A88F91962D7A32948
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/SE2ShGd3gpQqc3K2uW4_mxptIl4.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 62.100.192.0/22 maxlen: 22
62.100.196.0/22 maxlen: 24
62.100.200.0/22 maxlen: 24
62.100.212.0/22 maxlen: 22
62.100.220.0/22 maxlen: 22
93.188.68.0/22 maxlen: 22
157.97.145.0/24 maxlen: 24
185.71.220.0/23 maxlen: 24
185.92.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:30:9c:13:11:3b:4a:88:f9:19:62:d7:a3:29:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484d9284677782942a7372b6b96e3f9b1a6d225e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:83:b8:5b:90:33:7d:86:55:e4:90:80:09:
41:a9:92:e2:d4:89:98:d6:f0:ac:da:a7:2b:41:f8:
bd:51:77:68:cd:f1:8b:0f:2c:29:a6:25:23:73:50:
66:91:87:55:0f:17:61:d7:37:e6:39:4c:dc:5d:8f:
c4:46:4a:80:18:4b:03:02:20:af:20:a8:22:a7:45:
af:cb:67:a0:60:ea:d6:6f:0d:a0:6e:0f:af:5c:b5:
df:3f:bc:61:d7:32:05:9a:42:08:4a:32:0b:4e:e4:
95:9d:dc:5a:e4:d6:ae:8c:6c:bb:73:38:cd:25:15:
40:b9:3e:0b:f9:90:34:13:64:1f:80:c9:24:75:c6:
d9:10:e4:3d:82:ea:78:bf:1f:fc:aa:3b:f6:f3:5b:
0b:1a:d5:c4:15:db:61:81:0c:26:9e:13:f4:e6:d4:
a7:76:dd:32:8c:10:50:6c:1a:7d:c8:46:bc:36:b2:
2f:34:d0:52:68:05:99:66:fc:9c:3a:d4:2d:93:78:
35:53:01:c2:36:44:b0:34:9e:24:1e:5c:a3:ec:20:
62:c2:fc:2d:91:5c:d9:7b:12:ca:b3:58:6d:f3:75:
f5:2d:8e:17:4a:d7:78:fe:e4:d1:77:7f:56:45:bc:
f0:f1:e0:55:c6:9a:d4:82:eb:0b:69:8b:38:1f:29:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4D:92:84:67:77:82:94:2A:73:72:B6:B9:6E:3F:9B:1A:6D:22:5E
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/SE2ShGd3gpQqc3K2uW4_mxptIl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.192.0-62.100.203.255
62.100.212.0/22
62.100.220.0/22
93.188.68.0/22
157.97.145.0/24
185.71.220.0/23
185.92.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:98:87:76:ae:7e:d4:7a:a9:82:6c:36:b1:b0:9e:3f:cd:3e:
cc:06:45:72:f6:ce:09:bc:73:7c:8b:2f:55:c8:a3:80:73:83:
fd:17:63:a5:f7:1e:bf:e6:f6:8d:07:b2:19:60:23:39:ad:3a:
ca:a9:c0:c2:86:fd:4f:4f:aa:ae:a5:0f:84:38:b2:2f:a9:53:
ba:4c:5c:5a:6a:65:53:1c:b9:c7:18:ae:01:8f:5a:22:c4:09:
2b:07:c3:15:5b:8a:e0:09:8f:91:e9:c1:5d:6e:3b:3b:f9:5b:
ac:df:4a:8c:b8:4f:b5:d2:d6:c2:67:c5:5d:89:c7:70:88:bf:
18:0e:25:ec:d1:92:d6:37:c8:87:29:ff:6f:55:f7:e3:81:e2:
c7:e4:11:e7:1e:77:b0:aa:f2:f9:81:cc:f1:dd:7c:19:a4:6c:
2a:73:71:f1:37:68:99:44:39:88:f6:28:69:f8:97:1d:f3:6b:
b1:c6:aa:29:66:58:8b:e5:95:77:fd:90:31:f3:35:e6:59:2a:
79:69:63:a3:d7:a0:83:e0:7f:b1:09:3c:a2:cc:64:8a:08:2d:
1a:53:c5:85:e8:07:fc:16:81:f6:7a:51:63:6f:6f:47:3b:68:
79:70:d4:04:24:41:bb:de:ca:d6:ed:86:90:0c:73:04:9b:93:
f3:36:d9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:31 2025 by rpki-client