Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/6TknrlKhj_raOY5i61r4APdWgi8.roa
File: 6TknrlKhj_raOY5i61r4APdWgi8.roa (raw, json)
Hash identifier: Azh2w6lu1iMwNp36BaIHM3fgEc2SSAdGdIuaWOlC4bU=
Subject key identifier: E9:39:27:AE:52:A1:8F:FA:DA:39:8E:62:EB:5A:F8:00:F7:56:82:2F
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 019424447F9F1B9D2BE740393BF487C95DAB
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/6TknrlKhj_raOY5i61r4APdWgi8.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15457
IP address blocks: 62.169.72.0/22 maxlen: 22
62.169.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:7f:9f:1b:9d:2b:e7:40:39:3b:f4:87:c9:5d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e93927ae52a18ffada398e62eb5af800f756822f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:5f:70:c3:d8:7b:af:c0:4d:4e:16:21:e4:
9f:57:7d:f3:ad:0a:df:b3:8e:73:45:0b:16:64:bb:
c4:40:81:18:d7:21:2d:50:98:84:11:07:b1:17:4b:
25:8a:9f:c1:9e:76:a9:7e:fc:c9:c9:ff:ea:89:5e:
af:b1:8d:d9:33:3c:84:2e:aa:aa:25:01:59:62:92:
b5:19:4a:21:7c:c4:ad:22:4e:31:31:a0:cc:ec:90:
df:6d:1d:e7:c3:e6:29:04:82:95:c5:5d:28:a0:4b:
2c:26:61:d2:87:14:2d:d0:84:bb:5a:5b:4b:64:08:
43:f1:9f:7a:b5:35:12:0d:f9:8c:fa:33:50:e5:c2:
89:ea:61:f4:77:ac:0d:6e:20:08:0d:e9:51:b9:b7:
59:e4:44:f5:b1:f6:27:ac:60:5c:c3:df:5e:c2:db:
59:c9:af:8b:06:b6:d8:cc:3d:76:86:af:00:ae:f8:
f5:53:70:64:ef:1d:b3:5e:84:89:c2:1a:51:7a:ee:
f6:67:00:87:0b:30:a7:29:5a:43:f0:f4:64:83:79:
39:33:2d:6d:45:5b:cb:c4:5e:90:95:31:f2:e7:3c:
3d:3f:f6:94:20:f4:76:f8:09:fa:b5:9f:98:aa:3b:
01:54:ab:49:bd:67:96:01:a2:7b:77:94:4c:bc:4d:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:27:AE:52:A1:8F:FA:DA:39:8E:62:EB:5A:F8:00:F7:56:82:2F
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/6TknrlKhj_raOY5i61r4APdWgi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.72.0/22
62.169.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:92:07:34:b5:21:9c:2a:89:92:61:f7:1b:e7:70:35:b1:ab:
5e:2f:26:28:92:10:7c:b9:e1:73:1f:8d:26:13:1c:c6:33:36:
fb:ff:8c:9c:ae:68:87:ee:25:a2:4c:7b:e2:06:fd:e7:5a:e5:
6d:05:78:60:43:df:ce:9d:76:a3:55:8d:af:42:0f:a2:4a:30:
2a:9f:84:ea:72:e0:72:d4:ef:33:6c:25:01:ac:6e:16:95:db:
f7:e3:93:52:0a:03:83:d3:8a:99:5d:d9:8b:91:03:b9:b4:74:
9f:75:b1:93:8b:b1:71:28:fd:80:3a:9a:62:fe:63:94:d6:65:
65:db:f6:67:4b:c9:2f:e9:64:7a:7f:f6:d6:4c:2b:9f:ca:97:
c5:df:28:6a:36:f1:5f:e8:42:56:6b:be:3d:8b:23:2f:be:a5:
ae:c2:a4:0e:b9:fe:3d:46:00:94:c0:e2:94:a4:3b:66:d4:c3:
72:83:75:27:d8:71:02:9f:bf:4a:09:2f:8b:fd:fa:1d:ef:73:
ee:3f:af:00:86:be:24:7f:03:7f:89:17:fe:6a:21:88:77:04:
ec:b2:7d:7e:33:c9:65:f2:ca:b2:28:4e:4e:6f:63:85:6b:ee:
db:56:ee:82:c7:ad:a5:9d:90:4c:ad:2b:95:b9:2f:3c:82:35:
e8:17:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:43:37 2025 by rpki-client