Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/CpPijEmYlerTV19r3A6mYbWd_7U.roa
File: CpPijEmYlerTV19r3A6mYbWd_7U.roa (raw, json)
Hash identifier: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=
Subject key identifier: 0A:93:E2:8C:49:98:95:EA:D3:57:5F:6B:DC:0E:A6:61:B5:9D:FF:B5
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 01942522276CD36F935D8E5BE577580BA6D9
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/CpPijEmYlerTV19r3A6mYbWd_7U.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5618
IP address blocks: 62.193.3.0/24 maxlen: 24
62.193.4.0/24 maxlen: 24
62.193.5.0/24 maxlen: 24
62.193.6.0/24 maxlen: 24
62.193.7.0/24 maxlen: 24
62.193.12.0/23 maxlen: 23
62.193.13.0/24 maxlen: 24
62.193.14.0/23 maxlen: 23
62.193.14.0/24 maxlen: 24
62.193.15.0/24 maxlen: 24
62.193.16.0/24 maxlen: 24
62.193.17.0/24 maxlen: 24
62.193.18.0/24 maxlen: 24
62.193.20.0/24 maxlen: 24
62.193.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:27:6c:d3:6f:93:5d:8e:5b:e5:77:58:0b:a6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a93e28c499895ead3575f6bdc0ea661b59dffb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:56:01:a6:11:57:0d:c8:42:53:fd:65:39:
c3:cd:d3:0f:56:c2:4c:d5:bb:d9:bb:ca:72:5a:24:
a4:6d:1b:6e:74:65:ab:a0:8d:69:48:48:fd:82:5e:
4d:46:36:3e:b1:47:0f:f5:2f:d7:bf:9e:9f:41:2a:
2c:3a:8d:9b:bc:c3:39:6f:2a:5a:0e:b1:b2:1b:eb:
fc:18:af:b3:88:15:7e:69:d6:06:3a:7f:fd:87:58:
23:44:d6:5a:b4:14:be:84:97:7b:92:83:30:78:e1:
36:d9:b9:91:36:69:16:84:83:02:8b:d1:79:28:10:
1d:39:47:18:24:43:84:d7:af:13:6c:6c:4c:3c:82:
45:a7:d7:c5:31:57:b6:24:d8:53:f7:34:96:d5:5c:
be:d9:50:7f:5b:19:49:8e:16:40:28:06:56:b6:9e:
6b:eb:ce:79:c5:09:81:f3:ee:12:2d:8d:59:34:e4:
4b:51:a0:e5:96:55:65:c9:86:fb:a3:e8:cb:79:93:
47:bb:9d:e3:ab:02:cc:40:cb:af:85:60:08:ac:c2:
63:e4:f4:77:e3:28:a1:46:54:42:3f:5a:3d:a8:91:
b9:d6:59:de:dc:ae:1f:36:e4:48:01:21:12:9a:47:
fa:64:98:97:13:b2:8d:49:cd:90:81:7d:61:02:8b:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:93:E2:8C:49:98:95:EA:D3:57:5F:6B:DC:0E:A6:61:B5:9D:FF:B5
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/CpPijEmYlerTV19r3A6mYbWd_7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.3.0-62.193.7.255
62.193.12.0-62.193.18.255
62.193.20.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:e7:ad:c5:73:a8:24:d9:a1:72:a3:90:99:e4:2c:ff:39:7f:
02:da:ef:51:5b:a9:22:cb:ec:78:e0:67:cc:89:77:58:a6:41:
9e:10:16:da:ed:86:56:bd:58:7e:73:96:bd:b5:33:b3:6d:15:
fa:6c:13:75:ac:f8:6c:0f:60:6c:91:99:a7:74:4d:59:1b:98:
0d:be:39:c5:cb:31:17:9b:c7:c2:de:f5:be:53:81:49:e9:61:
9a:a6:d1:b3:1e:c5:b0:d2:5f:df:94:47:e2:fc:f4:39:e4:41:
42:6f:d6:2b:48:4a:56:60:31:4e:ce:08:24:f2:b9:63:15:10:
41:fa:6b:7c:5e:58:a8:60:08:6b:4e:91:ac:91:64:44:ff:71:
61:05:43:d0:ea:0d:eb:5e:14:e5:05:79:16:ff:84:77:51:53:
eb:03:45:31:e1:f2:5f:40:cd:14:4f:a9:9d:db:c3:bc:b7:43:
06:be:41:9d:e0:5d:9c:32:9d:45:66:8d:0f:51:5e:df:ae:9c:
a9:f5:47:41:fd:95:f3:73:01:4d:75:ed:b7:b3:84:40:77:5f:
d8:5d:8f:a8:a6:f4:0d:fd:a1:f4:2c:0d:9a:83:46:f3:35:67:
a3:5f:20:c1:61:12:a7:7a:b4:36:c7:7e:f5:21:8a:ab:b1:8e:
53:55:a3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:49 2025 by rpki-client