Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/wz8UbUwzL3_klN4f7OgBtXQAE0o.roa
File: wz8UbUwzL3_klN4f7OgBtXQAE0o.roa (raw, json)
Hash identifier: tVZRRH50Unry3OLtaAmUSG+/0ObBliH9W0a4ti8eLaM=
Subject key identifier: C3:3F:14:6D:4C:33:2F:7F:E4:94:DE:1F:EC:E8:01:B5:74:00:13:4A
Certificate issuer: /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial: 0194221FA3A937019959CA1A9C0D31A20867
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/wz8UbUwzL3_klN4f7OgBtXQAE0o.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209665
IP address blocks: 62.32.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a3:a9:37:01:99:59:ca:1a:9c:0d:31:a2:08:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c33f146d4c332f7fe494de1fece801b57400134a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:61:64:28:f1:6a:ae:99:a8:1d:51:1a:d1:
5c:0c:05:8c:9b:23:4f:0c:66:2e:17:6e:8b:a9:bc:
e7:61:68:35:85:1e:3d:9f:33:21:14:54:9a:8a:74:
ce:be:bc:ec:64:52:26:1a:75:06:70:53:71:b8:44:
61:41:89:c0:27:21:fc:b4:55:cc:e6:f8:f7:58:31:
b5:0e:18:bb:8d:a9:40:1f:b4:e8:45:bd:e1:40:0c:
de:3d:99:ca:dc:84:aa:77:77:9c:92:75:16:6a:9f:
40:32:9c:01:e1:a9:bb:2f:d5:6f:17:64:54:95:7a:
1a:93:40:cb:09:d4:b2:ac:a1:95:f9:ed:6a:0c:fc:
b2:1e:9f:84:05:00:f9:f4:90:20:25:09:46:07:66:
e3:cd:6c:b0:02:1e:91:96:eb:f5:14:62:60:ac:28:
26:70:84:b2:19:63:a0:1f:9f:ae:23:fe:27:b1:7c:
af:bc:64:e8:09:a0:64:08:36:13:2d:f6:75:96:90:
da:39:ef:4e:ab:6c:d3:aa:c5:e3:70:9a:ee:8f:b0:
27:a2:43:31:6c:7c:c5:d1:e3:91:6f:bb:c7:d5:36:
ea:fd:26:0c:db:bc:38:e8:90:d8:0b:37:99:21:ed:
4e:c5:1e:93:a8:12:01:fb:c9:05:12:3f:1a:1d:fd:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3F:14:6D:4C:33:2F:7F:E4:94:DE:1F:EC:E8:01:B5:74:00:13:4A
X509v3 Authority Key Identifier:
keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/wz8UbUwzL3_klN4f7OgBtXQAE0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.78.0/24
Signature Algorithm: sha256WithRSAEncryption
40:77:00:ba:b7:fc:3a:b0:2c:43:51:e5:ed:a4:f7:7a:60:18:
73:26:15:8c:9a:54:c7:94:d2:74:27:a0:7c:6d:56:a3:db:26:
f1:0f:d3:4c:45:74:94:e0:ff:20:ae:56:d6:fd:90:4d:a8:6d:
50:1c:d8:c7:de:6f:8b:e9:6e:c4:69:72:cb:b4:04:a5:2b:3f:
d1:68:ce:3a:1f:62:d7:e2:03:dc:34:1a:f9:a0:2e:65:43:2d:
ef:a9:75:0f:fe:dd:1d:c6:66:ca:5f:69:f4:7a:81:4a:90:28:
14:55:7c:93:d8:f8:d4:9d:d0:91:61:10:64:93:88:9c:29:0b:
e5:cc:e1:7a:2c:42:33:7f:92:4e:fa:b2:46:ef:12:d2:cc:93:
fe:ac:c8:cf:fb:b7:18:b2:ca:a5:35:51:a3:18:62:42:51:15:
bd:98:8e:2d:db:4a:e7:e4:f8:eb:a2:fc:2e:f3:80:56:73:a4:
8d:10:c7:5d:14:06:ac:a7:ac:31:48:22:2e:97:1d:6a:3b:36:
b7:c1:67:52:2b:b6:bb:c4:0f:0f:4c:fb:c9:43:22:b2:6a:1e:
8e:7e:73:2a:f8:f8:c2:98:66:b5:bb:05:7a:94:81:89:dc:26:
6f:18:12:87:ef:a2:e2:fe:71:81:b6:2b:b8:81:7c:07:1f:8b:
a3:d2:c8:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH6OpNwGZWcoanA0xoghnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZTc2Y2E4NWU5NjU0MWE1YWRkM2NhY2FmMWU1ZTExNGZh
YTQ3ZWYwHhcNMjUwMTAxMTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzNmMTQ2ZDRjMzMyZjdmZTQ5NGRlMWZlY2U4MDFiNTc0MDAxMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiphZCjxaq6ZqB1RGtFcDAWMmyNP
DGYuF26LqbznYWg1hR49nzMhFFSainTOvrzsZFImGnUGcFNxuERhQYnAJyH8tFXM
5vj3WDG1Dhi7jalAH7ToRb3hQAzePZnK3ISqd3ecknUWap9AMpwB4am7L9VvF2RU
lXoak0DLCdSyrKGV+e1qDPyyHp+EBQD59JAgJQlGB2bjzWywAh6Rluv1FGJgrCgm
cISyGWOgH5+uI/4nsXyvvGToCaBkCDYTLfZ1lpDaOe9Oq2zTqsXjcJruj7AnokMx
bHzF0eORb7vH1Tbq/SYM27w46JDYCzeZIe1OxR6TqBIB+8kFEj8aHf0LzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMM/FG1MMy9/5JTeH+zoAbV0ABNKMB8GA1UdIwQY
MBaAFP3nbKhellQaWt08rK8eXhFPqkfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mODUyYWMtOWU5OC00NWI3LTg3N2Yt
MjI5ZTJjYjBmNjZjLzEvd3o4VWJVd3pMM19rbE40ZjdPZ0J0WFFBRTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mODUyYWMtOWU5OC00NWI3LTg3N2YtMjI5ZTJjYjBmNjZj
LzEvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPiBOMA0G
CSqGSIb3DQEBCwUAA4IBAQBAdwC6t/w6sCxDUeXtpPd6YBhzJhWMmlTHlNJ0J6B8
bVaj2ybxD9NMRXSU4P8grlbW/ZBNqG1QHNjH3m+L6W7EaXLLtASlKz/RaM46H2LX
4gPcNBr5oC5lQy3vqXUP/t0dxmbKX2n0eoFKkCgUVXyT2PjUndCRYRBkk4icKQvl
zOF6LEIzf5JO+rJG7xLSzJP+rMjP+7cYssqlNVGjGGJCURW9mI4t20rn5Pjrovwu
84BWc6SNEMddFAasp6wxSCIulx1qOza3wWdSK7a7xA8PTPvJQyKyah6OfnMq+PjC
mGa1uwV6lIGJ3CZvGBKH76Li/nGBtiu4gXwHH4uj0sgH
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:03 2025 by rpki-client