Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/8AaX1oZur1xLUT7FOH4w1HiClyE.roa
File: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (raw, json)
Hash identifier: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=
Subject key identifier: F0:06:97:D6:86:6E:AF:5C:4B:51:3E:C5:38:7E:30:D4:78:82:97:21
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 01942143DE83F13F3902B5B669E3A760D794
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/8AaX1oZur1xLUT7FOH4w1HiClyE.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31349
IP address blocks: 62.201.16.0/20 maxlen: 24
185.185.128.0/22 maxlen: 24
2a06:8080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:de:83:f1:3f:39:02:b5:b6:69:e3:a7:60:d7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f00697d6866eaf5c4b513ec5387e30d478829721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:77:46:df:d1:5f:8f:e3:81:46:5d:60:8e:
17:a9:8d:3f:0c:20:9d:54:0d:2f:db:9a:32:31:9a:
41:75:a5:98:5f:26:d0:9f:f6:5a:9a:48:f4:e3:9b:
be:64:83:ae:a0:8d:a6:04:bb:90:f9:ab:b0:5e:ac:
66:b4:36:b2:d4:5d:a0:4e:95:e5:52:b6:2d:b9:00:
a9:29:7d:43:de:40:30:a4:94:c9:d6:53:2c:aa:e8:
74:b0:af:19:da:1a:f6:09:2b:a8:60:76:a4:6b:b7:
45:22:63:e7:91:a7:9f:ee:fd:84:52:ef:57:85:72:
51:b7:a7:1d:51:d8:67:53:d0:e5:52:47:3b:18:5a:
d5:63:b4:92:07:86:da:fd:5c:ca:8a:be:b4:59:e0:
0c:cf:23:3f:ed:88:f8:2f:ee:40:c0:c0:a6:71:54:
ec:01:77:f9:87:23:69:df:c8:f8:35:6c:e6:74:e6:
7e:9d:33:f7:5d:d0:ef:d7:a5:bf:08:10:a1:e8:88:
2b:b1:49:25:cc:87:e6:b8:ba:97:dc:2b:54:da:05:
08:1f:b6:9f:cc:a4:82:78:ce:ae:11:9d:5a:cb:19:
6a:7e:ec:a4:e8:61:eb:8b:2d:5d:d3:fa:9f:8b:09:
d7:57:02:43:87:a9:3f:39:49:9e:47:f0:87:5c:d5:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:06:97:D6:86:6E:AF:5C:4B:51:3E:C5:38:7E:30:D4:78:82:97:21
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/8AaX1oZur1xLUT7FOH4w1HiClyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.16.0/20
185.185.128.0/22
IPv6:
2a06:8080::/29
Signature Algorithm: sha256WithRSAEncryption
6f:0b:b1:39:1c:95:96:c6:fa:7c:d7:76:39:00:ec:98:b3:0c:
56:bb:50:2a:6d:e9:cd:1d:c4:9d:7b:dd:71:84:be:d4:64:b3:
d1:18:ad:c3:df:7f:39:25:95:61:8f:00:75:ec:c2:ea:d2:cf:
8c:32:db:fc:38:0d:ea:ab:c6:3c:0a:0b:04:e4:86:31:45:cf:
93:51:d9:39:04:1f:2e:07:84:91:1d:a6:6a:08:73:48:77:a1:
f1:51:f4:0c:37:af:77:8d:06:30:5e:10:7f:38:a1:09:8e:b3:
33:de:46:8a:1e:c2:48:9c:8f:4a:95:00:b0:a9:93:e5:1a:5e:
b7:77:9c:84:b8:23:19:52:1e:90:0b:20:24:46:e9:50:9e:b2:
b3:2d:64:51:b7:b8:c1:05:ce:d0:75:ec:cb:fa:2f:eb:c1:fc:
31:9a:1a:72:fa:c4:bf:ff:c8:c0:6a:96:da:63:fa:6f:e6:bb:
df:29:c3:b7:7a:12:27:66:b6:03:85:3f:90:b4:f0:4f:3a:eb:
cd:f3:47:7b:f4:b9:ef:23:4a:58:88:c4:cb:ac:55:58:4d:35:
5a:15:b9:d1:03:bf:36:72:86:77:23:10:05:4f:2e:f8:5b:ad:
15:63:d3:74:6b:31:59:bb:04:03:75:1d:f6:0a:ee:3c:b1:ba:
15:3d:e8:b0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQhQ96D8T85ArW2aeOnYNeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjlhNmQyZjZjZDU4OGE3N2Y0MjM2MjJlNmI4ZDFjNjU0
YmNkZjIwHhcNMjUwMTAxMDk0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDA2OTdkNjg2NmVhZjVjNGI1MTNlYzUzODdlMzBkNDc4ODI5NzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn93Rt/RX4/jgUZdYI4XqY0/DCCd
VA0v25oyMZpBdaWYXybQn/Zamkj045u+ZIOuoI2mBLuQ+auwXqxmtDay1F2gTpXl
UrYtuQCpKX1D3kAwpJTJ1lMsquh0sK8Z2hr2CSuoYHaka7dFImPnkaef7v2EUu9X
hXJRt6cdUdhnU9DlUkc7GFrVY7SSB4ba/VzKir60WeAMzyM/7Yj4L+5AwMCmcVTs
AXf5hyNp38j4NWzmdOZ+nTP3XdDv16W/CBCh6IgrsUklzIfmuLqX3CtU2gUIH7af
zKSCeM6uEZ1ayxlqfuyk6GHriy1d0/qfiwnXVwJDh6k/OUmeR/CHXNVOHQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPAGl9aGbq9cS1E+xTh+MNR4gpchMB8GA1UdIwQY
MBaAFMz5ptL2zViKd/QjYi5rjRxlS83yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUt
MWIwZjI1NGRlNjE5LzEvOEFhWDFvWnVyMXhMVVQ3Rk9INHcxSGlDbHlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUtMWIwZjI1NGRlNjE5
LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEPskQAwQC
ubmAMA0EAgACMAcDBQMqBoCAMA0GCSqGSIb3DQEBCwUAA4IBAQBvC7E5HJWWxvp8
13Y5AOyYswxWu1AqbenNHcSde91xhL7UZLPRGK3D3385JZVhjwB17MLq0s+MMtv8
OA3qq8Y8CgsE5IYxRc+TUdk5BB8uB4SRHaZqCHNId6HxUfQMN693jQYwXhB/OKEJ
jrMz3kaKHsJInI9KlQCwqZPlGl63d5yEuCMZUh6QCyAkRulQnrKzLWRRt7jBBc7Q
dezL+i/rwfwxmhpy+sS//8jAapbaY/pv5rvfKcO3ehInZrYDhT+QtPBPOuvN80d7
9LnvI0pYiMTLrFVYTTVaFbnRA782coZ3IxAFTy74W60VY9N0azFZuwQDdR32Cu48
sboVPeiw
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:53:07 2025 by rpki-client