Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/z8Qgne-FkfA3KYq3e01ob5TLZp0.roa
File: z8Qgne-FkfA3KYq3e01ob5TLZp0.roa (raw, json)
Hash identifier: 7fco4lzAt1GZtpXkjpIq4UVmOihkqjl0I1nfOSI77gY=
Subject key identifier: CF:C4:20:9D:EF:85:91:F0:37:29:8A:B7:7B:4D:68:6F:94:CB:66:9D
Certificate issuer: /CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Certificate serial: 019422FBE035FF08E89D5FCE6A809779E9A8
Authority key identifier: 86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/z8Qgne-FkfA3KYq3e01ob5TLZp0.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15869
IP address blocks: 62.3.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e0:35:ff:08:e8:9d:5f:ce:6a:80:97:79:e9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfc4209def8591f037298ab77b4d686f94cb669d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:79:54:85:91:08:9a:cf:57:6f:d7:0f:8a:
05:11:61:a1:35:be:75:c7:ae:6e:44:4d:ef:43:b1:
6b:7f:fe:a6:db:17:fc:7c:e3:67:c3:e9:8d:4d:74:
a7:5d:77:4b:7b:88:12:3a:76:80:e6:cc:c9:2a:42:
66:18:a4:cf:c5:48:b8:51:48:e0:c1:53:d3:06:39:
0c:e4:44:63:9a:2d:84:1a:8d:66:12:e8:97:5f:f5:
a9:a0:22:25:fe:a9:9d:a3:16:63:ff:f8:11:89:ca:
e8:eb:8c:e2:75:67:c2:fb:4d:aa:80:c0:3c:96:96:
42:44:30:be:fe:8a:06:30:de:99:bc:81:44:cf:66:
38:46:ec:1a:b3:12:92:a4:e8:a0:64:7b:e5:3a:16:
cb:47:9b:51:f2:7d:49:bf:42:25:6e:de:ce:6b:2f:
01:34:bd:4a:46:46:ee:a0:93:21:80:19:b0:dc:70:
a7:0b:d1:cd:07:60:49:06:14:22:a2:01:6a:48:05:
cc:f8:61:32:bd:e0:d2:eb:c6:1e:14:7a:16:b0:e9:
9c:2f:81:b6:bd:2b:f9:61:59:34:f4:f1:93:5a:08:
30:be:3d:b1:a7:53:7d:d5:d9:0b:3a:75:82:fc:ce:
33:bb:e3:d8:5f:ac:00:bd:d5:f5:03:f6:3a:47:7e:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:20:9D:EF:85:91:F0:37:29:8A:B7:7B:4D:68:6F:94:CB:66:9D
X509v3 Authority Key Identifier:
keyid:86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/z8Qgne-FkfA3KYq3e01ob5TLZp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.128.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:8e:3b:b4:c7:26:9c:1e:b8:09:6e:50:5b:7d:6b:dc:be:95:
da:b7:17:5b:8c:2f:e0:b9:8b:4f:bb:69:5f:1d:e1:fe:62:db:
54:f8:f1:68:b3:6a:c7:c1:0e:b7:02:42:38:b9:a5:d0:58:ec:
9a:a2:f7:66:7b:a5:b0:49:f7:28:40:34:3d:6c:c7:16:f3:e0:
4a:37:b6:0a:dd:41:62:da:a0:75:ce:16:16:df:4f:9c:6d:a4:
94:7e:6c:c0:e0:4a:77:ac:99:8d:f7:93:0f:3a:7b:8c:98:b5:
f7:60:4d:bd:e2:51:75:6c:4d:47:99:38:c2:04:44:9f:7c:81:
a9:58:55:89:d9:62:4b:3a:82:66:8a:f0:e5:0a:22:70:d0:30:
81:fa:0c:91:74:4c:3f:4a:e9:dd:c1:31:99:1a:b4:6b:ca:cf:
d1:49:61:4c:46:fc:c2:6a:52:0d:10:74:10:9b:c3:bf:86:cc:
d1:dc:4b:a1:9c:be:dc:8a:be:e4:8c:ab:89:2d:0e:84:d8:37:
2e:f1:76:b6:48:d5:79:0e:5c:68:55:0c:15:82:40:ee:93:f2:
28:75:d3:61:b8:e1:b7:e6:60:28:36:a6:82:b9:4e:e7:67:dd:
4c:74:4a:79:88:a5:5c:b2:60:0a:95:b6:25:a4:86:61:f6:54:
77:7e:c0:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi++A1/wjonV/OaoCXeemoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTM2NTUzMjZiMDQ3MmM4NjZjNWM5OTMwMmUyYjJkNzhj
YmRkZjcwHhcNMjUwMTAxMTc0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmM0MjA5ZGVmODU5MWYwMzcyOThhYjc3YjRkNjg2Zjk0Y2I2NjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1595VIWRCJrPV2/XD4oFEWGhNb51
x65uRE3vQ7Frf/6m2xf8fONnw+mNTXSnXXdLe4gSOnaA5szJKkJmGKTPxUi4UUjg
wVPTBjkM5ERjmi2EGo1mEuiXX/WpoCIl/qmdoxZj//gRicro64zidWfC+02qgMA8
lpZCRDC+/ooGMN6ZvIFEz2Y4RuwasxKSpOigZHvlOhbLR5tR8n1Jv0Ilbt7Oay8B
NL1KRkbuoJMhgBmw3HCnC9HNB2BJBhQiogFqSAXM+GEyveDS68YeFHoWsOmcL4G2
vSv5YVk09PGTWggwvj2xp1N91dkLOnWC/M4zu+PYX6wAvdX1A/Y6R37z/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM/EIJ3vhZHwNymKt3tNaG+Uy2adMB8GA1UdIwQY
MBaAFIaTZVMmsEcshmxcmTAuKy14y933MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBObFV5YXdSeXlHYkZ5Wk1DNHJMWGpMM2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kYWMzMzctODA3OS00M2JmLTlmZTEt
OWU2NzcyZWQzOWE2LzEvejhRZ25lLUZrZkEzS1lxM2UwMW9iNVRMWnAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kYWMzMzctODA3OS00M2JmLTlmZTEtOWU2NzcyZWQzOWE2
LzEvaHBObFV5YXdSeXlHYkZ5Wk1DNHJMWGpMM2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPgOAMA0G
CSqGSIb3DQEBCwUAA4IBAQAMjju0xyacHrgJblBbfWvcvpXatxdbjC/guYtPu2lf
HeH+YttU+PFos2rHwQ63AkI4uaXQWOyaovdme6WwSfcoQDQ9bMcW8+BKN7YK3UFi
2qB1zhYW30+cbaSUfmzA4Ep3rJmN95MPOnuMmLX3YE294lF1bE1HmTjCBESffIGp
WFWJ2WJLOoJmivDlCiJw0DCB+gyRdEw/SundwTGZGrRrys/RSWFMRvzCalINEHQQ
m8O/hszR3EuhnL7cir7kjKuJLQ6E2Dcu8Xa2SNV5DlxoVQwVgkDuk/IoddNhuOG3
5mAoNqaCuU7nZ91MdEp5iKVcsmAKlbYlpIZh9lR3fsAB
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:52 2025 by rpki-client