Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/HJZuFg-aBDGic40vRoWhakH94Zo.roa
File: HJZuFg-aBDGic40vRoWhakH94Zo.roa (raw, json)
Hash identifier: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=
Subject key identifier: 1C:96:6E:16:0F:9A:04:31:A2:73:8D:2F:46:85:A1:6A:41:FD:E1:9A
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 019425FBF6A2A95AC3295EF885C47BECC7A2
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/HJZuFg-aBDGic40vRoWhakH94Zo.roa
Signing time: Thu 02 Jan 2025 07:47:37 +0000
ROA not before: Thu 02 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208432
IP address blocks: 62.122.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f6:a2:a9:5a:c3:29:5e:f8:85:c4:7b:ec:c7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Jan 2 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c966e160f9a0431a2738d2f4685a16a41fde19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:de:1b:97:dd:64:7c:d1:21:cc:5d:0a:c3:
cb:3a:a9:66:e4:6d:df:61:68:59:97:8b:0d:f1:38:
4e:68:bf:05:bc:31:1d:05:5f:38:c8:12:d3:a8:f4:
6a:bd:67:da:b8:c1:17:dd:a6:bc:22:be:8e:8f:74:
1b:e2:7e:31:1d:d0:5b:ea:ba:99:c8:13:19:24:80:
ae:2c:1c:8a:be:84:25:e3:9e:5e:71:39:9d:9c:5b:
71:28:9c:7b:a5:a4:86:90:85:24:f0:a6:8d:35:03:
a5:f7:13:83:35:49:94:28:b2:2d:3b:16:88:95:89:
6d:2a:76:9f:f8:52:c4:52:af:91:54:df:c5:b5:1f:
f5:7e:7a:8b:ac:3a:90:49:e4:2c:66:38:bf:ec:d0:
37:7a:ca:2a:77:48:55:9e:72:cb:48:a7:d8:fa:04:
91:b1:c7:25:55:1b:a4:f7:9e:03:8b:02:fc:4b:e7:
b4:1f:41:1b:39:12:7c:e5:7b:b0:22:70:0d:90:df:
b3:8b:cf:3c:4d:ae:86:be:c5:35:f1:af:d3:bf:f0:
1b:54:5f:22:3d:63:3e:f7:1a:07:e7:8d:85:6d:9c:
8d:37:b1:f3:8a:19:f4:5e:a1:fa:2b:87:82:18:89:
07:d8:88:48:95:b4:ee:4c:41:b1:14:da:aa:14:36:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:96:6E:16:0F:9A:04:31:A2:73:8D:2F:46:85:A1:6A:41:FD:E1:9A
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/HJZuFg-aBDGic40vRoWhakH94Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.72.0/22
Signature Algorithm: sha256WithRSAEncryption
14:77:9b:4d:e0:1a:35:68:ed:f4:b0:bb:d1:bb:45:f3:87:c3:
77:1b:04:1a:db:76:57:92:88:f2:a4:c2:af:76:b1:04:74:91:
ce:77:17:d7:41:63:04:11:f8:80:cb:8a:5f:cb:cb:65:5b:04:
ce:a0:cd:40:f5:ba:23:f7:f6:e6:b9:df:fd:25:a0:c1:d1:45:
1a:39:5a:c3:0d:e5:fd:0c:0f:0b:ea:fe:90:7c:6d:d8:97:17:
86:95:b3:c3:37:c8:6e:65:fe:ca:d5:68:52:76:aa:ac:c8:fe:
0e:94:c5:a9:93:8e:64:ab:76:62:3f:31:25:2e:49:82:e0:e4:
b2:a4:d8:d8:bf:c6:d0:cc:c9:45:a8:a3:9f:58:ce:07:3e:24:
7d:45:98:ec:68:4b:6d:9e:3d:40:af:4c:84:75:29:ff:35:9a:
ed:30:8b:b8:f2:b7:2b:ee:88:1f:bb:11:cd:f7:c9:73:2f:42:
f1:f5:6e:71:10:61:4d:a0:5d:b4:de:0b:c9:24:7c:9f:20:c4:
45:b9:ec:1c:a8:2f:f8:dd:b1:26:19:29:71:c6:d0:5a:11:8e:
50:c4:bc:09:4a:fd:17:4d:e2:74:d0:f8:91:16:af:7f:52:a1:
64:44:1e:48:66:1b:13:ec:a0:6a:66:e9:7b:58:83:e3:bc:97:
11:44:a6:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl+/aiqVrDKV74hcR77MeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYTViMmYzNzUyNGMzZDM4ZGM4MGE3MWQ4ZjAwMWVkMmM0
NWU4OWMwHhcNMjUwMTAyMDc0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzk2NmUxNjBmOWEwNDMxYTI3MzhkMmY0Njg1YTE2YTQxZmRlMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP/eG5fdZHzRIcxdCsPLOqlm5G3f
YWhZl4sN8ThOaL8FvDEdBV84yBLTqPRqvWfauMEX3aa8Ir6Oj3Qb4n4xHdBb6rqZ
yBMZJICuLByKvoQl455ecTmdnFtxKJx7paSGkIUk8KaNNQOl9xODNUmUKLItOxaI
lYltKnaf+FLEUq+RVN/FtR/1fnqLrDqQSeQsZji/7NA3esoqd0hVnnLLSKfY+gSR
scclVRuk954DiwL8S+e0H0EbORJ85XuwInANkN+zi888Ta6GvsU18a/Tv/AbVF8i
PWM+9xoH542FbZyNN7Hzihn0XqH6K4eCGIkH2IhIlbTuTEGxFNqqFDZlMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFByWbhYPmgQxonONL0aFoWpB/eGaMB8GA1UdIwQY
MBaAFE6lsvN1JMPTjcgKcdjwAe0sReicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmIt
MzY2YTk3NjFlYTIwLzEvSEpadUZnLWFCREdpYzQwdlJvV2hha0g5NFpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmItMzY2YTk3NjFlYTIw
LzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPnpIMA0G
CSqGSIb3DQEBCwUAA4IBAQAUd5tN4Bo1aO30sLvRu0Xzh8N3GwQa23ZXkojypMKv
drEEdJHOdxfXQWMEEfiAy4pfy8tlWwTOoM1A9boj9/bmud/9JaDB0UUaOVrDDeX9
DA8L6v6QfG3YlxeGlbPDN8huZf7K1WhSdqqsyP4OlMWpk45kq3ZiPzElLkmC4OSy
pNjYv8bQzMlFqKOfWM4HPiR9RZjsaEttnj1Ar0yEdSn/NZrtMIu48rcr7ogfuxHN
98lzL0Lx9W5xEGFNoF203gvJJHyfIMRFuewcqC/43bEmGSlxxtBaEY5QxLwJSv0X
TeJ00PiRFq9/UqFkRB5IZhsT7KBqZul7WIPjvJcRRKac
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:53 2025 by rpki-client