Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/8UQe1Q9AVmf_uqESWdSrP1xd3UM.roa
File: 8UQe1Q9AVmf_uqESWdSrP1xd3UM.roa (raw, json)
Hash identifier: UZZ5WVIjWWMNqGivKaRD5lm+T1bSSOEjr7dSjXQbGNI=
Subject key identifier: F1:44:1E:D5:0F:40:56:67:FF:BA:A1:12:59:D4:AB:3F:5C:5D:DD:43
Certificate issuer: /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial: 01856E0AF6592CD87F18BC784929CAB578FC
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/8UQe1Q9AVmf_uqESWdSrP1xd3UM.roa
Signing time: Sun 01 Jan 2023 15:54:50 +0000
ROA not before: Sun 01 Jan 2023 15:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f6:59:2c:d8:7f:18:bc:78:49:29:ca:b5:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Validity
Not Before: Jan 1 15:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1441ed50f405667ffbaa11259d4ab3f5c5ddd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:46:a5:27:9f:91:af:46:38:0f:b0:2b:0f:
a8:56:bd:f3:d4:0c:31:b3:eb:36:69:ab:7f:5c:1c:
05:7c:c1:7a:df:11:dc:c0:64:b2:a6:99:3f:1a:ff:
b1:26:63:9f:58:ec:6d:85:38:56:c4:5d:1c:5a:42:
1e:2d:88:76:29:48:e8:be:9b:67:83:73:3f:12:dd:
46:a4:e2:b5:06:f3:eb:10:b9:a5:e2:75:30:4e:af:
3e:7a:0a:13:10:2c:ee:c1:7b:1a:99:e8:b3:2b:3d:
26:90:c6:05:be:17:c2:58:c5:16:09:4a:6e:8c:f0:
68:e5:f9:a4:b2:97:df:31:d9:2c:86:1e:fb:bd:58:
bb:7b:0a:fd:63:5d:f2:1b:4b:66:bc:5a:19:b1:23:
3d:b4:6e:c9:51:5e:56:3c:74:ac:5b:57:67:d2:52:
45:a9:19:30:cc:b6:43:3b:cc:3c:72:60:bd:cf:c4:
f3:b8:d9:e5:64:c5:47:e5:66:36:eb:f3:7f:92:0e:
3d:ee:54:db:2b:52:81:f7:c5:90:61:05:3e:e0:73:
04:66:03:3a:dc:06:ad:24:9a:ba:8a:d7:82:41:8e:
92:4b:a3:68:a2:5c:ed:2b:90:68:0f:fb:2a:02:54:
01:a9:f2:b6:37:83:c7:00:cf:09:e6:08:94:80:d1:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:44:1E:D5:0F:40:56:67:FF:BA:A1:12:59:D4:AB:3F:5C:5D:DD:43
X509v3 Authority Key Identifier:
keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/8UQe1Q9AVmf_uqESWdSrP1xd3UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
83:94:1f:ed:34:d7:25:45:78:fa:ac:12:f4:cc:f6:5a:15:01:
8f:65:c1:b2:39:fd:6c:1e:f3:21:a9:67:75:9d:5d:20:10:8f:
71:7d:e4:f2:83:39:7c:0c:98:e9:28:9e:27:70:06:2b:25:55:
95:cb:ef:99:ac:fa:52:ca:1d:1f:f9:e5:f7:31:03:97:dd:b2:
b3:da:1d:09:6a:b7:ab:f9:ee:12:71:20:a5:28:88:0d:91:12:
94:22:86:1d:e4:03:b7:3b:ea:00:ac:5a:0b:2c:2a:7f:5c:f6:
65:79:c8:fe:e5:91:9c:6b:7d:86:51:09:d0:df:2d:bd:3b:c2:
65:9d:9e:8c:46:ec:24:08:f4:d9:ad:84:22:e3:92:5a:a7:fe:
0c:95:89:a0:f7:07:08:f8:84:ae:61:69:4b:2c:8d:fd:eb:da:
24:bd:7f:34:35:e4:ea:94:ad:ef:1c:98:96:fb:ec:83:24:93:
aa:45:4e:8f:60:d6:5f:01:7a:a2:7d:b1:4d:8f:01:7a:92:7a:
7d:b6:82:9a:a1:2b:55:90:d4:61:77:8c:18:8f:b9:70:fe:97:
72:ec:2b:72:58:84:1f:43:05:d7:bb:84:e5:f5:1a:0a:62:29:
19:d8:f7:1f:d6:bd:1e:e8:7b:ac:4d:3e:af:6c:15:3d:ea:a1:
d5:e3:7f:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuCvZZLNh/GLx4SSnKtXj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjUxMzViMmZlZDkxMDY1OWZlNzc1YTRiMTFhNTllZWZl
YTVlMmUwHhcNMjMwMTAxMTU1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTQ0MWVkNTBmNDA1NjY3ZmZiYWExMTI1OWQ0YWIzZjVjNWRkZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWtGpSefka9GOA+wKw+oVr3z1Awx
s+s2aat/XBwFfMF63xHcwGSyppk/Gv+xJmOfWOxthThWxF0cWkIeLYh2KUjovptn
g3M/Et1GpOK1BvPrELml4nUwTq8+egoTECzuwXsameizKz0mkMYFvhfCWMUWCUpu
jPBo5fmkspffMdkshh77vVi7ewr9Y13yG0tmvFoZsSM9tG7JUV5WPHSsW1dn0lJF
qRkwzLZDO8w8cmC9z8TzuNnlZMVH5WY26/N/kg497lTbK1KB98WQYQU+4HMEZgM6
3AatJJq6iteCQY6SS6NoolztK5BoD/sqAlQBqfK2N4PHAM8J5giUgNHn7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFEHtUPQFZn/7qhElnUqz9cXd1DMB8GA1UdIwQY
MBaAFLhlE1sv7ZEGWf53WksRpZ7v6l4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdVVFd5X3RrUVpaX25kYVN4R2xudV9xWGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85NTU5NTktZDUyYi00MDM0LWIwYjkt
NjM5ZTUyZDExMTg3LzEvOFVRZTFROUFWbWZfdXFFU1dkU3JQMXhkM1VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85NTU5NTktZDUyYi00MDM0LWIwYjktNjM5ZTUyZDExMTg3
LzEvdUdVVFd5X3RrUVpaX25kYVN4R2xudV9xWGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpUMA0G
CSqGSIb3DQEBCwUAA4IBAQCDlB/tNNclRXj6rBL0zPZaFQGPZcGyOf1sHvMhqWd1
nV0gEI9xfeTygzl8DJjpKJ4ncAYrJVWVy++ZrPpSyh0f+eX3MQOX3bKz2h0Jarer
+e4ScSClKIgNkRKUIoYd5AO3O+oArFoLLCp/XPZlecj+5ZGca32GUQnQ3y29O8Jl
nZ6MRuwkCPTZrYQi45Jap/4MlYmg9wcI+ISuYWlLLI3969okvX80NeTqlK3vHJiW
++yDJJOqRU6PYNZfAXqifbFNjwF6knp9toKaoStVkNRhd4wYj7lw/pdy7CtyWIQf
QwXXu4Tl9RoKYikZ2Pcf1r0e6HusTT6vbBU96qHV43+h
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:13 2025 by rpki-client