Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d1350b-1b5d-420e-9c61-050cb256367a/1/XqqZaIyUn7xfK4kjktRC2IlLTHU.roa
File: XqqZaIyUn7xfK4kjktRC2IlLTHU.roa (raw, json)
Hash identifier: 3iYH9gJazWIexkRPzSL/sxbNYz3s2FhA8g2N2PeSRGk=
Subject key identifier: 5E:AA:99:68:8C:94:9F:BC:5F:2B:89:23:92:D4:42:D8:89:4B:4C:75
Certificate issuer: /CN=1250c17ee23ef7f35ca4c79d1d7adc87c7810869
Certificate serial: 0185714C263E8F1A59005F1D3E4378626FCA
Authority key identifier: 12:50:C1:7E:E2:3E:F7:F3:5C:A4:C7:9D:1D:7A:DC:87:C7:81:08:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElDBfuI-9_NcpMedHXrch8eBCGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d1350b-1b5d-420e-9c61-050cb256367a/1/XqqZaIyUn7xfK4kjktRC2IlLTHU.roa
Signing time: Mon 02 Jan 2023 07:04:53 +0000
ROA not before: Mon 02 Jan 2023 07:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 62.204.54.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:26:3e:8f:1a:59:00:5f:1d:3e:43:78:62:6f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1250c17ee23ef7f35ca4c79d1d7adc87c7810869
Validity
Not Before: Jan 2 07:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5eaa99688c949fbc5f2b892392d442d8894b4c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:4b:9c:23:62:4d:e4:a9:7a:af:11:6c:b6:
3e:96:05:54:3d:48:29:53:f7:c4:01:e3:26:f4:49:
87:1c:81:32:76:0c:13:bf:5c:b3:bd:4d:6e:71:00:
31:d0:d0:bc:40:aa:46:2a:7d:51:4e:eb:f9:e8:59:
f9:e9:4c:45:85:53:b7:8e:05:39:fe:e8:85:98:ad:
d3:28:d1:db:f2:3b:8f:c2:51:f5:4b:d9:a4:cd:14:
bf:be:f8:fd:7a:ac:73:9f:8d:6a:6f:bf:ce:ba:c7:
2b:9e:77:ca:ab:b0:0c:b2:68:42:27:29:a0:97:bd:
90:3c:a9:a4:3e:90:7d:43:d3:27:97:49:c5:75:68:
53:eb:76:00:99:2e:ff:02:20:b3:60:07:03:62:de:
12:04:7a:58:c5:62:0a:62:32:25:a0:02:5a:fc:7d:
c0:12:7a:b0:31:b9:f0:63:35:89:cf:48:4d:6e:ee:
82:57:89:58:dc:ba:fb:76:a3:95:f7:b1:e7:0f:f7:
11:51:60:a6:3e:15:91:e8:5b:52:e1:96:32:ee:f8:
2e:9f:3c:65:db:f8:aa:93:12:f0:bc:f1:c5:34:bb:
ab:09:7c:5e:2e:a0:dd:fd:30:10:f8:d8:18:a6:7b:
08:0e:2c:86:28:4e:5e:b6:0a:61:e6:f0:57:e6:3a:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:99:68:8C:94:9F:BC:5F:2B:89:23:92:D4:42:D8:89:4B:4C:75
X509v3 Authority Key Identifier:
keyid:12:50:C1:7E:E2:3E:F7:F3:5C:A4:C7:9D:1D:7A:DC:87:C7:81:08:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElDBfuI-9_NcpMedHXrch8eBCGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d1350b-1b5d-420e-9c61-050cb256367a/1/XqqZaIyUn7xfK4kjktRC2IlLTHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d1350b-1b5d-420e-9c61-050cb256367a/1/ElDBfuI-9_NcpMedHXrch8eBCGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6d:6f:53:32:6b:24:1a:6e:94:43:3f:3a:a6:7c:76:a9:ec:
0c:ce:7b:55:c9:ab:fa:78:d6:81:55:29:d0:3d:dd:9b:e9:c3:
63:3c:01:ee:5d:3b:d3:96:3d:fd:f9:56:eb:c1:51:04:a8:16:
19:3b:94:ed:77:3c:b0:df:cd:3a:32:c1:a7:f2:a5:ef:4c:4e:
21:58:bd:78:b6:18:e9:48:5c:27:d4:03:14:96:03:dc:30:3a:
60:1a:a0:95:5f:66:86:df:2d:82:e1:39:7f:7a:86:7f:b5:41:
98:b8:1e:80:98:cb:5d:7a:be:6f:c0:28:8a:4a:e0:79:0a:d9:
7e:53:1d:cf:35:9b:da:06:3e:6a:d2:ac:d6:1b:5c:34:29:ca:
e7:9d:65:49:f4:6c:6e:fa:e9:30:23:0c:cc:ac:81:51:f5:c2:
5f:e3:53:d0:d0:81:ca:45:14:aa:82:e4:f2:19:44:01:ff:7a:
bc:c9:3a:27:c7:7b:6c:7a:83:82:43:b3:a3:51:92:d4:02:7a:
ec:ca:67:7e:f5:a4:75:aa:e5:1f:be:ab:19:07:3c:7b:30:35:
7e:93:56:19:a9:70:e8:a2:8a:df:ef:0f:78:4f:7f:6a:63:94:
0d:a5:19:81:62:d5:2a:0e:1b:f9:a0:a3:c3:03:71:80:57:ca:
cd:b6:57:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxTCY+jxpZAF8dPkN4Ym/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTBjMTdlZTIzZWY3ZjM1Y2E0Yzc5ZDFkN2FkYzg3Yzc4
MTA4NjkwHhcNMjMwMTAyMDcwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWFhOTk2ODhjOTQ5ZmJjNWYyYjg5MjM5MmQ0NDJkODg5NGI0Yzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l9LnCNiTeSpeq8RbLY+lgVUPUgp
U/fEAeMm9EmHHIEydgwTv1yzvU1ucQAx0NC8QKpGKn1RTuv56Fn56UxFhVO3jgU5
/uiFmK3TKNHb8juPwlH1S9mkzRS/vvj9eqxzn41qb7/OuscrnnfKq7AMsmhCJymg
l72QPKmkPpB9Q9Mnl0nFdWhT63YAmS7/AiCzYAcDYt4SBHpYxWIKYjIloAJa/H3A
EnqwMbnwYzWJz0hNbu6CV4lY3Lr7dqOV97HnD/cRUWCmPhWR6FtS4ZYy7vgunzxl
2/iqkxLwvPHFNLurCXxeLqDd/TAQ+NgYpnsIDiyGKE5etgph5vBX5jrKkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF6qmWiMlJ+8XyuJI5LUQtiJS0x1MB8GA1UdIwQY
MBaAFBJQwX7iPvfzXKTHnR163IfHgQhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxEQmZ1SS05X05jcE1lZEhYcmNoOGVCQ0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kMTM1MGItMWI1ZC00MjBlLTljNjEt
MDUwY2IyNTYzNjdhLzEvWHFxWmFJeVVuN3hmSzRramt0UkMySWxMVEhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9kMTM1MGItMWI1ZC00MjBlLTljNjEtMDUwY2IyNTYzNjdh
LzEvRWxEQmZ1SS05X05jcE1lZEhYcmNoOGVCQ0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsw2MA0G
CSqGSIb3DQEBCwUAA4IBAQB+bW9TMmskGm6UQz86pnx2qewMzntVyav6eNaBVSnQ
Pd2b6cNjPAHuXTvTlj39+VbrwVEEqBYZO5Ttdzyw3806MsGn8qXvTE4hWL14thjp
SFwn1AMUlgPcMDpgGqCVX2aG3y2C4Tl/eoZ/tUGYuB6AmMtder5vwCiKSuB5Ctl+
Ux3PNZvaBj5q0qzWG1w0KcrnnWVJ9Gxu+ukwIwzMrIFR9cJf41PQ0IHKRRSqguTy
GUQB/3q8yTonx3tseoOCQ7OjUZLUAnrsymd+9aR1quUfvqsZBzx7MDV+k1YZqXDo
oorf7w94T39qY5QNpRmBYtUqDhv5oKPDA3GAV8rNtldS
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:44 2025 by rpki-client