Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/igSdGGxEDlJInBkhjuw30IYF38g.roa
File: igSdGGxEDlJInBkhjuw30IYF38g.roa (raw, json)
Hash identifier: cM+3cshm2+ECSWTdffQ/M1t1ZWrhZItQnMHHWxOnMTg=
Subject key identifier: 8A:04:9D:18:6C:44:0E:52:48:9C:19:21:8E:EC:37:D0:86:05:DF:C8
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0195616A1FF849B4F6372B1BAF6C4C839451
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/igSdGGxEDlJInBkhjuw30IYF38g.roa
Signing time: Tue 04 Mar 2025 13:48:19 +0000
ROA not before: Tue 04 Mar 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:6a:1f:f8:49:b4:f6:37:2b:1b:af:6c:4c:83:94:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Mar 4 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a049d186c440e52489c19218eec37d08605dfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:3f:85:f6:1f:89:39:24:7b:0a:a3:ed:a4:
37:18:d7:65:a4:92:88:b9:8e:b7:3d:ee:74:29:d9:
33:f2:9e:89:ed:fd:47:1b:b3:84:38:55:fc:81:95:
05:17:68:4e:2d:f5:e4:3b:73:90:00:85:d4:06:86:
91:26:1c:0d:c4:e9:0d:f2:c0:f9:28:ac:06:40:ca:
a7:05:23:35:2f:a6:dc:e4:f8:47:e1:5a:c4:8b:5e:
77:5c:cf:c0:e2:e9:83:db:3e:76:9f:8e:a2:52:b2:
3e:bc:06:b6:49:51:16:22:04:0b:0b:0c:b3:82:1b:
5a:d1:07:6b:c7:27:2a:91:a6:68:01:c5:30:dc:97:
a2:72:44:aa:65:db:16:80:83:72:1e:4b:84:42:a3:
3d:74:b7:0f:f1:d1:04:e5:f3:0c:b9:9c:b0:1a:ea:
f3:a5:eb:2b:33:35:f5:5a:57:9f:c0:2a:51:1a:00:
79:53:a1:ba:95:e6:23:56:07:f4:8c:0c:03:98:48:
14:a8:5c:b3:8a:0c:11:32:3b:8f:45:e4:46:8c:36:
08:39:91:97:49:2c:c9:a3:f8:25:e5:0b:ae:ea:1d:
53:b2:b5:cd:28:27:ba:22:d5:58:6d:3e:a3:4d:3c:
ad:fb:c6:77:1c:fe:76:c5:a6:dc:4d:7f:db:ab:df:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:04:9D:18:6C:44:0E:52:48:9C:19:21:8E:EC:37:D0:86:05:DF:C8
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/igSdGGxEDlJInBkhjuw30IYF38g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.62.64.0/18
103.199.184.0/22
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a0:9f:a1:68:a2:25:d1:a7:0b:1b:98:19:8c:82:75:69:f1:
08:44:33:e4:95:3d:c5:f2:c3:1a:e2:75:a3:98:dc:c4:c9:95:
54:51:3a:6e:4d:0b:9b:54:05:8f:01:35:53:5d:c9:06:40:dc:
c4:92:76:68:da:28:4e:b0:a8:17:20:ba:93:7b:f0:38:3d:60:
12:e5:95:68:a3:af:d6:53:ac:b3:b0:b2:88:fd:59:18:bd:41:
0b:a5:19:f9:cb:0a:e1:be:2d:22:ed:ab:56:99:76:32:78:71:
9d:b8:d8:48:3f:d8:d6:3f:67:bc:e9:65:28:13:8c:b5:71:60:
e8:68:81:01:c7:c0:1d:3d:de:43:6c:11:25:b1:91:5f:47:51:
89:5f:b6:b6:bc:f2:56:0e:dd:a9:fe:57:fa:bf:f0:a9:8e:1b:
ff:10:fd:d9:de:83:ed:4c:15:41:2a:d8:91:99:49:ab:7f:fc:
f3:1d:fe:31:c1:73:0b:86:42:74:a0:32:53:ff:79:cf:b1:6a:
db:9d:cb:84:73:73:20:c7:9c:bf:c8:68:b6:f3:df:a9:47:64:
17:f6:5f:d4:c6:b4:45:0a:c3:7b:22:7c:2c:7e:70:1f:c3:da:
37:07:ec:af:30:d7:ca:bf:25:e3:be:44:cc:3c:0b:76:9e:2f:
5f:ec:4a:91
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVhah/4SbT2Nysbr2xMg5RRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy
ZWQ4NjIwHhcNMjUwMzA0MTM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTA0OWQxODZjNDQwZTUyNDg5YzE5MjE4ZWVjMzdkMDg2MDVkZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwU/hfYfiTkkewqj7aQ3GNdlpJKI
uY63Pe50Kdkz8p6J7f1HG7OEOFX8gZUFF2hOLfXkO3OQAIXUBoaRJhwNxOkN8sD5
KKwGQMqnBSM1L6bc5PhH4VrEi153XM/A4umD2z52n46iUrI+vAa2SVEWIgQLCwyz
ghta0QdrxycqkaZoAcUw3JeickSqZdsWgINyHkuEQqM9dLcP8dEE5fMMuZywGurz
pesrMzX1WlefwCpRGgB5U6G6leYjVgf0jAwDmEgUqFyzigwRMjuPReRGjDYIOZGX
SSzJo/gl5Quu6h1TsrXNKCe6ItVYbT6jTTyt+8Z3HP52xabcTX/bq9+a9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIoEnRhsRA5SSJwZIY7sN9CGBd/IMB8GA1UdIwQY
MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt
ZWE2N2E5ODYyNWZlLzEvaWdTZEdHeEVEbEpJbkJraGp1dzMwSVlGMzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl
LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGRT5AAwQC
Z8e4AwQCwqSUMA0GCSqGSIb3DQEBCwUAA4IBAQAJoJ+haKIl0acLG5gZjIJ1afEI
RDPklT3F8sMa4nWjmNzEyZVUUTpuTQubVAWPATVTXckGQNzEknZo2ihOsKgXILqT
e/A4PWAS5ZVoo6/WU6yzsLKI/VkYvUELpRn5ywrhvi0i7atWmXYyeHGduNhIP9jW
P2e86WUoE4y1cWDoaIEBx8AdPd5DbBElsZFfR1GJX7a2vPJWDt2p/lf6v/Cpjhv/
EP3Z3oPtTBVBKtiRmUmrf/zzHf4xwXMLhkJ0oDJT/3nPsWrbncuEc3Mgx5y/yGi2
89+pR2QX9l/UxrRFCsN7InwsfnAfw9o3B+yvMNfKvyXjvkTMPAt2ni9f7EqR
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:03:06 2025 by rpki-client