Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/AwcBNXsuTO2KKEZvq1cTqrzbVrk.roa
File: AwcBNXsuTO2KKEZvq1cTqrzbVrk.roa (raw, json)
Hash identifier: Xk4rK0masyBWm4ArKfjBm37zY3PFhoz74Kwo2L7iuuM=
Subject key identifier: 03:07:01:35:7B:2E:4C:ED:8A:28:46:6F:AB:57:13:AA:BC:DB:56:B9
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 0185E01C6CD2B06A29D0627EE9237CA31933
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/AwcBNXsuTO2KKEZvq1cTqrzbVrk.roa
Signing time: Mon 23 Jan 2023 19:30:37 +0000
ROA not before: Mon 23 Jan 2023 19:30:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 62.112.128.0/20 maxlen: 20
62.112.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e0:1c:6c:d2:b0:6a:29:d0:62:7e:e9:23:7c:a3:19:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Jan 23 19:30:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=030701357b2e4ced8a28466fab5713aabcdb56b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:90:10:d8:93:61:d2:fd:e5:a2:15:a5:a9:
39:fc:55:94:ed:31:7e:f3:a7:e4:aa:60:29:ec:65:
b9:7f:3f:34:36:4c:ad:a5:01:7d:85:f2:98:83:6e:
6c:18:9c:21:ef:08:c7:13:db:60:18:f6:32:db:bb:
15:97:c2:b8:ab:35:be:93:ca:68:75:6c:34:79:82:
c5:da:5b:13:35:fc:89:d1:72:de:0b:93:7b:17:5d:
d5:48:85:23:df:84:64:82:aa:c3:4c:17:1a:dc:f9:
9b:d3:00:10:9f:81:aa:2d:bf:b4:c2:b8:e9:4b:07:
00:4a:e5:78:33:5f:34:b6:d1:af:61:bc:b9:fe:a1:
fe:f4:39:57:bd:75:80:cb:d7:c0:71:7b:87:e0:d3:
86:b4:a3:7e:4a:42:00:c7:e6:9c:ba:49:40:ff:e1:
77:39:26:00:47:5e:bd:bc:0c:8b:f8:2b:bd:c6:69:
40:7e:23:e1:f2:8b:74:11:16:97:81:00:7f:ac:e9:
ae:17:02:e7:e8:b2:f9:91:1c:ae:79:4c:01:bd:4e:
09:a8:2c:d9:fa:b5:9d:ac:12:d2:51:be:88:f9:56:
fb:5a:86:ee:33:3e:50:f8:f1:34:90:64:13:62:bd:
29:f7:6b:ba:3d:35:fa:5d:48:ab:ed:33:a5:6e:8a:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:07:01:35:7B:2E:4C:ED:8A:28:46:6F:AB:57:13:AA:BC:DB:56:B9
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/AwcBNXsuTO2KKEZvq1cTqrzbVrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/19
Signature Algorithm: sha256WithRSAEncryption
56:ee:f4:52:f5:46:7f:9b:cd:8a:47:d9:93:0d:a0:41:8b:d3:
c1:46:b4:05:d9:84:a4:53:0d:c5:e5:4f:a6:4a:3d:f3:50:99:
b5:56:4f:e7:9a:d1:2b:2f:f4:79:d7:27:22:35:8d:92:2f:5f:
56:57:e3:a2:45:6d:c5:df:24:13:96:be:8f:ab:03:23:9b:65:
2f:6b:cf:00:26:72:91:64:6e:df:fe:df:6e:36:49:7c:89:2b:
6c:32:34:0c:2d:7f:63:29:6e:9f:57:d2:c6:1e:ec:45:47:8d:
55:1c:d0:7d:e8:a7:b2:46:06:9d:4c:d9:a5:4d:51:8f:2b:e1:
2f:3a:e9:80:10:cd:9c:99:e2:f8:3f:a3:dd:6f:6a:4c:6c:73:
33:b6:61:56:bb:5f:1b:4d:3a:54:21:14:da:13:b1:93:32:e0:
26:63:03:f7:83:85:3a:f0:7e:7c:fd:36:f9:15:48:d1:2c:e8:
15:06:cc:ea:77:95:aa:4a:50:a2:da:94:61:98:38:52:ff:13:
c6:21:71:8e:02:ee:1d:94:e9:86:fe:7c:f9:28:35:6a:bf:34:
4c:95:f7:54:b0:18:2a:03:1f:32:aa:ff:fa:06:24:22:e9:d2:
dd:f0:88:13:ee:7a:db:f3:a9:87:6b:a0:d3:7f:1e:2a:c5:9d:
85:fe:d1:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXgHGzSsGop0GJ+6SN8oxkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTBiODczY2MxYTc4ZDQzYmI3MDMxOWZmYTU0OTUwNTc5
MDFhNjQwHhcNMjMwMTIzMTkzMDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzA3MDEzNTdiMmU0Y2VkOGEyODQ2NmZhYjU3MTNhYWJjZGI1NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3iQENiTYdL95aIVpak5/FWU7TF+
86fkqmAp7GW5fz80NkytpQF9hfKYg25sGJwh7wjHE9tgGPYy27sVl8K4qzW+k8po
dWw0eYLF2lsTNfyJ0XLeC5N7F13VSIUj34RkgqrDTBca3Pmb0wAQn4GqLb+0wrjp
SwcASuV4M180ttGvYby5/qH+9DlXvXWAy9fAcXuH4NOGtKN+SkIAx+acuklA/+F3
OSYAR169vAyL+Cu9xmlAfiPh8ot0ERaXgQB/rOmuFwLn6LL5kRyueUwBvU4JqCzZ
+rWdrBLSUb6I+Vb7WobuMz5Q+PE0kGQTYr0p92u6PTX6XUir7TOlboq3iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAMHATV7LkztiihGb6tXE6q821a5MB8GA1UdIwQY
MBaAFHHguHPMGnjUO7cDGf+lSVBXkBpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUt
ZTBjYTRkMTY2ZjFmLzEvQXdjQk5Yc3VUTzJLS0VadnExY1RxcnpiVnJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUtZTBjYTRkMTY2ZjFm
LzEvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPnCAMA0G
CSqGSIb3DQEBCwUAA4IBAQBW7vRS9UZ/m82KR9mTDaBBi9PBRrQF2YSkUw3F5U+m
Sj3zUJm1Vk/nmtErL/R51yciNY2SL19WV+OiRW3F3yQTlr6PqwMjm2Uva88AJnKR
ZG7f/t9uNkl8iStsMjQMLX9jKW6fV9LGHuxFR41VHNB96KeyRgadTNmlTVGPK+Ev
OumAEM2cmeL4P6Pdb2pMbHMztmFWu18bTTpUIRTaE7GTMuAmYwP3g4U68H58/Tb5
FUjRLOgVBszqd5WqSlCi2pRhmDhS/xPGIXGOAu4dlOmG/nz5KDVqvzRMlfdUsBgq
Ax8yqv/6BiQi6dLd8IgT7nrb86mHa6DTfx4qxZ2F/tEC
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:35 2025 by rpki-client