Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/dmJKoh9GZZvUO3EOlPnRCiOgFCs.roa
File: dmJKoh9GZZvUO3EOlPnRCiOgFCs.roa (raw, json)
Hash identifier: 6UWzU+srg+r0Oe4J0Gg7vQnXtDhps66X6Lvq6FiTpMk=
Subject key identifier: 76:62:4A:A2:1F:46:65:9B:D4:3B:71:0E:94:F9:D1:0A:23:A0:14:2B
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 0187FEDDED2749C717BFC9A10A780CA74CA2
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/dmJKoh9GZZvUO3EOlPnRCiOgFCs.roa
Signing time: Tue 09 May 2023 04:56:09 +0000
ROA not before: Tue 09 May 2023 04:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 62.112.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fe:dd:ed:27:49:c7:17:bf:c9:a1:0a:78:0c:a7:4c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: May 9 04:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76624aa21f46659bd43b710e94f9d10a23a0142b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:fe:a1:55:5c:f4:e7:96:75:b4:cc:eb:f9:
17:18:af:ef:3a:5e:f1:66:14:9d:de:58:2b:df:4e:
06:05:90:7f:e6:ee:94:e3:9e:6e:a1:19:7f:76:86:
11:58:2a:bf:74:b0:40:80:5f:22:be:72:fd:df:1a:
86:29:4d:ba:76:d9:94:d5:fc:d5:3c:b5:b0:b0:c6:
90:6e:79:2b:c7:c0:68:2a:c2:18:a4:de:03:0f:29:
79:1f:5f:85:cc:03:13:47:d9:9c:08:91:de:f4:6b:
cd:9e:45:3c:fa:82:cd:a7:5c:63:6e:a1:e0:ce:a1:
60:16:cc:65:2c:2e:26:df:ac:e2:68:e4:1f:a0:af:
b9:4c:e2:32:dc:da:80:dc:36:8b:ef:f3:13:eb:53:
dc:9e:71:09:8b:a5:8f:04:d3:ae:fc:82:32:da:d5:
8f:da:ca:ac:e2:d9:76:80:d3:79:c9:d2:ed:f2:db:
6b:99:b9:3a:ec:84:46:14:73:09:39:3c:af:df:8f:
a4:c0:0a:24:31:53:9d:94:72:61:11:a0:bf:36:87:
4d:cc:40:03:eb:19:d7:ae:88:0a:f7:21:b3:47:56:
0b:70:78:e3:c9:c6:2b:20:4a:63:89:c8:d7:ba:a8:
e1:5d:74:36:9d:38:e3:48:e2:c9:45:6e:d5:c0:cd:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:62:4A:A2:1F:46:65:9B:D4:3B:71:0E:94:F9:D1:0A:23:A0:14:2B
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/dmJKoh9GZZvUO3EOlPnRCiOgFCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:39:29:22:67:58:57:47:e3:01:d5:7b:8f:35:7f:ee:ef:5d:
23:8c:12:86:cb:bb:41:42:d4:36:3e:fd:ad:b0:ee:2f:8a:4c:
3d:2d:d6:26:a9:04:d6:ee:a5:9b:28:0c:3b:98:09:c5:34:bd:
dc:09:0a:7d:0e:02:0c:43:02:d1:9c:3b:72:76:d4:23:fd:bf:
72:8a:a7:cc:32:66:43:98:50:d1:ed:cf:b7:09:44:03:36:21:
3a:9d:0d:60:db:96:62:46:24:59:72:51:bc:2d:f3:d4:43:19:
07:79:77:3b:ca:95:78:2a:65:e6:f3:04:71:0e:9d:c2:b8:76:
2d:22:dc:c1:89:aa:41:2a:6a:c7:76:00:c5:8d:16:11:f7:02:
95:cd:00:ea:71:e3:00:68:d9:dc:f5:1b:4b:de:e4:2d:19:e3:
c3:24:fd:aa:d4:f5:11:3f:81:66:47:21:ba:04:ee:75:8c:cf:
1c:c4:81:8c:f1:79:26:df:fe:43:c2:eb:c1:83:d5:91:ba:c5:
0d:20:0d:a5:76:fc:51:bb:66:9f:64:3b:6c:a0:ff:00:8e:97:
00:89:36:ea:a3:62:39:2a:a6:d8:7f:99:cd:ff:56:a8:f3:d1:
e7:9f:b1:1e:50:18:79:6b:e2:d7:a1:8d:6f:1e:32:15:a2:02:
e7:06:8a:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYf+3e0nSccXv8mhCngMp0yiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTBiODczY2MxYTc4ZDQzYmI3MDMxOWZmYTU0OTUwNTc5
MDFhNjQwHhcNMjMwNTA5MDQ1NjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjYyNGFhMjFmNDY2NTliZDQzYjcxMGU5NGY5ZDEwYTIzYTAxNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/T+oVVc9OeWdbTM6/kXGK/vOl7x
ZhSd3lgr304GBZB/5u6U455uoRl/doYRWCq/dLBAgF8ivnL93xqGKU26dtmU1fzV
PLWwsMaQbnkrx8BoKsIYpN4DDyl5H1+FzAMTR9mcCJHe9GvNnkU8+oLNp1xjbqHg
zqFgFsxlLC4m36ziaOQfoK+5TOIy3NqA3DaL7/MT61PcnnEJi6WPBNOu/IIy2tWP
2sqs4tl2gNN5ydLt8ttrmbk67IRGFHMJOTyv34+kwAokMVOdlHJhEaC/NodNzEAD
6xnXrogK9yGzR1YLcHjjycYrIEpjicjXuqjhXXQ2nTjjSOLJRW7VwM1STwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHZiSqIfRmWb1DtxDpT50QojoBQrMB8GA1UdIwQY
MBaAFHHguHPMGnjUO7cDGf+lSVBXkBpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUt
ZTBjYTRkMTY2ZjFmLzEvZG1KS29oOUdaWnZVTzNFT2xQblJDaU9nRkNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUtZTBjYTRkMTY2ZjFm
LzEvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPnCQMA0G
CSqGSIb3DQEBCwUAA4IBAQA+OSkiZ1hXR+MB1XuPNX/u710jjBKGy7tBQtQ2Pv2t
sO4vikw9LdYmqQTW7qWbKAw7mAnFNL3cCQp9DgIMQwLRnDtydtQj/b9yiqfMMmZD
mFDR7c+3CUQDNiE6nQ1g25ZiRiRZclG8LfPUQxkHeXc7ypV4KmXm8wRxDp3CuHYt
ItzBiapBKmrHdgDFjRYR9wKVzQDqceMAaNnc9RtL3uQtGePDJP2q1PURP4FmRyG6
BO51jM8cxIGM8Xkm3/5DwuvBg9WRusUNIA2ldvxRu2afZDtsoP8AjpcAiTbqo2I5
KqbYf5nN/1ao89Hnn7EeUBh5a+LXoY1vHjIVogLnBoo5
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:03 2025 by rpki-client