Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/eqCS9D-Psj-wOdzIILjecAKRfy0.roa
File: eqCS9D-Psj-wOdzIILjecAKRfy0.roa (raw, json)
Hash identifier: pT6yWQVmeFFyp0ZyJbf4Gf0IX4+Ia9PaG+m6IbvZ5nU=
Subject key identifier: 7A:A0:92:F4:3F:8F:B2:3F:B0:39:DC:C8:20:B8:DE:70:02:91:7F:2D
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01885D59788CB0C9EE546DBE8D2F188DBEE6
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/eqCS9D-Psj-wOdzIILjecAKRfy0.roa
Signing time: Sat 27 May 2023 13:15:24 +0000
ROA not before: Sat 27 May 2023 13:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.112.128.0/20 maxlen: 20
62.112.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:59:78:8c:b0:c9:ee:54:6d:be:8d:2f:18:8d:be:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: May 27 13:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aa092f43f8fb23fb039dcc820b8de7002917f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:bc:a9:11:73:d3:9b:96:d7:c1:e1:b4:11:
1d:67:f7:81:0a:4c:09:0a:52:ba:fb:fc:0c:a9:6c:
24:dd:c9:f2:59:58:b1:0b:e2:94:2b:e6:d8:4c:22:
06:ae:b7:41:17:b2:a0:78:e3:4a:fa:5d:40:1e:2c:
6d:44:a0:28:e7:e5:37:a4:74:57:58:d6:01:47:19:
82:26:30:fa:8e:8f:ac:19:8b:6f:0a:dc:ef:1c:2b:
e6:1f:0b:86:14:1e:8e:5d:6e:b2:51:64:a9:69:90:
8e:ec:6a:f1:00:f1:43:12:cb:a1:ab:b7:52:12:fd:
03:e1:a3:83:b8:5f:59:b7:cc:3d:96:86:70:56:25:
bf:18:e1:e8:40:91:e1:74:c8:b4:7f:ff:b7:64:d6:
ec:53:a8:39:50:01:68:d9:de:d8:58:a9:92:89:f1:
a2:c4:b6:4a:ee:bf:3c:1c:0c:f5:6b:1a:58:a8:15:
c2:9d:a5:80:e8:8d:4d:0d:89:b0:5d:c9:85:6f:d6:
b0:65:18:b4:97:61:1f:0e:f9:2d:c3:2f:51:8b:c8:
97:dd:5f:45:d7:b0:28:a5:e3:24:0c:8b:39:18:b2:
68:82:eb:67:af:56:73:d0:d5:fb:93:0a:f6:76:eb:
07:3d:a4:1b:a2:ad:8d:12:ce:69:db:89:1a:28:ac:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:92:F4:3F:8F:B2:3F:B0:39:DC:C8:20:B8:DE:70:02:91:7F:2D
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/eqCS9D-Psj-wOdzIILjecAKRfy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:87:3c:31:32:35:62:ed:4c:02:55:b3:1d:9d:3c:13:1e:c7:
42:e3:71:36:81:86:47:7d:69:1d:7e:1d:f5:01:42:df:f0:61:
6c:3f:80:1f:41:ef:44:97:b3:e2:3d:42:d4:0d:4f:fb:23:00:
e6:b3:0c:89:dc:d6:ba:c3:b4:19:e4:00:dd:7a:66:eb:b2:80:
7a:8c:b3:fd:c3:ee:64:5b:77:b7:ab:33:58:20:23:7e:ad:51:
fa:d4:4d:64:5b:2a:e4:da:4b:39:8f:20:6b:0d:40:df:f8:85:
2f:90:d7:17:f6:26:d3:8f:29:91:d3:6a:1e:3b:ee:89:a4:f3:
e6:bb:33:0f:be:9b:e9:49:b1:04:a5:48:6a:32:27:01:8b:f8:
cc:8d:62:7a:84:1d:4f:c2:cc:ea:7b:0e:a8:45:ed:ed:a9:89:
cc:51:b2:7b:4a:35:6a:0c:d0:25:c0:fb:3c:f9:de:37:16:26:
27:8a:80:51:fd:89:a8:c8:5f:9a:f0:4d:98:bb:97:76:18:6c:
d1:47:26:fc:4b:a2:9e:23:35:c6:87:75:d5:58:3e:f2:91:13:
cf:e7:00:b7:64:13:e2:c8:b7:52:ff:05:6a:27:b3:d5:e7:ec:
e6:0f:d3:77:22:01:2c:19:77:63:a8:14:c2:8a:59:cf:99:39:
78:07:27:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhdWXiMsMnuVG2+jS8Yjb7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTBiODczY2MxYTc4ZDQzYmI3MDMxOWZmYTU0OTUwNTc5
MDFhNjQwHhcNMjMwNTI3MTMxNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWEwOTJmNDNmOGZiMjNmYjAzOWRjYzgyMGI4ZGU3MDAyOTE3ZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZu8qRFz05uW18HhtBEdZ/eBCkwJ
ClK6+/wMqWwk3cnyWVixC+KUK+bYTCIGrrdBF7KgeONK+l1AHixtRKAo5+U3pHRX
WNYBRxmCJjD6jo+sGYtvCtzvHCvmHwuGFB6OXW6yUWSpaZCO7GrxAPFDEsuhq7dS
Ev0D4aODuF9Zt8w9loZwViW/GOHoQJHhdMi0f/+3ZNbsU6g5UAFo2d7YWKmSifGi
xLZK7r88HAz1axpYqBXCnaWA6I1NDYmwXcmFb9awZRi0l2EfDvktwy9Ri8iX3V9F
17AopeMkDIs5GLJogutnr1Zz0NX7kwr2dusHPaQboq2NEs5p24kaKKxEnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHqgkvQ/j7I/sDncyCC43nACkX8tMB8GA1UdIwQY
MBaAFHHguHPMGnjUO7cDGf+lSVBXkBpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUt
ZTBjYTRkMTY2ZjFmLzEvZXFDUzlELVBzai13T2R6SUlMamVjQUtSZnkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUtZTBjYTRkMTY2ZjFm
LzEvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPnCAMA0G
CSqGSIb3DQEBCwUAA4IBAQB/hzwxMjVi7UwCVbMdnTwTHsdC43E2gYZHfWkdfh31
AULf8GFsP4AfQe9El7PiPULUDU/7IwDmswyJ3Na6w7QZ5ADdembrsoB6jLP9w+5k
W3e3qzNYICN+rVH61E1kWyrk2ks5jyBrDUDf+IUvkNcX9ibTjymR02oeO+6JpPPm
uzMPvpvpSbEEpUhqMicBi/jMjWJ6hB1Pwszqew6oRe3tqYnMUbJ7SjVqDNAlwPs8
+d43FiYnioBR/YmoyF+a8E2Yu5d2GGzRRyb8S6KeIzXGh3XVWD7ykRPP5wC3ZBPi
yLdS/wVqJ7PV5+zmD9N3IgEsGXdjqBTCilnPmTl4Byfd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:46 2024 by rpki-client on console-fra.rpki-client.org