Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/fkrfeRlMMfL2fI7tE9H5DgRaLnU.roa
File: fkrfeRlMMfL2fI7tE9H5DgRaLnU.roa (raw, json)
Hash identifier: RTrSCALFtR0uA/8e0PzTyUhRc7XM7b334V/Ar79e6Go=
Subject key identifier: 7E:4A:DF:79:19:4C:31:F2:F6:7C:8E:ED:13:D1:F9:0E:04:5A:2E:75
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01826247B73C9E155D46571AFCAD742FC60B
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/fkrfeRlMMfL2fI7tE9H5DgRaLnU.roa
Signing time: Wed 03 Aug 2022 05:57:23 +0000
ROA not before: Wed 03 Aug 2022 05:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 62.112.128.0/20 maxlen: 20
62.112.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:47:b7:3c:9e:15:5d:46:57:1a:fc:ad:74:2f:c6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Aug 3 05:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e4adf79194c31f2f67c8eed13d1f90e045a2e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:d2:e3:3b:2a:94:e4:71:ce:fa:f8:06:69:
46:df:37:c9:41:63:15:88:99:96:57:62:c2:ae:90:
77:26:6d:c6:ae:6d:76:a5:a8:3c:d7:ef:87:75:58:
ee:a2:d8:ed:2e:ed:2d:f8:4f:12:6b:3b:72:51:72:
fe:df:39:78:5b:46:74:ee:c6:f9:6b:a8:9f:71:38:
e0:2e:17:ed:46:60:97:8e:81:b5:bf:f1:bb:33:40:
6b:df:b6:00:a2:4b:62:a1:fc:bc:24:ab:c0:22:71:
09:b0:a1:dd:50:c4:a8:6b:39:27:da:e2:0f:3f:97:
e4:81:43:ad:f4:f1:a6:7a:0b:e5:16:96:de:0a:63:
12:a9:65:f8:61:08:7a:0a:17:76:bd:e5:53:2d:70:
16:3d:f8:1b:ae:81:2b:d7:23:c3:bb:39:c8:43:7f:
26:ea:94:1c:b0:b1:66:ad:71:30:0b:8e:d6:45:30:
b6:a4:f9:99:f7:32:1d:9d:54:c0:02:05:26:fe:b6:
35:3c:6c:40:5c:d0:ed:53:eb:88:12:94:f0:ef:02:
76:c5:17:52:22:19:84:33:9c:eb:7c:24:20:2a:96:
d7:f5:07:37:f6:9a:c7:5f:62:6d:a6:0a:1b:30:83:
9d:9d:d7:9c:f3:d7:6f:6f:1e:54:66:79:49:9f:81:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4A:DF:79:19:4C:31:F2:F6:7C:8E:ED:13:D1:F9:0E:04:5A:2E:75
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/fkrfeRlMMfL2fI7tE9H5DgRaLnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/19
Signature Algorithm: sha256WithRSAEncryption
53:24:d2:e0:9f:cc:4c:e4:a0:dc:a6:6c:91:9b:96:64:c7:6f:
c1:6a:3b:56:16:d1:9b:14:00:fb:bc:44:5e:2c:e2:9e:ef:77:
9f:53:63:ce:7d:eb:ff:37:8f:cf:dc:79:6f:73:ac:31:20:dc:
03:55:b7:dd:07:a7:55:90:66:ae:db:49:95:07:52:28:54:d9:
4b:98:e0:0d:93:df:72:41:c9:22:73:c0:a8:f7:a1:9d:e9:71:
00:43:13:9f:ea:51:21:0e:ba:c4:2d:ab:a3:d4:54:d9:e4:2d:
ce:70:d9:aa:fe:28:b1:6e:b2:53:55:64:be:53:0d:42:30:e3:
8f:3e:aa:73:80:39:8c:cd:ee:d2:77:e4:d6:1a:58:be:aa:6e:
9d:3a:eb:bf:26:30:1b:fb:19:d5:de:91:f2:bc:fa:19:1b:92:
d5:08:0d:4a:b8:45:3f:9a:53:f8:cd:e6:a0:70:a7:67:4f:86:
97:fc:f0:79:d9:3b:b4:e2:53:24:d6:d6:cb:fa:f4:15:55:0b:
c1:0b:73:80:de:3e:a3:ed:24:42:b3:df:96:a5:8a:20:89:d0:
bd:69:e6:83:d9:21:6c:5b:2d:1f:1d:31:67:0a:3e:21:4e:72:
96:43:10:b7:d2:97:fa:76:29:05:64:e9:e7:5e:6b:38:10:62:
9d:c3:d0:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJiR7c8nhVdRlca/K10L8YLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTBiODczY2MxYTc4ZDQzYmI3MDMxOWZmYTU0OTUwNTc5
MDFhNjQwHhcNMjIwODAzMDU1NzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTRhZGY3OTE5NGMzMWYyZjY3YzhlZWQxM2QxZjkwZTA0NWEyZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrfS4zsqlORxzvr4BmlG3zfJQWMV
iJmWV2LCrpB3Jm3Grm12pag81++HdVjuotjtLu0t+E8SaztyUXL+3zl4W0Z07sb5
a6ifcTjgLhftRmCXjoG1v/G7M0Br37YAoktiofy8JKvAInEJsKHdUMSoazkn2uIP
P5fkgUOt9PGmegvlFpbeCmMSqWX4YQh6Chd2veVTLXAWPfgbroEr1yPDuznIQ38m
6pQcsLFmrXEwC47WRTC2pPmZ9zIdnVTAAgUm/rY1PGxAXNDtU+uIEpTw7wJ2xRdS
IhmEM5zrfCQgKpbX9Qc39prHX2JtpgobMIOdndec89dvbx5UZnlJn4FJrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH5K33kZTDHy9nyO7RPR+Q4EWi51MB8GA1UdIwQY
MBaAFHHguHPMGnjUO7cDGf+lSVBXkBpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUt
ZTBjYTRkMTY2ZjFmLzEvZmtyZmVSbE1NZkwyZkk3dEU5SDVEZ1JhTG5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUtZTBjYTRkMTY2ZjFm
LzEvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPnCAMA0G
CSqGSIb3DQEBCwUAA4IBAQBTJNLgn8xM5KDcpmyRm5Zkx2/BajtWFtGbFAD7vERe
LOKe73efU2POfev/N4/P3Hlvc6wxINwDVbfdB6dVkGau20mVB1IoVNlLmOANk99y
Qckic8Co96Gd6XEAQxOf6lEhDrrELauj1FTZ5C3OcNmq/iixbrJTVWS+Uw1CMOOP
PqpzgDmMze7Sd+TWGli+qm6dOuu/JjAb+xnV3pHyvPoZG5LVCA1KuEU/mlP4zeag
cKdnT4aX/PB52Tu04lMk1tbL+vQVVQvBC3OA3j6j7SRCs9+WpYogidC9aeaD2SFs
Wy0fHTFnCj4hTnKWQxC30pf6dikFZOnnXms4EGKdw9B/
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:00 2025 by rpki-client