Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/sUzPRGSc3yAXmAau-DE4aAfY1ZQ.roa
File: sUzPRGSc3yAXmAau-DE4aAfY1ZQ.roa (raw, json)
Hash identifier: ncZS2ZvBYEV25lnJtunRd//lXGSxj/3dCtY8deJgWaA=
Subject key identifier: B1:4C:CF:44:64:9C:DF:20:17:98:06:AE:F8:31:38:68:07:D8:D5:94
Certificate issuer: /CN=815f961a7373170da35dbdfc88f510c7d45a60a0
Certificate serial: 018572DEE277F2BCD169B9AB5A7CA780EC33
Authority key identifier: 81:5F:96:1A:73:73:17:0D:A3:5D:BD:FC:88:F5:10:C7:D4:5A:60:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV-WGnNzFw2jXb38iPUQx9RaYKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/sUzPRGSc3yAXmAau-DE4aAfY1ZQ.roa
Signing time: Mon 02 Jan 2023 14:24:47 +0000
ROA not before: Mon 02 Jan 2023 14:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:de:e2:77:f2:bc:d1:69:b9:ab:5a:7c:a7:80:ec:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815f961a7373170da35dbdfc88f510c7d45a60a0
Validity
Not Before: Jan 2 14:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b14ccf44649cdf20179806aef831386807d8d594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:31:1b:29:72:cf:84:e2:6d:17:95:f3:38:
65:ee:2c:fa:2d:6d:5d:ee:a2:b8:20:87:e2:5b:46:
e0:29:86:f5:ff:fa:c8:78:cb:98:56:0a:08:aa:ff:
f5:d5:34:f9:86:64:15:2a:7b:de:d9:42:c1:4a:fd:
a7:d1:16:26:7f:17:32:64:94:c2:bd:80:dc:df:18:
62:0b:04:b8:82:d0:6d:06:0e:23:02:7a:12:c1:f9:
a5:5c:64:7d:af:ec:d5:d3:d8:0c:d4:83:ea:58:01:
57:c3:f5:5a:5d:65:1a:2f:e7:f5:a7:ea:c6:f0:bc:
5b:07:d3:45:94:34:b0:42:bb:f2:d6:a9:50:03:aa:
0b:b6:57:15:fb:9e:02:30:07:fa:b0:a7:a8:31:4b:
96:2e:c4:5f:a1:d9:7b:ed:df:38:32:cd:27:93:f5:
67:a0:b0:73:7f:50:c1:79:da:e8:6c:0a:c8:5c:45:
76:e2:d0:eb:b8:93:73:49:21:23:df:d9:61:4e:4b:
c4:cc:42:11:1e:df:86:27:fc:85:36:2d:50:ec:9f:
f5:62:80:10:cc:91:8e:2a:02:0b:9d:9f:32:f4:d2:
be:df:eb:b1:af:3a:3e:ee:b0:9c:2d:f5:4a:be:ce:
17:c8:34:41:e0:14:00:80:16:bb:54:a4:11:35:a6:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4C:CF:44:64:9C:DF:20:17:98:06:AE:F8:31:38:68:07:D8:D5:94
X509v3 Authority Key Identifier:
keyid:81:5F:96:1A:73:73:17:0D:A3:5D:BD:FC:88:F5:10:C7:D4:5A:60:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV-WGnNzFw2jXb38iPUQx9RaYKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/sUzPRGSc3yAXmAau-DE4aAfY1ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f7c682-e9b6-4df8-b688-f926abf4ab85/1/gV-WGnNzFw2jXb38iPUQx9RaYKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1c:5f:0a:65:e5:2c:42:3c:3a:e4:d2:07:b8:6f:42:85:13:
eb:14:21:87:d9:b3:cc:b1:61:ee:44:7a:41:d3:73:06:74:74:
9c:b5:f2:a0:a7:e5:54:0b:88:87:3d:6a:fd:92:0c:b6:e6:3f:
a9:a2:2e:bf:b4:cb:4f:e2:6a:1a:f4:a2:7d:fc:38:bf:cd:6b:
b7:d9:63:4f:6a:65:ba:b6:e6:24:2b:08:47:64:90:3b:fd:9d:
bd:25:d5:97:c2:ad:d1:cc:73:e0:b0:33:d5:c9:61:9d:7e:11:
52:5b:bc:2f:00:dc:85:17:20:82:49:e8:4b:0c:7a:21:55:4c:
77:42:44:ee:03:a6:75:29:8f:bb:55:67:d7:9b:ae:28:31:b3:
a2:00:d9:c4:fe:eb:bf:20:64:18:f5:53:7a:bf:60:0e:13:07:
19:ad:6d:9b:8d:cd:3f:2f:90:f3:51:76:2b:8c:7a:c6:ff:9d:
54:a5:0d:58:17:80:cd:a4:a2:e2:ac:2e:2f:20:42:e2:8e:6e:
6c:24:f3:bf:3b:6c:f1:8d:59:8d:7a:93:5b:e9:6a:6c:07:f8:
31:d8:7b:ad:34:84:e2:51:4d:2d:ab:e6:c4:26:bb:53:bc:2c:
23:90:bb:83:e0:12:ae:99:83:16:ed:5d:ab:43:e0:6f:87:aa:
94:30:5a:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy3uJ38rzRabmrWnyngOwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNWY5NjFhNzM3MzE3MGRhMzVkYmRmYzg4ZjUxMGM3ZDQ1
YTYwYTAwHhcNMjMwMTAyMTQyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTRjY2Y0NDY0OWNkZjIwMTc5ODA2YWVmODMxMzg2ODA3ZDhkNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj8xGylyz4TibReV8zhl7iz6LW1d
7qK4IIfiW0bgKYb1//rIeMuYVgoIqv/11TT5hmQVKnve2ULBSv2n0RYmfxcyZJTC
vYDc3xhiCwS4gtBtBg4jAnoSwfmlXGR9r+zV09gM1IPqWAFXw/VaXWUaL+f1p+rG
8LxbB9NFlDSwQrvy1qlQA6oLtlcV+54CMAf6sKeoMUuWLsRfodl77d84Ms0nk/Vn
oLBzf1DBedrobArIXEV24tDruJNzSSEj39lhTkvEzEIRHt+GJ/yFNi1Q7J/1YoAQ
zJGOKgILnZ8y9NK+3+uxrzo+7rCcLfVKvs4XyDRB4BQAgBa7VKQRNabNWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLFMz0RknN8gF5gGrvgxOGgH2NWUMB8GA1UdIwQY
MBaAFIFflhpzcxcNo129/Ij1EMfUWmCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1YtV0duTnpGdzJqWGIzOGlQVVF4OVJhWUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mN2M2ODItZTliNi00ZGY4LWI2ODgt
ZjkyNmFiZjRhYjg1LzEvc1V6UFJHU2MzeUFYbUFhdS1ERTRhQWZZMVpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mN2M2ODItZTliNi00ZGY4LWI2ODgtZjkyNmFiZjRhYjg1
LzEvZ1YtV0duTnpGdzJqWGIzOGlQVVF4OVJhWUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRAMA0G
CSqGSIb3DQEBCwUAA4IBAQAqHF8KZeUsQjw65NIHuG9ChRPrFCGH2bPMsWHuRHpB
03MGdHSctfKgp+VUC4iHPWr9kgy25j+poi6/tMtP4moa9KJ9/Di/zWu32WNPamW6
tuYkKwhHZJA7/Z29JdWXwq3RzHPgsDPVyWGdfhFSW7wvANyFFyCCSehLDHohVUx3
QkTuA6Z1KY+7VWfXm64oMbOiANnE/uu/IGQY9VN6v2AOEwcZrW2bjc0/L5DzUXYr
jHrG/51UpQ1YF4DNpKLirC4vIELijm5sJPO/O2zxjVmNepNb6WpsB/gx2HutNITi
UU0tq+bEJrtTvCwjkLuD4BKumYMW7V2rQ+Bvh6qUMFrz
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:33 2025 by rpki-client