Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/QQVkAwo--2Lt9xnTOmPMO5FGF7Y.roa
File: QQVkAwo--2Lt9xnTOmPMO5FGF7Y.roa (raw, json)
Hash identifier: bJ2Nfv2wZhNbOARIqp31fKQFXd4d6cW7n2uw7pHNCB4=
Subject key identifier: 41:05:64:03:0A:3E:FB:62:ED:F7:19:D3:3A:63:CC:3B:91:46:17:B6
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA38B70E60CA6F7082CC9831B95013
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/QQVkAwo--2Lt9xnTOmPMO5FGF7Y.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 62.100.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:38:b7:0e:60:ca:6f:70:82:cc:98:31:b9:50:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=410564030a3efb62edf719d33a63cc3b914617b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:f8:bb:f1:ed:0a:a8:bb:85:0f:c3:95:59:
6f:25:7d:cb:e3:a9:48:a0:54:7f:00:aa:05:47:37:
10:f6:83:a0:6f:14:1c:2c:32:3e:1b:53:bb:20:9f:
e8:e9:b9:b1:76:a8:8a:57:73:1e:6b:11:85:92:c5:
7a:ae:8b:f0:3c:4d:e7:07:07:f9:14:9a:4a:c1:5e:
e0:aa:1e:fe:dc:69:87:a8:19:a3:a9:e4:c7:86:31:
b5:ce:29:fd:08:d9:a9:c6:e8:60:cc:f8:85:e5:b3:
d0:99:e2:a7:f7:85:51:ad:f3:59:32:f3:0b:91:a8:
d3:48:09:66:7d:90:a1:99:9f:8f:9f:79:0d:d5:74:
2e:11:d5:fa:52:4c:9b:9d:df:f6:ad:46:b3:e6:fb:
c6:3b:93:f5:ed:b9:18:c3:d9:be:20:56:e7:e4:fb:
9d:da:95:49:8f:a1:e4:94:21:3f:89:5f:2f:38:4c:
90:ef:6e:49:0d:e1:62:66:c2:8c:d6:53:4b:32:03:
6e:39:47:00:d5:30:f4:2c:a7:9f:aa:60:f9:47:ce:
1c:83:4b:db:0d:f6:b8:9c:02:4a:29:58:a0:8b:df:
63:32:7a:ed:cb:7d:19:a4:68:c5:27:d5:fe:33:f6:
c5:7d:56:7d:55:88:c7:4d:d5:e3:d9:3d:a9:fa:9a:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:64:03:0A:3E:FB:62:ED:F7:19:D3:3A:63:CC:3B:91:46:17:B6
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/QQVkAwo--2Lt9xnTOmPMO5FGF7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.208.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f0:01:8f:41:30:9c:8b:d9:8a:20:65:7a:ed:65:ce:31:e4:
95:8e:86:f4:5e:d7:51:ee:ac:a6:84:c8:5b:ee:ac:20:ae:b8:
33:c5:83:c2:94:67:be:26:cd:2b:1c:f7:86:3a:9a:cb:78:13:
7e:c2:41:74:67:96:b9:90:74:03:6e:cc:8e:29:c5:99:56:89:
7d:44:03:1a:96:a7:e1:d6:31:8e:98:bf:9c:47:46:50:fe:e3:
4e:47:14:ca:82:bc:f8:c9:21:64:0e:9d:09:26:58:55:77:1e:
66:26:12:cb:02:1d:eb:1b:01:ea:be:5c:32:76:9e:7d:46:dd:
95:27:e3:a6:e6:f8:b7:84:62:f7:d1:c9:86:50:5e:a4:14:c0:
a3:ff:84:18:f5:77:be:1c:03:8a:7f:84:02:b0:f1:02:6d:ab:
4f:86:cd:87:95:39:0f:f8:5b:5f:6b:64:56:6a:b4:55:bd:bb:
3f:fa:13:d8:5c:8f:0d:d0:ee:b1:75:f8:48:f5:55:49:59:18:
a4:60:2f:69:26:44:68:1c:ca:ce:e3:54:9f:09:b1:32:03:e0:
6f:15:70:ad:8e:af:64:e7:b8:04:52:9d:4b:cd:f2:d1:5d:ad:
35:bd:69:aa:5c:20:7a:d7:7f:e2:98:e2:d7:3a:58:67:cd:cd:
7a:09:da:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+ji3DmDKb3CCzJgxuVATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjUwMTAxMDM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTA1NjQwMzBhM2VmYjYyZWRmNzE5ZDMzYTYzY2MzYjkxNDYxN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqD4u/HtCqi7hQ/DlVlvJX3L46lI
oFR/AKoFRzcQ9oOgbxQcLDI+G1O7IJ/o6bmxdqiKV3MeaxGFksV6rovwPE3nBwf5
FJpKwV7gqh7+3GmHqBmjqeTHhjG1zin9CNmpxuhgzPiF5bPQmeKn94VRrfNZMvML
kajTSAlmfZChmZ+Pn3kN1XQuEdX6Ukybnd/2rUaz5vvGO5P17bkYw9m+IFbn5Pud
2pVJj6HklCE/iV8vOEyQ725JDeFiZsKM1lNLMgNuOUcA1TD0LKefqmD5R84cg0vb
Dfa4nAJKKVigi99jMnrty30ZpGjFJ9X+M/bFfVZ9VYjHTdXj2T2p+prMywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEFZAMKPvti7fcZ0zpjzDuRRhe2MB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvUVFWa0F3by0tMkx0OXhuVE9tUE1PNUZHRjdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmTQMA0G
CSqGSIb3DQEBCwUAA4IBAQBR8AGPQTCci9mKIGV67WXOMeSVjob0XtdR7qymhMhb
7qwgrrgzxYPClGe+Js0rHPeGOprLeBN+wkF0Z5a5kHQDbsyOKcWZVol9RAMalqfh
1jGOmL+cR0ZQ/uNORxTKgrz4ySFkDp0JJlhVdx5mJhLLAh3rGwHqvlwydp59Rt2V
J+Om5vi3hGL30cmGUF6kFMCj/4QY9Xe+HAOKf4QCsPECbatPhs2HlTkP+Ftfa2RW
arRVvbs/+hPYXI8N0O6xdfhI9VVJWRikYC9pJkRoHMrO41SfCbEyA+BvFXCtjq9k
57gEUp1LzfLRXa01vWmqXCB613/imOLXOlhnzc16CdpJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:59 2025 by rpki-client