Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edda4-d639-42af-9b8e-e33fe31dcdba/1/yGzZTs8wV36XHtIRNdLE0xr7mPc.roa
File: yGzZTs8wV36XHtIRNdLE0xr7mPc.roa (raw, json)
Hash identifier: CzaYHmsjAuVOE1p1AyVZTs8nj2LiRrsAX7F3Yt8lX24=
Subject key identifier: C8:6C:D9:4E:CF:30:57:7E:97:1E:D2:11:35:D2:C4:D3:1A:FB:98:F7
Certificate issuer: /CN=eaf4da4617c9b964adec3417c217b5a9f6587bcd
Certificate serial: 0183F6337E076FDAF691AAC15F50DBCE6E4C
Authority key identifier: EA:F4:DA:46:17:C9:B9:64:AD:EC:34:17:C2:17:B5:A9:F6:58:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vTaRhfJuWSt7DQXwhe1qfZYe80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edda4-d639-42af-9b8e-e33fe31dcdba/1/yGzZTs8wV36XHtIRNdLE0xr7mPc.roa
Signing time: Thu 20 Oct 2022 16:21:53 +0000
ROA not before: Thu 20 Oct 2022 16:21:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 62.182.34.0/23 maxlen: 23
62.182.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:33:7e:07:6f:da:f6:91:aa:c1:5f:50:db:ce:6e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf4da4617c9b964adec3417c217b5a9f6587bcd
Validity
Not Before: Oct 20 16:21:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c86cd94ecf30577e971ed21135d2c4d31afb98f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:05:ef:09:a3:81:9e:43:72:ae:3a:60:61:
44:63:69:fa:38:3a:34:53:3f:1f:36:9e:ee:49:47:
ed:16:6d:b6:e6:93:69:1f:9f:50:d7:15:ba:6c:0e:
d1:85:f7:8f:73:5f:d4:0a:e8:36:1a:56:8f:d8:bb:
06:77:66:3f:af:61:14:da:c7:dd:1e:c6:30:63:65:
31:f4:73:de:31:7c:98:d2:a3:32:99:df:66:45:89:
3e:e2:c9:c7:1f:33:20:42:5a:17:64:ca:9e:9f:df:
d3:ec:6b:2b:40:98:6c:5b:b8:36:27:8d:cd:1a:c0:
e7:41:d5:a1:25:98:a4:89:e0:be:32:9e:6d:e5:ea:
e8:0f:5f:af:e7:0d:03:6c:1b:64:03:d4:2d:14:47:
e9:a1:43:04:8b:83:34:68:c1:41:78:49:0f:2a:09:
30:cd:4e:13:2a:38:8d:29:ed:da:1c:a4:0d:3e:eb:
d1:c7:f2:bd:65:e6:ed:9b:74:b5:e7:1c:1a:c3:9f:
5b:e7:69:64:76:8d:f6:ec:d0:f9:bb:ce:a3:9a:ab:
b3:11:d8:af:2f:89:c8:ea:34:f0:e5:6b:a2:f9:5d:
34:71:6e:39:84:44:56:6c:32:d8:9a:47:b6:60:66:
e3:32:fd:00:c4:1e:4b:8b:cd:ea:59:7e:97:6c:23:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:D9:4E:CF:30:57:7E:97:1E:D2:11:35:D2:C4:D3:1A:FB:98:F7
X509v3 Authority Key Identifier:
keyid:EA:F4:DA:46:17:C9:B9:64:AD:EC:34:17:C2:17:B5:A9:F6:58:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vTaRhfJuWSt7DQXwhe1qfZYe80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edda4-d639-42af-9b8e-e33fe31dcdba/1/yGzZTs8wV36XHtIRNdLE0xr7mPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edda4-d639-42af-9b8e-e33fe31dcdba/1/6vTaRhfJuWSt7DQXwhe1qfZYe80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:51:cb:2a:5b:bc:89:ff:57:2e:19:6e:e8:46:1f:fa:ad:e4:
b0:d0:9a:3f:d9:54:a4:e7:dc:1e:8c:8e:76:3d:63:16:c8:fb:
02:57:b2:c8:5e:2f:fb:6b:54:f5:cf:38:96:6c:d0:ec:7b:94:
41:14:ce:0e:5a:c7:5c:1f:9a:5d:e1:7b:c9:a9:59:90:86:45:
74:04:8b:39:5c:2f:f3:d0:05:f3:ab:0c:ef:75:82:d3:cb:d7:
93:42:da:06:ee:41:44:b6:b0:af:ed:e9:89:4f:63:d6:85:b6:
41:37:d9:a5:5e:2d:42:88:a7:dc:7b:44:e2:95:66:63:36:2c:
88:24:c1:ca:99:19:9f:15:80:9c:4b:d8:63:28:d6:f6:9c:2a:
ac:cf:41:65:a6:ee:2d:ee:ba:4a:af:39:e5:bd:a9:33:e5:66:
88:be:8d:35:c2:c0:a8:2c:43:51:51:6d:66:0e:c0:01:29:08:
a0:bd:b8:e8:c6:46:1f:b1:d6:32:7e:99:b8:92:84:23:c7:38:
d8:30:1c:85:58:df:37:c2:db:85:ff:3d:f2:e8:0c:e5:42:5b:
4d:50:c1:13:5e:16:b3:98:43:f2:e7:f4:bf:52:f2:5a:ac:9b:
c6:57:4b:86:d7:e3:54:9f:48:c9:f6:cc:8f:99:6c:b8:b1:68:
90:e7:40:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYP2M34Hb9r2karBX1Dbzm5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZjRkYTQ2MTdjOWI5NjRhZGVjMzQxN2MyMTdiNWE5ZjY1
ODdiY2QwHhcNMjIxMDIwMTYyMTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODZjZDk0ZWNmMzA1NzdlOTcxZWQyMTEzNWQyYzRkMzFhZmI5OGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pQF7wmjgZ5Dcq46YGFEY2n6ODo0
Uz8fNp7uSUftFm225pNpH59Q1xW6bA7RhfePc1/UCug2GlaP2LsGd2Y/r2EU2sfd
HsYwY2Ux9HPeMXyY0qMymd9mRYk+4snHHzMgQloXZMqen9/T7GsrQJhsW7g2J43N
GsDnQdWhJZikieC+Mp5t5eroD1+v5w0DbBtkA9QtFEfpoUMEi4M0aMFBeEkPKgkw
zU4TKjiNKe3aHKQNPuvRx/K9Zebtm3S15xwaw59b52lkdo327ND5u86jmquzEdiv
L4nI6jTw5Wui+V00cW45hERWbDLYmke2YGbjMv0AxB5Li83qWX6XbCOYQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhs2U7PMFd+lx7SETXSxNMa+5j3MB8GA1UdIwQY
MBaAFOr02kYXyblkrew0F8IXtan2WHvNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnZUYVJoZkp1V1N0N0RRWHdoZTFxZlpZZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wZWRkYTQtZDYzOS00MmFmLTliOGUt
ZTMzZmUzMWRjZGJhLzEveUd6WlRzOHdWMzZYSHRJUk5kTEUweHI3bVBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8wZWRkYTQtZDYzOS00MmFmLTliOGUtZTMzZmUzMWRjZGJh
LzEvNnZUYVJoZkp1V1N0N0RRWHdoZTFxZlpZZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPrYgMA0G
CSqGSIb3DQEBCwUAA4IBAQBPUcsqW7yJ/1cuGW7oRh/6reSw0Jo/2VSk59wejI52
PWMWyPsCV7LIXi/7a1T1zziWbNDse5RBFM4OWsdcH5pd4XvJqVmQhkV0BIs5XC/z
0AXzqwzvdYLTy9eTQtoG7kFEtrCv7emJT2PWhbZBN9mlXi1CiKfce0TilWZjNiyI
JMHKmRmfFYCcS9hjKNb2nCqsz0Flpu4t7rpKrznlvakz5WaIvo01wsCoLENRUW1m
DsABKQigvbjoxkYfsdYyfpm4koQjxzjYMByFWN83wtuF/z3y6AzlQltNUMETXhaz
mEPy5/S/UvJarJvGV0uG1+NUn0jJ9syPmWy4sWiQ50Du
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:10:13 2025 by rpki-client