Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/reh6dAwNUlMBVicBizdYmcvEIAg.roa
File: reh6dAwNUlMBVicBizdYmcvEIAg.roa (raw, json)
Hash identifier: RYMWpqf8xX1AVSryT+zjOMu9g0dQSjLh7NsOWPTTMFA=
Subject key identifier: AD:E8:7A:74:0C:0D:52:53:01:56:27:01:8B:37:58:99:CB:C4:20:08
Certificate issuer: /CN=87c232d3f005ca745d818cd6439e8087905010e4
Certificate serial: 01217DD1
Authority key identifier: 87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/reh6dAwNUlMBVicBizdYmcvEIAg.roa
Signing time: Mon 07 Mar 2022 17:38:48 +0000
ROA not before: Mon 07 Mar 2022 17:38:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 62.3.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18972113 (0x1217dd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c232d3f005ca745d818cd6439e8087905010e4
Validity
Not Before: Mar 7 17:38:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ade87a740c0d5253015627018b375899cbc42008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:6b:e5:4a:d7:df:9e:5d:51:2f:a8:3e:62:
5c:f9:f9:0b:20:68:f1:f8:e1:cb:b5:0c:1d:02:e2:
7a:db:22:84:b2:16:03:e5:df:e7:aa:a3:1a:99:7a:
ad:be:07:c9:09:12:a2:1d:6c:7b:e2:e4:c5:dc:12:
f4:74:97:1b:5f:21:d6:30:ec:e3:9f:1d:45:34:f8:
a4:4c:c0:51:f4:39:bc:f6:46:a5:05:88:64:ca:b0:
91:e6:4b:7f:ca:e8:ef:0c:02:76:a8:22:4f:2e:36:
c3:74:22:6a:2c:49:55:93:c2:d4:5b:70:05:c7:c4:
86:64:52:3d:e4:97:3f:79:23:ae:8a:ac:88:4a:f1:
39:cc:ab:22:1e:28:44:05:5b:d4:45:6f:13:d1:8d:
1f:ea:d1:1c:6a:35:99:37:89:d3:ca:d3:49:31:47:
de:4b:08:b9:1d:c6:d9:56:e8:9d:b3:d3:04:9a:4a:
b1:4d:f2:bb:ce:86:e1:06:0e:15:c9:53:ba:3a:16:
99:48:54:3b:c7:f8:c2:ba:2c:d5:f9:c9:bc:e8:d5:
df:37:5e:23:52:80:41:54:b4:b4:9f:94:95:e1:63:
6e:3a:2a:b0:1c:24:5d:e6:6b:97:9b:83:3b:87:60:
f0:79:2e:78:3c:e8:88:f5:5e:6a:b1:9c:45:9a:eb:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E8:7A:74:0C:0D:52:53:01:56:27:01:8B:37:58:99:CB:C4:20:08
X509v3 Authority Key Identifier:
keyid:87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/reh6dAwNUlMBVicBizdYmcvEIAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.51.0/24
Signature Algorithm: sha256WithRSAEncryption
33:eb:6e:ac:e2:a1:a8:bf:f6:0e:5d:bd:11:f0:75:d0:c4:cf:
b9:2e:8f:00:a8:80:52:d0:31:54:c3:30:77:c8:8c:75:2b:61:
62:4f:3c:20:07:f3:27:75:1a:a1:e7:f5:1f:c5:41:47:a1:40:
c3:2c:d4:20:88:28:2b:58:b6:0d:7a:c4:95:00:ba:6c:59:b3:
d9:7e:87:75:55:af:90:d3:6b:db:26:3e:46:da:c4:05:35:40:
5f:e3:b8:64:87:0e:f5:67:a8:48:0d:0a:cc:b6:1c:29:c0:5b:
48:08:14:ad:d4:bc:31:32:0d:73:4c:a1:bc:90:b1:ad:78:9a:
b5:35:50:d6:ce:02:9f:f3:d2:e2:ab:ab:5b:89:03:f9:90:2b:
2c:b7:a9:f1:dd:66:68:59:fc:7b:09:8f:5c:89:ec:3b:72:e0:
90:40:21:a3:2b:99:00:52:b6:63:51:5d:41:a7:25:12:7c:e3:
48:f2:eb:a0:d3:b6:32:f4:df:67:50:70:9c:b0:9f:24:28:95:
47:0a:4a:4d:3d:eb:32:07:fb:79:e6:f6:50:5b:99:0d:16:a0:
7a:c2:96:24:74:3f:97:23:87:ee:99:1f:d0:bc:ac:24:c2:5b:
dd:2e:f1:82:c4:23:c3:9e:dd:71:c9:8a:2f:66:19:6f:36:82:
18:8b:9b:a1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASF90TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
N2MyMzJkM2YwMDVjYTc0NWQ4MThjZDY0MzllODA4NzkwNTAxMGU0MB4XDTIyMDMw
NzE3Mzg0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWRlODdhNzQwYzBk
NTI1MzAxNTYyNzAxOGIzNzU4OTljYmM0MjAwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKHba+VK19+eXVEvqD5iXPn5CyBo8fjhy7UMHQLietsihLIW
A+Xf56qjGpl6rb4HyQkSoh1se+LkxdwS9HSXG18h1jDs458dRTT4pEzAUfQ5vPZG
pQWIZMqwkeZLf8ro7wwCdqgiTy42w3QiaixJVZPC1FtwBcfEhmRSPeSXP3kjroqs
iErxOcyrIh4oRAVb1EVvE9GNH+rRHGo1mTeJ08rTSTFH3ksIuR3G2VbonbPTBJpK
sU3yu86G4QYOFclTujoWmUhUO8f4wros1fnJvOjV3zdeI1KAQVS0tJ+UleFjbjoq
sBwkXeZrl5uDO4dg8HkueDzoiPVearGcRZrrEvUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSt6Hp0DA1SUwFWJwGLN1iZy8QgCDAfBgNVHSMEGDAWgBSHwjLT8AXKdF2B
jNZDnoCHkFAQ5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2g4SXkwX0FGeW5SZGdZeldRNTZBaDVCUUVPUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvNWY1NzY3LTdhZjUtNGM2Ni05NjkyLTVkNGIwYjc4ZTRlYi8x
L3JlaDZkQXdOVWxNQlZpY0JpemRZbWN2RUlBZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
NWY1NzY3LTdhZjUtNGM2Ni05NjkyLTVkNGIwYjc4ZTRlYi8xL2g4SXkwX0FGeW5S
ZGdZeldRNTZBaDVCUUVPUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD4DMzANBgkqhkiG9w0BAQsFAAOC
AQEAM+turOKhqL/2Dl29EfB10MTPuS6PAKiAUtAxVMMwd8iMdSthYk88IAfzJ3Ua
oef1H8VBR6FAwyzUIIgoK1i2DXrElQC6bFmz2X6HdVWvkNNr2yY+RtrEBTVAX+O4
ZIcO9WeoSA0KzLYcKcBbSAgUrdS8MTINc0yhvJCxrXiatTVQ1s4Cn/PS4qurW4kD
+ZArLLep8d1maFn8ewmPXInsO3LgkEAhoyuZAFK2Y1FdQaclEnzjSPLroNO2MvTf
Z1BwnLCfJCiVRwpKTT3rMgf7eeb2UFuZDRagesKWJHQ/lyOH7pkf0LysJMJb3S7x
gsQjw57dccmKL2YZbzaCGIuboQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:24 2025 by rpki-client