Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0MkZ5Uh6o0gpOkQTzDsFGFtWYSg.roa
File: 0MkZ5Uh6o0gpOkQTzDsFGFtWYSg.roa (raw, json)
Hash identifier: 0Ca3w4dlSTy0ABG1G6YZuX17ZJgejHy8jOuPqdhB+mQ=
Subject key identifier: D0:C9:19:E5:48:7A:A3:48:29:3A:44:13:CC:3B:05:18:5B:56:61:28
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01878044C1864F5B1EE2D3CA7D6E6BF5F27D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0MkZ5Uh6o0gpOkQTzDsFGFtWYSg.roa
Signing time: Fri 14 Apr 2023 14:56:42 +0000
ROA not before: Fri 14 Apr 2023 14:56:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 286
IP address blocks: 62.132.116.0/23 maxlen: 23
62.132.114.0/23 maxlen: 23
192.129.32.0/23 maxlen: 24
192.129.36.0/24 maxlen: 24
62.132.132.0/23 maxlen: 23
192.129.43.0/24 maxlen: 24
192.129.44.0/24 maxlen: 24
192.129.46.0/24 maxlen: 24
192.129.48.0/24 maxlen: 24
192.129.56.0/24 maxlen: 24
192.129.54.0/24 maxlen: 24
62.41.160.0/24 maxlen: 24
62.41.80.0/22 maxlen: 22
62.41.84.0/23 maxlen: 23
62.41.102.0/24 maxlen: 24
192.16.202.0/24 maxlen: 24
194.121.52.0/22 maxlen: 22
92.71.0.0/17 maxlen: 17
192.67.190.0/23 maxlen: 23
192.67.192.0/22 maxlen: 22
192.67.196.0/24 maxlen: 24
62.41.16.0/21 maxlen: 21
62.132.0.0/22 maxlen: 22
62.41.24.0/22 maxlen: 22
62.132.16.0/22 maxlen: 22
62.41.37.0/24 maxlen: 24
62.41.32.0/24 maxlen: 24
62.132.24.0/23 maxlen: 23
62.132.28.0/24 maxlen: 24
92.71.128.0/18 maxlen: 18
62.132.42.0/23 maxlen: 23
62.41.56.0/21 maxlen: 21
62.41.64.0/20 maxlen: 20
192.54.104.0/24 maxlen: 24
62.41.0.0/20 maxlen: 20
2a00:1750::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:44:c1:86:4f:5b:1e:e2:d3:ca:7d:6e:6b:f5:f2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 14 14:56:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0c919e5487aa348293a4413cc3b05185b566128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:14:41:9a:ba:f7:67:2f:52:50:b4:53:d2:
09:52:30:f8:f5:0b:cd:1a:86:b5:f8:58:11:1b:2e:
a6:12:47:54:b3:f9:16:dc:4c:11:83:87:25:2b:71:
97:4d:f8:8c:4c:bd:f6:bb:dc:b4:2e:e5:f9:9a:b0:
4f:cb:79:43:57:7b:2e:3c:15:8d:25:14:b6:48:7f:
57:42:3f:c4:75:64:5d:04:d3:ee:5b:8a:4c:d5:d2:
c6:c6:a6:0b:ee:ca:e8:e3:6d:a4:f1:e6:4c:59:c9:
39:8a:7b:13:7b:c2:d0:64:f2:ee:ee:bb:2f:f0:d9:
e9:ff:3e:ea:16:ae:81:76:b5:d1:e5:76:7d:c7:cf:
6a:7d:1c:d7:d0:7e:ee:c7:a2:2d:6b:44:83:27:b2:
b2:ea:94:1f:3f:10:9c:13:44:db:ec:4c:ac:71:7d:
b1:16:4c:fc:02:83:93:9a:e9:1c:e1:b2:ff:11:11:
d4:30:f3:b3:c3:36:57:c5:1d:8c:bc:00:2e:84:96:
1a:b0:5f:55:50:2f:3c:e6:dc:b4:c7:ad:b1:00:e6:
ca:fe:bf:b3:3a:35:fc:cb:fd:e7:ed:55:a1:03:ed:
c5:b6:2c:94:75:44:bd:94:35:c1:b1:e1:ab:34:ff:
3c:25:2c:50:b1:5c:df:9e:d2:3d:dd:6e:58:a9:ae:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:19:E5:48:7A:A3:48:29:3A:44:13:CC:3B:05:18:5B:56:61:28
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0MkZ5Uh6o0gpOkQTzDsFGFtWYSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.0.0-62.41.27.255
62.41.32.0/24
62.41.37.0/24
62.41.56.0-62.41.85.255
62.41.102.0/24
62.41.160.0/24
62.132.0.0/22
62.132.16.0/22
62.132.24.0/23
62.132.28.0/24
62.132.42.0/23
62.132.114.0-62.132.117.255
62.132.132.0/23
92.71.0.0-92.71.191.255
192.16.202.0/24
192.54.104.0/24
192.67.190.0-192.67.196.255
192.129.32.0/23
192.129.36.0/24
192.129.43.0-192.129.44.255
192.129.46.0/24
192.129.48.0/24
192.129.54.0/24
192.129.56.0/24
194.121.52.0/22
IPv6:
2a00:1750::/32
Signature Algorithm: sha256WithRSAEncryption
59:fc:5f:62:36:db:d1:05:d5:c5:a6:5a:e6:38:e4:49:b2:88:
15:99:4f:30:e0:81:10:2d:aa:04:e3:4c:f6:79:3c:43:27:cd:
46:15:5f:58:64:fb:f4:c9:33:da:17:4a:98:a1:59:23:d9:58:
56:61:d7:82:e8:51:c4:5f:e5:33:b9:cb:64:ad:cb:31:1d:99:
2f:15:b9:1d:64:65:60:90:3f:8e:7d:ed:92:e0:e0:c6:76:ed:
d3:dd:93:77:86:d1:bc:80:5d:c6:36:28:52:13:64:44:bd:63:
f5:93:6a:ce:c5:63:a9:84:7c:5e:a8:53:9a:b7:bc:86:3a:48:
06:e5:09:11:01:3a:33:d4:01:77:e1:c4:5b:87:e1:c0:2f:e9:
cc:7e:d2:2d:24:89:9b:7e:45:fa:da:b2:81:5b:46:29:cf:fc:
7e:37:ad:10:5a:91:85:bf:c7:d9:5a:37:99:4e:4d:77:10:d7:
4b:ab:03:02:7a:9e:e3:06:9c:f4:fe:60:74:7f:ae:69:46:ac:
c1:25:e6:94:db:f2:8b:65:21:aa:01:db:3f:34:f0:d4:1b:99:
b1:00:54:1c:19:b2:98:3a:a9:c0:6f:62:40:d3:d9:2e:41:a3:
ce:48:d0:e3:7e:8a:a9:6e:fd:77:0c:bc:21:99:1f:54:e3:6f:
07:f1:fc:1a
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgISAYeARMGGT1se4tPKfW5r9fJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjMwNDE0MTQ1NjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGM5MTllNTQ4N2FhMzQ4MjkzYTQ0MTNjYzNiMDUxODViNTY2MTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5gUQZq692cvUlC0U9IJUjD49QvN
Goa1+FgRGy6mEkdUs/kW3EwRg4clK3GXTfiMTL32u9y0LuX5mrBPy3lDV3suPBWN
JRS2SH9XQj/EdWRdBNPuW4pM1dLGxqYL7sro422k8eZMWck5insTe8LQZPLu7rsv
8Nnp/z7qFq6BdrXR5XZ9x89qfRzX0H7ux6Ita0SDJ7Ky6pQfPxCcE0Tb7EyscX2x
Fkz8AoOTmukc4bL/ERHUMPOzwzZXxR2MvAAuhJYasF9VUC885ty0x62xAObK/r+z
OjX8y/3n7VWhA+3FtiyUdUS9lDXBseGrNP88JSxQsVzfntI93W5Yqa6o+QIDAQAB
o4IC2zCCAtcwHQYDVR0OBBYEFNDJGeVIeqNIKTpEE8w7BRhbVmEoMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvME1rWjVVaDZvMGdwT2tRVHpEc0ZHRnRXWVNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHwBggrBgEFBQcBBwEB/wSB4DCB3TCBywQCAAEwgcQwCwMD
AD4pAwQCPikYAwQAPikgAwQAPiklMAwDBAM+KTgDBAE+KVQDBAA+KWYDBAA+KaAD
BAI+hAADBAI+hBADBAE+hBgDBAA+hBwDBAE+hCowDAMEAT6EcgMEAT6EdAMEAT6E
hDALAwMAXEcDBAZcR4ADBADAEMoDBADANmgwDAMEAcBDvgMEAMBDxAMEAcCBIAME
AMCBJDAMAwQAwIErAwQAwIEsAwQAwIEuAwQAwIEwAwQAwIE2AwQAwIE4AwQCwnk0
MA0EAgACMAcDBQAqABdQMA0GCSqGSIb3DQEBCwUAA4IBAQBZ/F9iNtvRBdXFplrm
OORJsogVmU8w4IEQLaoE40z2eTxDJ81GFV9YZPv0yTPaF0qYoVkj2VhWYdeC6FHE
X+UzuctkrcsxHZkvFbkdZGVgkD+Ofe2S4ODGdu3T3ZN3htG8gF3GNihSE2REvWP1
k2rOxWOphHxeqFOat7yGOkgG5QkRAToz1AF34cRbh+HAL+nMftItJImbfkX62rKB
W0Ypz/x+N60QWpGFv8fZWjeZTk13ENdLqwMCep7jBpz0/mB0f65pRqzBJeaU2/KL
ZSGqAds/NPDUG5mxAFQcGbKYOqnAb2JA09kuQaPOSNDjfoqpbv13DLwhmR9U428H
8fwa
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:53 2025 by rpki-client