Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9KLmZGrUvrRCkhJJMwlfeIKoTO4.roa
File: 9KLmZGrUvrRCkhJJMwlfeIKoTO4.roa (raw, json)
Hash identifier: jVn8QtAlmZbgLVc3a0TTdBKwxFBuLSAob1ryxh2JNWw=
Subject key identifier: F4:A2:E6:64:6A:D4:BE:B4:42:92:12:49:33:09:5F:78:82:A8:4C:EE
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01867420E361C8F46A45CCE0CB086E4FC2DC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9KLmZGrUvrRCkhJJMwlfeIKoTO4.roa
Signing time: Tue 21 Feb 2023 13:19:17 +0000
ROA not before: Tue 21 Feb 2023 13:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14616
IP address blocks: 62.41.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:20:e3:61:c8:f4:6a:45:cc:e0:cb:08:6e:4f:c2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Feb 21 13:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4a2e6646ad4beb44292124933095f7882a84cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:98:98:89:c2:bc:8e:2a:c9:70:a9:cb:ed:
d4:01:46:86:ec:8e:c3:45:8b:fe:3b:46:d3:32:39:
fc:b3:03:07:e3:8d:d8:e1:4b:ac:d6:fb:a0:94:37:
7c:27:f2:63:cf:98:3f:8b:01:29:ca:32:6f:ed:b5:
0a:cc:74:ce:15:9e:c5:1c:e6:08:d5:82:26:79:54:
39:fa:b1:8d:a2:d9:7d:9c:02:21:87:23:1d:22:d2:
80:f9:f0:c7:a5:96:1d:9f:9b:ec:cb:4a:1b:2e:2b:
70:32:17:2b:e1:21:40:55:9d:7e:a2:40:56:68:16:
09:b9:e3:70:12:81:42:cc:2b:6e:82:53:03:ac:df:
87:41:34:7c:d3:e2:53:82:08:af:94:08:0c:34:d3:
7e:74:3d:bd:db:56:ea:0d:2e:46:80:67:37:b8:93:
0d:af:9e:66:c2:c0:5b:b1:5b:89:e7:44:32:91:45:
0e:27:81:49:93:87:71:71:76:56:6b:8c:11:9c:d8:
d1:d3:32:47:a2:ab:bd:32:b5:38:19:3f:b3:b3:31:
5a:25:1d:62:40:04:4e:7f:2e:c8:d1:97:7b:35:b6:
1e:cf:65:b0:ab:fb:5e:87:be:9a:a7:f4:0b:ce:6f:
89:54:a2:90:47:d2:da:a5:07:22:ae:75:96:6b:f8:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:E6:64:6A:D4:BE:B4:42:92:12:49:33:09:5F:78:82:A8:4C:EE
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9KLmZGrUvrRCkhJJMwlfeIKoTO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.66.0/23
Signature Algorithm: sha256WithRSAEncryption
79:48:44:41:ab:52:8b:e5:fa:46:47:62:33:ed:3d:31:f8:89:
15:41:ff:11:f3:67:ff:8d:f1:a3:d0:45:ca:f2:c9:8d:15:b7:
92:e4:c1:0f:bc:de:c8:98:af:fc:24:0f:a0:f9:6a:01:b2:d3:
6c:74:23:3c:b9:89:21:7d:e9:a2:6b:9c:4f:7c:95:88:51:82:
8d:3a:93:99:ad:b0:05:15:e3:0c:a9:ed:4a:80:a2:87:8d:0e:
bb:d9:ab:bf:04:07:af:c7:5d:42:3c:3d:a3:20:9f:7b:27:98:
75:c0:9c:d9:b7:11:77:7a:3a:94:2a:79:5a:2f:29:8b:90:5f:
ed:bc:b3:b4:c0:5d:93:1b:dc:64:97:3c:d5:8c:76:01:04:07:
34:1c:c6:ea:fc:8c:26:9c:f5:e9:43:88:c7:94:67:76:70:af:
69:b4:2d:5f:3f:e6:3f:26:2c:22:26:f4:90:73:48:ff:0a:6a:
02:64:a8:1e:ef:bc:44:a2:1e:37:5e:0e:e4:c6:91:94:ed:9a:
e1:06:5a:8e:7c:84:72:b2:ba:81:29:55:c2:15:81:9e:0a:2e:
91:75:9f:b4:03:d6:57:8d:69:38:1a:92:47:a1:14:53:9f:39:
d7:54:4f:33:2a:6a:cf:2b:45:72:4e:a5:9c:e1:d9:10:82:f5:
7a:f2:55:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ0IONhyPRqRczgywhuT8LcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjMwMjIxMTMxOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGEyZTY2NDZhZDRiZWI0NDI5MjEyNDkzMzA5NWY3ODgyYTg0Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwiYmInCvI4qyXCpy+3UAUaG7I7D
RYv+O0bTMjn8swMH443Y4Uus1vuglDd8J/Jjz5g/iwEpyjJv7bUKzHTOFZ7FHOYI
1YImeVQ5+rGNotl9nAIhhyMdItKA+fDHpZYdn5vsy0obLitwMhcr4SFAVZ1+okBW
aBYJueNwEoFCzCtuglMDrN+HQTR80+JTggivlAgMNNN+dD2921bqDS5GgGc3uJMN
r55mwsBbsVuJ50QykUUOJ4FJk4dxcXZWa4wRnNjR0zJHoqu9MrU4GT+zszFaJR1i
QAROfy7I0Zd7NbYez2Wwq/teh76ap/QLzm+JVKKQR9LapQcirnWWa/h1JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSi5mRq1L60QpISSTMJX3iCqEzuMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvOUtMbVpHclV2clJDa2hKSk13bGZlSUtvVE80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPilCMA0G
CSqGSIb3DQEBCwUAA4IBAQB5SERBq1KL5fpGR2Iz7T0x+IkVQf8R82f/jfGj0EXK
8smNFbeS5MEPvN7ImK/8JA+g+WoBstNsdCM8uYkhfemia5xPfJWIUYKNOpOZrbAF
FeMMqe1KgKKHjQ672au/BAevx11CPD2jIJ97J5h1wJzZtxF3ejqUKnlaLymLkF/t
vLO0wF2TG9xklzzVjHYBBAc0HMbq/IwmnPXpQ4jHlGd2cK9ptC1fP+Y/JiwiJvSQ
c0j/CmoCZKge77xEoh43Xg7kxpGU7ZrhBlqOfIRysrqBKVXCFYGeCi6RdZ+0A9ZX
jWk4GpJHoRRTnznXVE8zKmrPK0VyTqWc4dkQgvV68lXE
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:59 2025 by rpki-client