Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/ZcViG03zi0Ri-f-zs3U8hhPkGm0.roa
File: ZcViG03zi0Ri-f-zs3U8hhPkGm0.roa (raw, json)
Hash identifier: qkYpInsANVbsVGSbDlTE6JXUH1xEwfBqOjsi9Jc/Y0E=
Subject key identifier: 65:C5:62:1B:4D:F3:8B:44:62:F9:FF:B3:B3:75:3C:86:13:E4:1A:6D
Certificate issuer: /CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Certificate serial: 0182165BFBA594BE7E04D0EB7D12AB329E5A
Authority key identifier: 74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/ZcViG03zi0Ri-f-zs3U8hhPkGm0.roa
Signing time: Tue 19 Jul 2022 12:08:23 +0000
ROA not before: Tue 19 Jul 2022 12:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 149.62.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:5b:fb:a5:94:be:7e:04:d0:eb:7d:12:ab:32:9e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Validity
Not Before: Jul 19 12:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65c5621b4df38b4462f9ffb3b3753c8613e41a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:17:f9:f8:19:02:a1:81:dd:46:16:4f:ce:58:
22:07:40:8d:a9:60:f0:96:8e:7a:7d:6e:8a:43:62:
30:f5:e7:a2:7d:46:01:f8:91:bd:be:cc:c9:df:34:
9e:2c:40:9c:99:8e:9d:27:d2:a2:64:e7:8a:67:df:
d6:b2:61:6f:e5:10:50:99:10:b4:b4:af:47:58:17:
43:4c:50:77:1c:0c:41:31:b7:1c:19:f1:6d:e7:f9:
28:a4:99:ca:4e:2c:2e:dc:3c:e9:3a:5d:26:8f:05:
e9:60:fe:48:82:75:ac:b3:06:24:60:84:57:7f:d4:
89:d1:c7:83:8d:bd:39:c8:f7:41:93:0f:7e:c9:53:
2c:90:22:a2:29:c3:a1:e7:5d:e5:19:a6:88:6f:35:
5f:ab:88:2e:ae:db:cd:d2:9e:ee:5e:bc:db:f1:4e:
be:f2:5e:0e:2c:75:33:55:52:87:f3:e5:c4:ed:fc:
b5:ab:4e:a0:e8:e4:74:cd:45:de:e2:8e:d4:25:6a:
7f:5c:c4:fe:89:c1:a4:da:e3:1c:e6:39:8b:81:bd:
fd:47:e9:eb:41:6c:24:fa:79:ab:17:76:ce:50:fd:
1a:78:36:04:bd:72:f8:da:12:92:7c:fb:14:b6:c1:
7a:64:66:d9:53:ee:53:1c:6d:0b:d3:7f:e3:14:e8:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C5:62:1B:4D:F3:8B:44:62:F9:FF:B3:B3:75:3C:86:13:E4:1A:6D
X509v3 Authority Key Identifier:
keyid:74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/ZcViG03zi0Ri-f-zs3U8hhPkGm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/dHM-CN3CU2e-bzrYps79GOde7YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.32.0/22
Signature Algorithm: sha256WithRSAEncryption
67:cb:68:4c:04:a5:91:c8:0c:ef:a6:4c:f6:80:b5:a7:ca:01:
4c:cd:68:1e:36:ac:bf:a5:10:7d:62:70:2a:84:60:62:ea:ff:
9f:62:58:29:a4:d9:37:3c:fb:f2:fa:48:c9:f4:a7:8b:a4:c6:
6f:d7:7e:30:52:ae:80:c6:1c:98:32:bf:dd:83:6d:fa:fb:be:
d8:33:9e:1f:00:a4:37:d8:01:76:c4:f2:b6:c3:19:2c:e6:f6:
f1:72:3d:fd:34:52:50:93:6a:d8:58:da:41:c5:f7:aa:b8:34:
ac:7c:8d:e3:18:1e:4a:de:b0:97:29:b3:fe:d4:ea:27:36:db:
fb:4f:a8:c9:f3:51:65:dc:c9:9c:85:3a:6d:15:61:00:df:04:
29:e9:19:21:cc:76:6f:46:26:29:21:a4:ce:19:5a:2c:cf:cf:
f0:59:57:1f:f0:20:2c:55:1f:b3:a8:c5:7f:96:b1:d5:80:38:
a5:49:85:e5:b9:a1:ed:e0:ff:9f:a2:80:76:20:c2:94:82:1a:
4c:41:44:c0:82:5d:8d:1d:6b:1f:1f:ab:18:d4:7a:74:7d:13:
d4:c9:55:12:9f:3b:6b:a2:0d:df:e9:a7:2d:2d:13:a3:bb:df:
c4:35:74:93:a4:6d:38:2f:fb:a7:70:b1:92:16:c9:b1:0e:da:
56:f0:3f:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIWW/ullL5+BNDrfRKrMp5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzMzZTA4ZGRjMjUzNjdiZTZmM2FkOGE2Y2VmZDE4ZTc1
ZWVkODIwHhcNMjIwNzE5MTIwODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWM1NjIxYjRkZjM4YjQ0NjJmOWZmYjNiMzc1M2M4NjEzZTQxYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBf5+BkCoYHdRhZPzlgiB0CNqWDw
lo56fW6KQ2Iw9eeifUYB+JG9vszJ3zSeLECcmY6dJ9KiZOeKZ9/WsmFv5RBQmRC0
tK9HWBdDTFB3HAxBMbccGfFt5/kopJnKTiwu3DzpOl0mjwXpYP5IgnWsswYkYIRX
f9SJ0ceDjb05yPdBkw9+yVMskCKiKcOh513lGaaIbzVfq4gurtvN0p7uXrzb8U6+
8l4OLHUzVVKH8+XE7fy1q06g6OR0zUXe4o7UJWp/XMT+icGk2uMc5jmLgb39R+nr
QWwk+nmrF3bOUP0aeDYEvXL42hKSfPsUtsF6ZGbZU+5THG0L03/jFOi0FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXFYhtN84tEYvn/s7N1PIYT5BptMB8GA1UdIwQY
MBaAFHRzPgjdwlNnvm862KbO/RjnXu2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhNLUNOM0NVMmUtYnpyWXBzNzlHT2RlN1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjFjODktNmFiMy00Mjg1LTk4ZWIt
YzkxOGUyZjcyOWFhLzEvWmNWaUcwM3ppMFJpLWYtenMzVThoaFBrR20wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZjFjODktNmFiMy00Mjg1LTk4ZWItYzkxOGUyZjcyOWFh
LzEvZEhNLUNOM0NVMmUtYnpyWXBzNzlHT2RlN1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClT4gMA0G
CSqGSIb3DQEBCwUAA4IBAQBny2hMBKWRyAzvpkz2gLWnygFMzWgeNqy/pRB9YnAq
hGBi6v+fYlgppNk3PPvy+kjJ9KeLpMZv134wUq6AxhyYMr/dg236+77YM54fAKQ3
2AF2xPK2wxks5vbxcj39NFJQk2rYWNpBxfequDSsfI3jGB5K3rCXKbP+1OonNtv7
T6jJ81Fl3MmchTptFWEA3wQp6RkhzHZvRiYpIaTOGVosz8/wWVcf8CAsVR+zqMV/
lrHVgDilSYXluaHt4P+fooB2IMKUghpMQUTAgl2NHWsfH6sY1Hp0fRPUyVUSnztr
og3f6actLROju9/ENXSTpG04L/uncLGSFsmxDtpW8D+9
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:40:58 2025 by rpki-client