Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/sJvEkSJ6ZY-APMsJkII5IBkiONI.roa
File: sJvEkSJ6ZY-APMsJkII5IBkiONI.roa (raw, json)
Hash identifier: pkf2ZKR9e5qoyR9b+oCB+lvoEJ2ltJ2MDRjGysX2XRc=
Subject key identifier: B0:9B:C4:91:22:7A:65:8F:80:3C:CB:09:90:82:39:20:19:22:38:D2
Certificate issuer: /CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Certificate serial: 0187477FDCE26932EB98D7912DCFD1E3ECFE
Authority key identifier: 74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/sJvEkSJ6ZY-APMsJkII5IBkiONI.roa
Signing time: Mon 03 Apr 2023 14:22:54 +0000
ROA not before: Mon 03 Apr 2023 14:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205124
IP address blocks: 149.62.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:7f:dc:e2:69:32:eb:98:d7:91:2d:cf:d1:e3:ec:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Validity
Not Before: Apr 3 14:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b09bc491227a658f803ccb0990823920192238d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5c:b4:56:2e:97:20:46:8b:92:61:97:75:76:
1d:f2:6e:f4:83:de:51:4d:27:8f:41:07:43:1a:8c:
49:52:22:3b:ed:48:b6:97:2e:d2:35:2c:a2:8e:78:
d0:f9:4d:74:c2:c3:8c:b4:03:64:df:19:8c:ff:2a:
58:49:0d:7b:28:da:59:da:f1:62:7b:ea:7b:58:6b:
84:08:9d:31:61:93:41:a9:2a:29:ad:cb:17:df:24:
bd:88:66:c2:cd:4d:db:95:3a:1e:c8:07:a1:c9:40:
eb:9c:d8:42:db:a5:3e:52:00:24:9b:32:33:ae:07:
6e:3d:a5:c2:5a:16:fb:8a:a0:96:48:4d:8d:80:a3:
99:4f:97:71:ee:e4:45:5b:1c:eb:c5:fd:79:8d:b3:
c3:df:42:3b:7b:29:a0:3d:b9:e5:19:41:79:51:7f:
c9:38:83:dc:9b:b1:9d:0b:95:07:3e:e0:11:03:db:
ef:e8:71:ec:a1:ee:de:55:4b:a9:40:05:6c:c0:c1:
8d:34:74:df:4e:04:88:3d:b2:6e:33:4a:e7:6e:23:
e3:38:f9:7e:c6:4e:47:4b:ef:99:70:54:c9:b7:ea:
3f:f3:75:68:ba:1e:4b:8e:98:a2:04:73:c5:f9:63:
fd:a9:c6:e3:10:5e:85:e9:77:fe:33:b6:6f:0d:82:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9B:C4:91:22:7A:65:8F:80:3C:CB:09:90:82:39:20:19:22:38:D2
X509v3 Authority Key Identifier:
keyid:74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/sJvEkSJ6ZY-APMsJkII5IBkiONI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/dHM-CN3CU2e-bzrYps79GOde7YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.35.0/24
Signature Algorithm: sha256WithRSAEncryption
18:68:a9:15:c1:da:ed:77:df:b7:23:5f:e2:6a:49:db:a7:4c:
66:26:be:d8:a1:63:f7:67:40:2a:a5:b7:fb:70:21:06:a3:b4:
e0:11:76:a2:d3:4a:60:81:fa:f8:e9:d0:9d:c1:07:8b:f7:b3:
8f:5d:5d:a9:69:d1:ad:f9:30:8f:2f:90:22:55:7e:95:ba:52:
6f:ec:86:e8:62:d7:d4:d2:aa:f3:4b:b1:4c:39:44:65:6a:f0:
17:6c:ae:76:ea:51:67:8f:56:8a:90:bc:9b:d3:53:43:b7:a1:
7f:b6:e3:b0:58:44:7c:6b:55:ea:be:7c:19:c4:ec:dd:a7:f6:
0c:71:2d:f4:13:a0:94:d5:dd:b4:e1:91:16:ee:34:27:77:7a:
0f:3f:87:fa:ee:fc:81:a9:03:91:72:30:ad:fb:d6:1b:b6:f0:
c0:10:21:c9:96:76:68:1d:95:e1:c5:b9:ef:be:86:60:fd:e8:
9f:a1:5c:d4:23:75:cf:fc:fd:8d:ee:b1:d3:23:57:31:5a:45:
73:9f:3e:da:40:e9:5c:eb:11:42:f3:30:d7:5e:6f:d9:5d:cb:
b0:af:a9:b4:e5:e8:65:27:5f:c5:7c:0a:46:a4:94:98:7c:47:
6c:0b:6e:46:05:5f:11:53:e0:d3:e8:8c:95:a9:3d:3a:80:18:
27:1b:88:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdHf9ziaTLrmNeRLc/R4+z+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzMzZTA4ZGRjMjUzNjdiZTZmM2FkOGE2Y2VmZDE4ZTc1
ZWVkODIwHhcNMjMwNDAzMTQyMjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDliYzQ5MTIyN2E2NThmODAzY2NiMDk5MDgyMzkyMDE5MjIzOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFy0Vi6XIEaLkmGXdXYd8m70g95R
TSePQQdDGoxJUiI77Ui2ly7SNSyijnjQ+U10wsOMtANk3xmM/ypYSQ17KNpZ2vFi
e+p7WGuECJ0xYZNBqSoprcsX3yS9iGbCzU3blToeyAehyUDrnNhC26U+UgAkmzIz
rgduPaXCWhb7iqCWSE2NgKOZT5dx7uRFWxzrxf15jbPD30I7eymgPbnlGUF5UX/J
OIPcm7GdC5UHPuARA9vv6HHsoe7eVUupQAVswMGNNHTfTgSIPbJuM0rnbiPjOPl+
xk5HS++ZcFTJt+o/83Vouh5LjpiiBHPF+WP9qcbjEF6F6Xf+M7ZvDYIliQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLCbxJEiemWPgDzLCZCCOSAZIjjSMB8GA1UdIwQY
MBaAFHRzPgjdwlNnvm862KbO/RjnXu2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhNLUNOM0NVMmUtYnpyWXBzNzlHT2RlN1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjFjODktNmFiMy00Mjg1LTk4ZWIt
YzkxOGUyZjcyOWFhLzEvc0p2RWtTSjZaWS1BUE1zSmtJSTVJQmtpT05JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZjFjODktNmFiMy00Mjg1LTk4ZWItYzkxOGUyZjcyOWFh
LzEvZEhNLUNOM0NVMmUtYnpyWXBzNzlHT2RlN1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlT4jMA0G
CSqGSIb3DQEBCwUAA4IBAQAYaKkVwdrtd9+3I1/iaknbp0xmJr7YoWP3Z0Aqpbf7
cCEGo7TgEXai00pggfr46dCdwQeL97OPXV2padGt+TCPL5AiVX6VulJv7IboYtfU
0qrzS7FMOURlavAXbK526lFnj1aKkLyb01NDt6F/tuOwWER8a1XqvnwZxOzdp/YM
cS30E6CU1d204ZEW7jQnd3oPP4f67vyBqQORcjCt+9YbtvDAECHJlnZoHZXhxbnv
voZg/eifoVzUI3XP/P2N7rHTI1cxWkVznz7aQOlc6xFC8zDXXm/ZXcuwr6m05ehl
J1/FfApGpJSYfEdsC25GBV8RU+DT6IyVqT06gBgnG4iE
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:39:01 2025 by rpki-client