Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/hB6s-tpupveCwfP4N1U32ewl8K4.roa
File: hB6s-tpupveCwfP4N1U32ewl8K4.roa (raw, json)
Hash identifier: dRQ2hYK1mM/xElK7oTzhF9MalZcBpZtcrsw7J9an0v4=
Subject key identifier: 84:1E:AC:FA:DA:6E:A6:F7:82:C1:F3:F8:37:55:37:D9:EC:25:F0:AE
Certificate issuer: /CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
Certificate serial: 01856C25D52214571B2BDD9F75E2FAC8D945
Authority key identifier: 4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/hB6s-tpupveCwfP4N1U32ewl8K4.roa
Signing time: Sun 01 Jan 2023 07:04:56 +0000
ROA not before: Sun 01 Jan 2023 07:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.204.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:d5:22:14:57:1b:2b:dd:9f:75:e2:fa:c8:d9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
Validity
Not Before: Jan 1 07:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=841eacfada6ea6f782c1f3f8375537d9ec25f0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a7:f1:a2:8f:37:a6:d3:c7:d1:ee:cc:fb:2c:
0b:8c:d8:4f:03:d5:c9:5a:dc:1b:f1:89:79:1a:9e:
98:53:34:1c:ea:86:75:42:8a:19:a5:65:81:6a:71:
0a:01:35:72:f9:8a:bf:e4:4d:f3:95:2a:83:ac:8c:
21:00:65:12:d7:28:83:44:b1:78:75:23:c4:92:a3:
38:71:4a:a5:43:ad:04:10:d8:3c:df:93:64:1a:f6:
67:7c:bc:b5:94:46:6d:cb:2b:39:4a:84:52:24:e2:
99:83:ba:31:76:23:05:a1:d4:2a:99:70:80:e0:e3:
6e:7f:15:41:ca:37:0f:df:b4:ba:de:be:27:bd:94:
3a:f5:4e:ef:c6:f0:7b:7a:07:0a:4a:52:32:8b:43:
8b:6c:81:47:b6:c8:d1:15:25:e9:f2:70:4e:7b:83:
1b:ac:cd:d0:1d:bf:17:ab:8f:fe:db:5b:69:0f:0b:
db:74:00:d4:b6:d0:ae:fe:0e:53:8f:35:28:89:4d:
cd:ae:80:f4:50:f4:89:1b:20:be:62:71:a0:b0:8b:
0d:c4:ff:9a:90:7d:72:75:b6:24:11:6e:0c:29:bd:
0b:22:0d:23:b6:ae:70:c7:ba:dc:79:08:49:2d:54:
aa:bb:e4:8b:34:e1:d0:41:3b:25:00:3f:d4:a7:8f:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1E:AC:FA:DA:6E:A6:F7:82:C1:F3:F8:37:55:37:D9:EC:25:F0:AE
X509v3 Authority Key Identifier:
keyid:4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/hB6s-tpupveCwfP4N1U32ewl8K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/Tpn0wuvUl5v9RhUwo44jVAv5V40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:cc:79:ae:c4:17:32:ce:07:f2:90:82:f0:b9:ca:18:ef:92:
a1:d3:cf:55:40:77:a4:43:41:76:69:a5:bb:23:c5:23:c7:c2:
ec:01:43:92:ef:3f:19:a4:37:05:42:af:3d:81:02:7d:03:7c:
93:09:43:68:32:c1:27:90:d1:ff:02:7b:97:e7:d5:16:bd:01:
a2:e6:23:08:c2:a3:d7:15:30:28:27:37:f4:36:61:8e:02:69:
45:af:63:8c:8e:7d:dc:b7:6b:a5:9c:a1:9b:85:ac:86:87:02:
3a:29:a6:cb:41:af:15:65:cd:e8:ca:0c:38:f6:bc:86:11:a3:
70:e3:29:4e:c9:c8:12:16:66:9f:48:45:35:67:29:55:f1:62:
0e:67:4a:00:f6:33:b3:19:02:41:28:7e:bc:d6:6d:ca:78:de:
2a:b8:b8:fc:fd:9d:fe:c8:5e:01:b2:80:f4:60:d7:f6:e3:95:
18:93:d4:22:73:06:ba:ae:d8:2d:8d:8d:17:c8:19:0e:dd:0e:
b1:32:6a:7e:50:86:45:6a:a9:3c:a0:34:08:7e:38:08:24:71:
34:d5:fe:70:c9:3a:f9:72:39:2a:7f:33:e0:d9:7a:19:37:36:
8c:42:bf:3e:11:8f:00:92:3d:96:ea:f3:b4:42:71:1b:3d:2d:
1b:5d:04:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsJdUiFFcbK92fdeL6yNlFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOTlmNGMyZWJkNDk3OWJmZDQ2MTUzMGEzOGUyMzU0MGJm
OTU3OGQwHhcNMjMwMTAxMDcwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDFlYWNmYWRhNmVhNmY3ODJjMWYzZjgzNzU1MzdkOWVjMjVmMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqfxoo83ptPH0e7M+ywLjNhPA9XJ
Wtwb8Yl5Gp6YUzQc6oZ1QooZpWWBanEKATVy+Yq/5E3zlSqDrIwhAGUS1yiDRLF4
dSPEkqM4cUqlQ60EENg835NkGvZnfLy1lEZtyys5SoRSJOKZg7oxdiMFodQqmXCA
4ONufxVByjcP37S63r4nvZQ69U7vxvB7egcKSlIyi0OLbIFHtsjRFSXp8nBOe4Mb
rM3QHb8Xq4/+21tpDwvbdADUttCu/g5TjzUoiU3NroD0UPSJGyC+YnGgsIsNxP+a
kH1ydbYkEW4MKb0LIg0jtq5wx7rceQhJLVSqu+SLNOHQQTslAD/Up4/4swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIQerPrabqb3gsHz+DdVN9nsJfCuMB8GA1UdIwQY
MBaAFE6Z9MLr1Jeb/UYVMKOOI1QL+VeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBuMHd1dlVsNXY5UmhVd280NGpWQXY1VjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NGI1MDctOTQyZS00M2Q2LWI0MzAt
ODczZDU5MDdiOTRhLzEvaEI2cy10cHVwdmVDd2ZQNE4xVTMyZXdsOEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84NGI1MDctOTQyZS00M2Q2LWI0MzAtODczZDU5MDdiOTRh
LzEvVHBuMHd1dlVsNXY5UmhVd280NGpWQXY1VjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPswzMA0G
CSqGSIb3DQEBCwUAA4IBAQBbzHmuxBcyzgfykILwucoY75Kh089VQHekQ0F2aaW7
I8Ujx8LsAUOS7z8ZpDcFQq89gQJ9A3yTCUNoMsEnkNH/AnuX59UWvQGi5iMIwqPX
FTAoJzf0NmGOAmlFr2OMjn3ct2ulnKGbhayGhwI6KabLQa8VZc3oygw49ryGEaNw
4ylOycgSFmafSEU1ZylV8WIOZ0oA9jOzGQJBKH681m3KeN4quLj8/Z3+yF4BsoD0
YNf245UYk9Qicwa6rtgtjY0XyBkO3Q6xMmp+UIZFaqk8oDQIfjgIJHE01f5wyTr5
cjkqfzPg2XoZNzaMQr8+EY8Akj2W6vO0QnEbPS0bXQTV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:15 2024 by rpki-client on console-fra.rpki-client.org