Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/1_ZWBl1YmhwssUSD8MdSuCgWrTE.roa
File: 1_ZWBl1YmhwssUSD8MdSuCgWrTE.roa (raw, json)
Hash identifier: mqa6R8Ho7cgb4JlGw5m9Bw9hbrJ0q12dm3neIFuAud4=
Subject key identifier: D7:F6:56:06:5D:58:9A:1C:2C:B1:44:83:F0:C7:52:B8:28:16:AD:31
Certificate issuer: /CN=caeed2e1bb505049adb39884436cf2cb3e745224
Certificate serial: 018D843004ADEBFA48BC5D19390ED368067A
Authority key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/1_ZWBl1YmhwssUSD8MdSuCgWrTE.roa
Signing time: Wed 07 Feb 2024 15:29:15 +0000
ROA not before: Wed 07 Feb 2024 15:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 62.3.3.0/24 maxlen: 24
91.242.239.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
146.19.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:30:04:ad:eb:fa:48:bc:5d:19:39:0e:d3:68:06:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeed2e1bb505049adb39884436cf2cb3e745224
Validity
Not Before: Feb 7 15:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7f656065d589a1c2cb14483f0c752b82816ad31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:37:5e:d9:6f:1d:27:7c:8b:75:2a:18:c2:
2f:3b:c7:fe:bc:78:8c:bb:ca:3c:55:c1:6d:3a:00:
e5:e8:c9:81:ff:6e:b6:d2:8d:a9:58:aa:e0:39:aa:
83:63:05:6a:2c:76:10:d4:58:c3:d8:44:d7:c9:c3:
f5:6f:74:d2:3c:c5:e9:91:bb:e5:01:8b:26:ed:17:
c9:4e:79:59:ed:b4:5a:92:d2:c5:89:0e:a4:e5:9d:
f7:93:bd:58:3c:ed:91:05:b6:23:2b:e1:ae:ec:a0:
38:37:23:ea:1d:aa:38:86:82:44:30:51:a7:f0:f4:
43:e0:e9:78:39:76:22:75:5c:8e:2c:c1:7f:5a:04:
a1:7a:5e:00:a5:d0:91:e3:1b:a0:df:75:e8:01:8d:
8a:7f:fc:82:09:66:09:3e:a9:ae:79:b9:f2:b1:0c:
9a:c6:66:3c:7e:81:73:20:b6:99:4a:f6:42:7b:c1:
bd:6a:dd:2c:b2:46:a1:ba:31:82:46:5c:7f:4f:ac:
42:c3:10:61:1a:6d:6e:b1:7b:71:3e:4a:0b:40:07:
8f:42:51:d4:fc:44:3f:fd:9d:0c:de:23:c2:98:13:
bf:b5:75:84:08:89:aa:2e:a0:8b:63:11:a4:f8:92:
dd:04:62:43:df:84:42:a2:2a:46:36:87:1c:e2:33:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F6:56:06:5D:58:9A:1C:2C:B1:44:83:F0:C7:52:B8:28:16:AD:31
X509v3 Authority Key Identifier:
keyid:CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/1_ZWBl1YmhwssUSD8MdSuCgWrTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.3.0/24
91.242.239.0/24
93.190.121.0/24
146.19.65.0/24
Signature Algorithm: sha256WithRSAEncryption
19:df:df:b3:15:e4:41:d6:75:07:04:3a:21:f1:07:6c:3b:32:
82:85:0b:04:56:a1:26:cd:9c:e3:c5:5e:95:86:6d:77:46:e8:
57:be:56:39:fd:5a:99:62:6e:37:c5:fe:6d:e8:f5:24:49:b0:
e8:ab:2a:a5:46:18:33:8b:59:f4:3b:fe:14:09:65:78:2a:16:
f2:83:93:78:cd:6f:bf:0b:7b:26:16:a7:dd:67:e1:cf:b9:21:
f1:81:21:9c:07:3c:6a:8f:cb:69:98:09:a2:a7:51:06:da:92:
42:47:5e:76:b3:fd:4b:f2:76:9b:fc:06:b3:e3:5d:56:13:fa:
b8:95:db:71:81:61:ad:84:07:28:47:01:25:4b:a9:fb:cb:6b:
92:6b:7c:0e:fd:bc:07:d1:20:76:7d:40:74:0b:67:65:70:7e:
c2:d9:7e:1d:98:6c:a0:b6:17:dd:88:c4:b2:f2:59:b9:16:5e:
df:cb:fc:fd:16:bc:09:9c:44:d0:27:6f:1a:54:b2:cf:c8:44:
06:a9:b0:5f:b9:67:5e:c8:f6:be:79:bf:68:a0:ce:da:47:bd:
c7:99:e8:7c:58:06:13:fa:f9:fc:2a:01:fb:09:d8:f6:f4:95:
dc:51:a6:b8:35:41:4c:f2:39:63:ec:32:42:03:2e:55:b0:5a:
3d:93:bf:9f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY2EMASt6/pIvF0ZOQ7TaAZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWVkMmUxYmI1MDUwNDlhZGIzOTg4NDQzNmNmMmNiM2U3
NDUyMjQwHhcNMjQwMjA3MTUyOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2Y2NTYwNjVkNTg5YTFjMmNiMTQ0ODNmMGM3NTJiODI4MTZhZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXQ3XtlvHSd8i3UqGMIvO8f+vHiM
u8o8VcFtOgDl6MmB/2620o2pWKrgOaqDYwVqLHYQ1FjD2ETXycP1b3TSPMXpkbvl
AYsm7RfJTnlZ7bRaktLFiQ6k5Z33k71YPO2RBbYjK+Gu7KA4NyPqHao4hoJEMFGn
8PRD4Ol4OXYidVyOLMF/WgShel4ApdCR4xug33XoAY2Kf/yCCWYJPqmuebnysQya
xmY8foFzILaZSvZCe8G9at0sskahujGCRlx/T6xCwxBhGm1usXtxPkoLQAePQlHU
/EQ//Z0M3iPCmBO/tXWECImqLqCLYxGk+JLdBGJD34RCoipGNocc4jORvwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNf2VgZdWJocLLFEg/DHUrgoFq0xMB8GA1UdIwQY
MBaAFMru0uG7UFBJrbOYhENs8ss+dFIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU3UzRidFFVRW10czVpRVEyenl5ejUwVWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iYmNmYWEtN2M0NS00OTM1LTkxNTkt
ZGRlNzY5ZDdhZGU5LzEvMV9aV0JsMVltaHdzc1VTRDhNZFN1Q2dXclRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iYmNmYWEtN2M0NS00OTM1LTkxNTktZGRlNzY5ZDdhZGU5
LzEveXU3UzRidFFVRW10czVpRVEyenl5ejUwVWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPgMDAwQA
W/LvAwQAXb55AwQAkhNBMA0GCSqGSIb3DQEBCwUAA4IBAQAZ39+zFeRB1nUHBDoh
8QdsOzKChQsEVqEmzZzjxV6Vhm13RuhXvlY5/VqZYm43xf5t6PUkSbDoqyqlRhgz
i1n0O/4UCWV4Khbyg5N4zW+/C3smFqfdZ+HPuSHxgSGcBzxqj8tpmAmip1EG2pJC
R152s/1L8nab/Aaz411WE/q4ldtxgWGthAcoRwElS6n7y2uSa3wO/bwH0SB2fUB0
C2dlcH7C2X4dmGygthfdiMSy8lm5Fl7fy/z9FrwJnETQJ28aVLLPyEQGqbBfuWde
yPa+eb9ooM7aR73Hmeh8WAYT+vn8KgH7Cdj29JXcUaa4NUFM8jlj7DJCAy5VsFo9
k7+f
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:40 2024 by rpki-client on console-ams.rpki-client.org