Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/HzbxpcWjWvqJy2yYsBfVsmh8_Js.roa
File: HzbxpcWjWvqJy2yYsBfVsmh8_Js.roa (raw, json)
Hash identifier: /VP/uIjZ0lUZufbEcGKlKjsdJqloYAgM8YzbdLal4vQ=
Subject key identifier: 1F:36:F1:A5:C5:A3:5A:FA:89:CB:6C:98:B0:17:D5:B2:68:7C:FC:9B
Certificate issuer: /CN=083996c6f2e7a38871f8c001f4f8ba4a705e8799
Certificate serial: 01856C0A52CC59FEAB76E28E34EE24459BA9
Authority key identifier: 08:39:96:C6:F2:E7:A3:88:71:F8:C0:01:F4:F8:BA:4A:70:5E:87:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmWxvLno4hx-MAB9Pi6SnBeh5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/HzbxpcWjWvqJy2yYsBfVsmh8_Js.roa
Signing time: Sun 01 Jan 2023 06:34:53 +0000
ROA not before: Sun 01 Jan 2023 06:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 62.75.39.0/24 maxlen: 24
62.75.43.0/24 maxlen: 24
62.75.42.0/24 maxlen: 24
62.75.41.0/24 maxlen: 24
62.75.40.0/24 maxlen: 24
62.75.44.0/24 maxlen: 24
62.75.46.0/24 maxlen: 24
62.75.45.0/24 maxlen: 24
62.75.50.0/24 maxlen: 24
62.75.49.0/24 maxlen: 24
62.75.48.0/24 maxlen: 24
62.75.47.0/24 maxlen: 24
62.75.51.0/24 maxlen: 24
62.75.53.0/24 maxlen: 24
62.75.52.0/24 maxlen: 24
62.75.57.0/24 maxlen: 24
62.75.56.0/24 maxlen: 24
62.75.55.0/24 maxlen: 24
62.75.60.0/24 maxlen: 24
62.75.59.0/24 maxlen: 24
62.75.63.0/24 maxlen: 24
62.75.61.0/24 maxlen: 24
62.75.67.0/24 maxlen: 24
62.75.66.0/24 maxlen: 24
62.75.65.0/24 maxlen: 24
62.75.70.0/24 maxlen: 24
62.75.68.0/24 maxlen: 24
62.75.71.0/24 maxlen: 24
62.75.77.0/24 maxlen: 24
62.75.76.0/24 maxlen: 24
62.75.75.0/24 maxlen: 24
62.75.78.0/24 maxlen: 24
62.75.74.0/24 maxlen: 24
62.75.73.0/24 maxlen: 24
62.75.72.0/24 maxlen: 24
62.75.81.0/24 maxlen: 24
62.75.80.0/24 maxlen: 24
62.75.79.0/24 maxlen: 24
62.75.84.0/24 maxlen: 24
62.75.83.0/24 maxlen: 24
62.75.82.0/24 maxlen: 24
62.75.85.0/24 maxlen: 24
62.75.88.0/24 maxlen: 24
62.75.87.0/24 maxlen: 24
62.75.86.0/24 maxlen: 24
62.75.91.0/24 maxlen: 24
62.75.90.0/24 maxlen: 24
62.75.89.0/24 maxlen: 24
62.75.0.0/24 maxlen: 24
62.75.4.0/24 maxlen: 24
62.75.3.0/24 maxlen: 24
62.75.7.0/24 maxlen: 24
62.75.6.0/24 maxlen: 24
62.75.5.0/24 maxlen: 24
62.75.11.0/24 maxlen: 24
62.75.9.0/24 maxlen: 24
62.75.14.0/24 maxlen: 24
62.75.12.0/24 maxlen: 24
62.75.25.0/24 maxlen: 24
62.75.29.0/24 maxlen: 24
62.75.28.0/24 maxlen: 24
62.75.27.0/24 maxlen: 24
62.75.26.0/24 maxlen: 24
62.75.31.0/24 maxlen: 24
62.75.30.0/24 maxlen: 24
62.75.32.0/24 maxlen: 24
62.75.36.0/24 maxlen: 24
62.75.35.0/24 maxlen: 24
62.75.34.0/24 maxlen: 24
62.75.33.0/24 maxlen: 24
62.75.38.0/24 maxlen: 24
62.75.37.0/24 maxlen: 24
62.75.95.0/24 maxlen: 24
62.75.94.0/24 maxlen: 24
62.75.93.0/24 maxlen: 24
62.75.92.0/24 maxlen: 24
62.75.98.0/24 maxlen: 24
62.75.97.0/24 maxlen: 24
62.75.96.0/24 maxlen: 24
62.75.102.0/24 maxlen: 24
62.75.101.0/24 maxlen: 24
62.75.100.0/24 maxlen: 24
62.75.99.0/24 maxlen: 24
62.75.105.0/24 maxlen: 24
62.75.104.0/24 maxlen: 24
62.75.103.0/24 maxlen: 24
62.75.109.0/24 maxlen: 24
62.75.106.0/24 maxlen: 24
62.75.112.0/24 maxlen: 24
62.75.111.0/24 maxlen: 24
62.75.110.0/24 maxlen: 24
62.75.116.0/24 maxlen: 24
62.75.115.0/24 maxlen: 24
62.75.114.0/24 maxlen: 24
62.75.113.0/24 maxlen: 24
62.75.118.0/24 maxlen: 24
62.75.117.0/24 maxlen: 24
62.75.119.0/24 maxlen: 24
62.75.123.0/24 maxlen: 24
62.75.122.0/24 maxlen: 24
62.75.121.0/24 maxlen: 24
62.75.120.0/24 maxlen: 24
62.75.125.0/24 maxlen: 24
62.75.124.0/24 maxlen: 24
62.75.126.0/24 maxlen: 24
62.75.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:52:cc:59:fe:ab:76:e2:8e:34:ee:24:45:9b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083996c6f2e7a38871f8c001f4f8ba4a705e8799
Validity
Not Before: Jan 1 06:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f36f1a5c5a35afa89cb6c98b017d5b2687cfc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:68:9e:2d:ce:26:e5:84:07:7a:44:89:a3:
88:e7:47:4b:cb:ed:c6:10:4e:da:c0:01:e9:36:12:
fd:b3:ea:e7:9a:85:d9:04:5d:10:22:20:3d:9b:b0:
04:b1:35:9a:3e:a6:34:75:6e:5c:18:12:f2:0d:37:
fc:11:01:17:ff:0b:53:5a:0d:ea:eb:9e:99:e1:41:
9b:e9:b3:46:5d:22:be:0b:78:02:5a:0b:48:eb:78:
df:9a:78:a3:5c:31:27:e7:60:e6:fe:11:b4:a4:f8:
04:b2:53:12:4b:ea:5c:0b:c2:43:ca:93:0c:78:bf:
8a:a2:f0:bc:5f:19:7c:85:d8:6b:f4:28:36:16:0e:
11:9f:ab:7e:0f:5f:7c:cb:d6:d1:cc:3e:db:13:57:
70:a2:d2:bc:47:c7:cf:17:f5:bf:4b:d4:0c:27:09:
d4:a7:8b:f1:08:bf:aa:b8:b2:8c:7f:49:4e:02:6b:
98:60:20:ea:c8:8b:97:64:af:4f:90:db:70:bf:d8:
7c:8e:0c:a4:0d:b3:de:02:8b:1b:2e:12:40:d4:54:
b3:09:95:a8:bf:f1:75:fe:94:d5:0d:cd:ef:f1:9e:
ab:ed:9c:0d:3a:33:ab:d7:74:cb:cf:cd:5b:c6:b3:
13:a3:f0:35:27:e1:cb:50:99:fc:cd:d8:24:9b:fd:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:36:F1:A5:C5:A3:5A:FA:89:CB:6C:98:B0:17:D5:B2:68:7C:FC:9B
X509v3 Authority Key Identifier:
keyid:08:39:96:C6:F2:E7:A3:88:71:F8:C0:01:F4:F8:BA:4A:70:5E:87:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmWxvLno4hx-MAB9Pi6SnBeh5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/HzbxpcWjWvqJy2yYsBfVsmh8_Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/CDmWxvLno4hx-MAB9Pi6SnBeh5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.75.0.0/24
62.75.3.0-62.75.7.255
62.75.9.0/24
62.75.11.0-62.75.12.255
62.75.14.0/24
62.75.25.0-62.75.53.255
62.75.55.0-62.75.57.255
62.75.59.0-62.75.61.255
62.75.63.0/24
62.75.65.0-62.75.68.255
62.75.70.0-62.75.106.255
62.75.109.0-62.75.127.255
Signature Algorithm: sha256WithRSAEncryption
13:53:aa:e8:ef:21:70:47:db:5e:26:f4:d9:7b:0a:d3:c2:46:
7d:8f:80:1c:97:25:c8:10:26:65:55:4e:9a:1b:03:73:df:c3:
a3:c9:e3:9a:26:4a:ba:b6:07:15:cf:df:93:d6:e4:2b:bb:d7:
f4:3f:52:93:b5:02:e2:bb:fb:d6:17:cd:49:00:20:e7:eb:a0:
c7:f0:2f:cb:b4:3a:66:48:ef:b3:0b:b8:8f:ee:1a:99:08:7b:
f4:ee:a8:28:62:1e:52:5e:ec:59:29:e4:17:95:e6:57:d8:78:
97:bf:72:bf:a3:31:d4:eb:8a:81:54:ce:24:17:26:87:b2:42:
35:fc:9a:17:68:dc:38:ee:58:a4:2e:be:e7:37:e9:41:e0:85:
d8:c2:ee:8f:7d:1c:3d:78:c4:a5:0a:b2:cf:9b:ed:97:3f:51:
63:37:44:be:47:dd:08:f1:45:a6:c9:ff:13:60:ef:9b:a7:fd:
00:e1:0f:98:02:8d:54:4c:be:b1:58:4c:5d:62:4b:66:db:78:
c8:ac:23:3f:52:bc:4a:3e:c4:08:e0:56:b0:ec:5a:55:06:53:
60:00:e6:57:de:d8:3f:c0:50:93:e6:94:0c:75:27:a7:56:c7:
23:23:c7:2b:39:3d:9d:5d:bd:f7:28:a3:28:33:83:b4:8f:9c:
cc:52:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:01 2023 by rpki-client on console-ams.rpki-client.org