Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa
File: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (raw, json)
Hash identifier: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=
Subject key identifier: 67:45:68:85:FC:F2:22:22:EE:CA:2F:87:72:CD:C4:7C:F8:20:A0:0B
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 019423D6BCA055AA5F85CDC5A5C17F191105
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29286
IP address blocks: 62.202.152.0/21 maxlen: 24
62.202.160.0/20 maxlen: 24
2a02:1215:ffff::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bc:a0:55:aa:5f:85:cd:c5:a5:c1:7f:19:11:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67456885fcf22222eeca2f8772cdc47cf820a00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:23:58:cd:b1:a4:c1:44:31:c9:24:aa:71:
39:26:24:44:e2:39:97:1a:7a:06:c2:83:87:cd:fd:
41:72:90:20:0e:58:33:30:79:08:41:1e:a2:a2:07:
77:c3:e8:bf:5e:af:0e:b4:bd:f8:7b:ba:cf:9f:ce:
ad:a7:dc:45:a0:d6:95:d4:2d:a8:51:42:73:f0:82:
4a:b8:55:69:37:82:64:7c:50:c0:94:df:6a:8f:64:
25:c7:0c:28:22:c9:32:04:63:be:f0:be:14:95:a1:
1c:f8:29:30:c5:da:b7:89:6c:de:8e:7f:4c:b8:9a:
de:95:cc:58:92:3d:07:bb:c7:18:ac:93:a6:2c:5c:
81:5c:2d:5e:75:7d:93:4e:b1:d3:99:cd:c6:a3:0a:
62:fb:ef:c1:7a:1e:48:26:be:f6:7d:10:6c:f9:4f:
46:05:a0:f6:79:0d:bf:b0:c2:80:6b:92:f8:d2:55:
82:8b:46:fe:eb:39:5b:e4:d5:d1:64:a0:73:a4:73:
8d:6d:fa:0d:b5:30:c1:9d:7b:09:c4:63:e6:1d:98:
7c:3e:18:6d:fb:79:61:55:11:af:75:5e:42:f3:08:
54:6f:82:01:1c:66:fb:24:95:77:19:45:9c:26:ac:
97:60:e7:7e:ca:04:60:52:47:d6:47:d6:98:d4:c3:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:68:85:FC:F2:22:22:EE:CA:2F:87:72:CD:C4:7C:F8:20:A0:0B
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.152.0-62.202.175.255
IPv6:
2a02:1215:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c3:6f:e4:56:38:dd:c3:94:0c:1d:59:78:ed:99:6b:4c:15:
42:94:99:df:cf:77:d6:50:0b:5f:f4:56:40:78:e5:12:7c:84:
c0:82:92:b0:a7:b3:cb:4a:58:26:a1:b2:59:8f:53:a3:de:0a:
8a:bd:4f:b8:84:4c:2a:e3:b9:95:38:51:97:b7:75:33:66:d8:
2f:8e:13:45:9b:61:4f:d3:a9:e5:7d:09:07:5a:f8:21:31:28:
52:de:eb:ae:f6:d7:e7:21:92:bc:25:51:c6:68:4f:04:c1:3e:
cd:a8:db:5f:3c:ba:9c:dc:c4:c1:85:ab:07:c9:bc:49:ff:27:
82:c3:dd:be:90:02:46:c6:f9:cf:08:37:a9:98:15:16:21:3e:
0f:02:5b:e5:26:4d:d4:8b:79:7a:cf:f8:42:3c:f3:73:de:51:
be:68:85:f9:cc:ca:58:82:f9:6c:3c:20:b7:4b:8e:67:5f:75:
91:39:06:4a:b1:60:da:2a:e5:f2:95:2d:f3:ab:be:3e:d4:c4:
a6:f1:f2:7c:19:f5:83:b4:00:46:b5:b1:48:fc:6a:41:dd:54:
b2:e3:a4:ae:c0:a9:a8:f7:43:3c:58:76:4e:c5:64:18:eb:08:
b2:4f:52:3a:e9:26:e9:0a:72:af:9f:a9:d2:8f:cc:cc:bc:aa:
44:99:0a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQj1rygVapfhc3FpcF/GREFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2UzZjQ4NTZkYWMyYTAwNWMzYTUyMzQ3MTE0ZGVjNDUz
OTM0YjgwHhcNMjUwMTAxMjE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzQ1Njg4NWZjZjIyMjIyZWVjYTJmODc3MmNkYzQ3Y2Y4MjBhMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfEjWM2xpMFEMckkqnE5JiRE4jmX
GnoGwoOHzf1BcpAgDlgzMHkIQR6iogd3w+i/Xq8OtL34e7rPn86tp9xFoNaV1C2o
UUJz8IJKuFVpN4JkfFDAlN9qj2QlxwwoIskyBGO+8L4UlaEc+Ckwxdq3iWzejn9M
uJrelcxYkj0Hu8cYrJOmLFyBXC1edX2TTrHTmc3Gowpi++/Beh5IJr72fRBs+U9G
BaD2eQ2/sMKAa5L40lWCi0b+6zlb5NXRZKBzpHONbfoNtTDBnXsJxGPmHZh8Phht
+3lhVRGvdV5C8whUb4IBHGb7JJV3GUWcJqyXYOd+ygRgUkfWR9aY1MNrFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdFaIX88iIi7sovh3LNxHz4IKALMB8GA1UdIwQY
MBaAFJQ+P0hW2sKgBcOlI0cRTexFOTS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYt
MDI1M2QwNGZiOGZmLzEvWjBWb2hmenlJaUx1eWktSGNzM0VmUGdnb0FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYtMDI1M2QwNGZiOGZm
LzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAM+ypgD
BAQ+yqAwDwQCAAIwCQMHACoCEhX//zANBgkqhkiG9w0BAQsFAAOCAQEAL8Nv5FY4
3cOUDB1ZeO2Za0wVQpSZ38931lALX/RWQHjlEnyEwIKSsKezy0pYJqGyWY9To94K
ir1PuIRMKuO5lThRl7d1M2bYL44TRZthT9Op5X0JB1r4ITEoUt7rrvbX5yGSvCVR
xmhPBME+zajbXzy6nNzEwYWrB8m8Sf8ngsPdvpACRsb5zwg3qZgVFiE+DwJb5SZN
1It5es/4Qjzzc95RvmiF+czKWIL5bDwgt0uOZ191kTkGSrFg2irl8pUt86u+PtTE
pvHyfBn1g7QARrWxSPxqQd1UsuOkrsCpqPdDPFh2TsVkGOsIsk9SOukm6Qpyr5+p
0o/MzLyqRJkKUQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:17:57 2025 by rpki-client