Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/TJNsPm3cbta4SQWCq5-FtGHmun4.roa
File: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (raw, json)
Hash identifier: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=
Subject key identifier: 4C:93:6C:3E:6D:DC:6E:D6:B8:49:05:82:AB:9F:85:B4:61:E6:BA:7E
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 019424456F0FBF4136FD071A8B66DC8E9517
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/TJNsPm3cbta4SQWCq5-FtGHmun4.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42504
IP address blocks: 62.122.64.0/21 maxlen: 21
62.122.64.0/24 maxlen: 24
62.122.65.0/24 maxlen: 24
62.122.66.0/24 maxlen: 24
62.122.67.0/24 maxlen: 24
62.122.68.0/24 maxlen: 24
62.122.69.0/24 maxlen: 24
62.122.70.0/24 maxlen: 24
91.192.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6f:0f:bf:41:36:fd:07:1a:8b:66:dc:8e:95:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c936c3e6ddc6ed6b8490582ab9f85b461e6ba7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:cb:43:2c:21:47:e9:81:3e:38:b9:2a:7d:
04:5a:3e:ca:c7:70:c4:35:4e:c6:f3:07:3d:cb:93:
aa:8b:1b:5d:95:a3:22:7e:43:30:18:d8:d3:8f:b4:
d1:62:42:12:eb:52:c7:b7:62:58:b6:79:ab:83:07:
d8:15:29:c2:33:4a:25:85:4a:94:aa:73:89:7e:e2:
bf:a2:02:dd:b0:4b:7a:11:22:6e:2c:37:f3:bc:30:
50:61:4d:e2:fe:52:dc:87:70:9c:32:79:00:e2:a2:
fc:8b:d0:09:ec:ca:61:81:c4:46:22:40:4b:7d:c2:
a0:f9:1d:81:25:a6:f1:6d:da:57:fa:1b:0b:e7:7a:
7b:e8:4c:a5:36:48:2d:4f:f9:87:20:92:4f:a5:2f:
81:bb:2a:b9:de:51:83:a2:82:a3:74:b0:eb:12:81:
90:5e:6b:d2:f2:ec:3c:fe:90:d0:e1:35:93:f2:67:
5b:48:fe:2e:2b:86:bd:68:d4:88:b1:a6:b5:1f:ce:
2d:29:06:20:72:48:f4:e1:48:2b:38:ad:26:97:a2:
1a:f0:07:e8:4e:57:04:b2:82:7c:01:a5:56:f5:17:
c5:32:b3:97:d3:85:79:57:70:e9:a9:34:56:3b:84:
18:4f:ad:84:d6:fb:cb:20:3e:34:88:20:32:27:87:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:93:6C:3E:6D:DC:6E:D6:B8:49:05:82:AB:9F:85:B4:61:E6:BA:7E
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/TJNsPm3cbta4SQWCq5-FtGHmun4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.64.0/21
91.192.152.0/22
Signature Algorithm: sha256WithRSAEncryption
65:d5:ab:cd:8b:38:e8:55:35:1e:ce:aa:f0:76:b5:11:10:43:
58:e6:82:ad:0c:e0:fd:43:4d:bb:18:f1:f5:7f:1a:d5:14:d2:
cb:e5:8e:67:a6:e2:ef:a4:13:93:a3:22:7e:60:fa:ce:c4:e1:
b0:d5:81:91:a7:7f:b3:cd:88:3d:b0:9c:61:d1:2e:05:01:af:
f0:82:78:f6:fd:68:0d:de:33:a3:fd:cb:01:ed:91:bd:3c:9a:
f5:6f:86:62:9b:1f:2c:2d:fe:01:32:a8:d9:c1:27:d9:2c:45:
a8:02:b5:99:45:a0:61:df:d0:89:69:0c:63:6f:da:88:b0:71:
4c:c5:d6:98:75:29:a3:83:07:13:bd:46:8d:38:de:36:c5:7f:
22:7f:7c:32:f1:eb:81:68:1b:44:95:46:e1:af:42:5f:1f:ab:
c0:5e:7e:b0:03:de:25:63:0f:86:0e:41:1c:4a:31:a0:55:79:
dd:8b:0e:09:47:d5:c5:20:76:de:ca:ba:35:01:82:5c:1a:60:
8b:04:c9:4a:4b:1c:a7:77:47:f1:81:a1:2f:77:05:93:e7:72:
6a:72:a3:0e:9a:81:b6:25:15:48:a5:5f:94:1a:ae:2b:a9:be:
d7:cd:61:9f:69:1e:64:b5:c6:9d:75:47:78:cf:52:9e:21:fc:
51:25:c9:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRW8Pv0E2/Qcai2bcjpUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm
NzQzMTIwHhcNMjUwMTAxMjM0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzkzNmMzZTZkZGM2ZWQ2Yjg0OTA1ODJhYjlmODViNDYxZTZiYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpzLQywhR+mBPji5Kn0EWj7Kx3DE
NU7G8wc9y5OqixtdlaMifkMwGNjTj7TRYkIS61LHt2JYtnmrgwfYFSnCM0olhUqU
qnOJfuK/ogLdsEt6ESJuLDfzvDBQYU3i/lLch3CcMnkA4qL8i9AJ7MphgcRGIkBL
fcKg+R2BJabxbdpX+hsL53p76EylNkgtT/mHIJJPpS+Buyq53lGDooKjdLDrEoGQ
XmvS8uw8/pDQ4TWT8mdbSP4uK4a9aNSIsaa1H84tKQYgckj04UgrOK0ml6Ia8Afo
TlcEsoJ8AaVW9RfFMrOX04V5V3DpqTRWO4QYT62E1vvLID40iCAyJ4d/3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEyTbD5t3G7WuEkFgqufhbRh5rp+MB8GA1UdIwQY
MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt
ZjBmOGIwNzc1NTIzLzEvVEpOc1BtM2NidGE0U1FXQ3E1LUZ0R0htdW40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz
LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPnpAAwQC
W8CYMA0GCSqGSIb3DQEBCwUAA4IBAQBl1avNizjoVTUezqrwdrUREENY5oKtDOD9
Q027GPH1fxrVFNLL5Y5npuLvpBOToyJ+YPrOxOGw1YGRp3+zzYg9sJxh0S4FAa/w
gnj2/WgN3jOj/csB7ZG9PJr1b4Zimx8sLf4BMqjZwSfZLEWoArWZRaBh39CJaQxj
b9qIsHFMxdaYdSmjgwcTvUaNON42xX8if3wy8euBaBtElUbhr0JfH6vAXn6wA94l
Yw+GDkEcSjGgVXndiw4JR9XFIHbeyro1AYJcGmCLBMlKSxynd0fxgaEvdwWT53Jq
cqMOmoG2JRVIpV+UGq4rqb7XzWGfaR5ktcaddUd4z1KeIfxRJcnx
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:33 2025 by rpki-client