Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/IacBwtaNnrnRLvjszFT2ATsC8OY.roa
File: IacBwtaNnrnRLvjszFT2ATsC8OY.roa (raw, json)
Hash identifier: Ivvt/fAjVfovjw7Ox/ubdvA9rmOaFAel/fpJFimjXIM=
Subject key identifier: 21:A7:01:C2:D6:8D:9E:B9:D1:2E:F8:EC:CC:54:F6:01:3B:02:F0:E6
Certificate issuer: /CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Certificate serial: 018326ED38EDF3BB871A876A3EAF353557B5
Authority key identifier: D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/IacBwtaNnrnRLvjszFT2ATsC8OY.roa
Signing time: Sat 10 Sep 2022 10:23:44 +0000
ROA not before: Sat 10 Sep 2022 10:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ed:38:ed:f3:bb:87:1a:87:6a:3e:af:35:35:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Validity
Not Before: Sep 10 10:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21a701c2d68d9eb9d12ef8eccc54f6013b02f0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:fb:91:3e:f4:4b:6d:f6:8c:da:2c:c9:99:
89:2c:15:52:fa:2a:49:47:9c:72:e7:29:f2:12:be:
18:8a:35:1b:cb:bd:fb:5b:3a:71:41:96:ec:7e:e9:
d5:55:cb:b7:4e:58:d2:a9:47:f2:2f:34:a1:48:1d:
63:4c:8c:be:af:4c:f2:dc:d2:58:ac:ec:78:31:ed:
cd:f3:64:89:8f:0d:75:cb:aa:c7:6d:40:58:68:ba:
6d:87:31:8f:8f:ae:4a:04:d2:22:ab:8e:f4:fe:41:
62:11:02:53:0d:e8:4a:da:fa:7d:b1:78:82:76:fc:
ac:54:3e:16:74:db:af:51:c4:7e:30:54:64:de:e0:
5d:ea:4a:d3:83:7c:62:7c:d2:65:6f:3c:8e:8b:6e:
69:92:10:84:ab:07:58:ec:24:f1:1a:69:99:92:18:
ae:7d:3c:b4:48:15:af:f4:ae:8b:4f:e4:6f:bf:bf:
ae:69:0d:33:0b:0d:74:1e:37:66:37:5b:2a:c3:fd:
d7:1f:98:62:2f:17:66:d1:63:54:2c:ab:74:f1:d6:
19:59:0c:cc:35:d4:d8:97:23:75:27:ef:65:4d:6b:
68:fd:d3:28:11:27:f3:24:1f:ff:a5:f4:bc:f5:fa:
1a:95:7f:b8:d4:17:cf:10:ce:2f:77:87:ca:f8:1d:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:01:C2:D6:8D:9E:B9:D1:2E:F8:EC:CC:54:F6:01:3B:02:F0:E6
X509v3 Authority Key Identifier:
keyid:D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/IacBwtaNnrnRLvjszFT2ATsC8OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1d:19:61:d6:be:88:48:80:c8:e9:f7:96:8b:1c:67:59:1a:
16:c9:93:63:53:68:0a:16:73:25:fd:c6:86:dd:87:10:c0:04:
bd:86:dc:43:a3:8a:8a:e0:eb:28:6a:d0:72:e4:c1:2d:cf:0a:
80:e1:0f:19:6a:b0:f6:d1:79:7c:9d:4b:43:9c:62:94:75:46:
90:b2:44:b8:fb:a1:e9:1a:7a:7d:3b:1d:c4:70:74:83:bf:4f:
0b:73:39:99:6c:b3:e1:ff:6d:0a:e4:d0:c8:80:3f:73:e4:01:
c2:18:e2:28:5c:d3:48:e7:50:a8:a2:a7:36:35:9f:90:3c:12:
65:d0:b3:e1:db:8c:b4:62:34:74:eb:ba:86:5f:18:41:68:aa:
69:01:36:ba:f6:2c:ff:47:4f:e3:d0:be:0d:df:eb:05:d4:b2:
c6:42:e6:27:8b:17:8a:ff:02:93:66:94:1f:98:a3:33:fe:94:
4f:9b:78:fe:e4:bb:4c:9d:6f:a2:26:c2:07:ce:ee:63:04:bf:
c5:fb:aa:f5:82:72:9a:1a:e3:e3:8d:8a:79:40:9d:bb:21:1c:
69:af:2f:f3:43:8a:fd:af:4b:7d:3a:e1:39:3e:29:d0:be:5d:
68:86:5a:83:cd:4b:ac:a3:4e:50:f1:ae:a0:7c:a6:96:25:55:
76:ff:44:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMm7Tjt87uHGodqPq81NVe1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzRhZjk3ZWVkNDRhYmZiZmE0ZDAyMmZmNzVmMDc3Y2Vh
YTQwZTEwHhcNMjIwOTEwMTAyMzQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWE3MDFjMmQ2OGQ5ZWI5ZDEyZWY4ZWNjYzU0ZjYwMTNiMDJmMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDr7kT70S232jNosyZmJLBVS+ipJ
R5xy5ynyEr4YijUby737WzpxQZbsfunVVcu3TljSqUfyLzShSB1jTIy+r0zy3NJY
rOx4Me3N82SJjw11y6rHbUBYaLpthzGPj65KBNIiq470/kFiEQJTDehK2vp9sXiC
dvysVD4WdNuvUcR+MFRk3uBd6krTg3xifNJlbzyOi25pkhCEqwdY7CTxGmmZkhiu
fTy0SBWv9K6LT+Rvv7+uaQ0zCw10HjdmN1sqw/3XH5hiLxdm0WNULKt08dYZWQzM
NdTYlyN1J+9lTWto/dMoESfzJB//pfS89foalX+41BfPEM4vd4fK+B3d+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCGnAcLWjZ650S747MxU9gE7AvDmMB8GA1UdIwQY
MBaAFNZ0r5fu1Eq/v6TQIv918HfOqkDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5TdmwtN1VTci1fcE5BaV8zWHdkODZxUU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81OTdlOTctZmYwNy00MTAyLWFkODgt
MWYyMzRhOTU3MDYxLzEvSWFjQnd0YU5ucm5STHZqc3pGVDJBVHNDOE9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81OTdlOTctZmYwNy00MTAyLWFkODgtMWYyMzRhOTU3MDYx
LzEvMW5TdmwtN1VTci1fcE5BaV8zWHdkODZxUU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRRMA0G
CSqGSIb3DQEBCwUAA4IBAQBKHRlh1r6ISIDI6feWixxnWRoWyZNjU2gKFnMl/caG
3YcQwAS9htxDo4qK4OsoatBy5MEtzwqA4Q8ZarD20Xl8nUtDnGKUdUaQskS4+6Hp
Gnp9Ox3EcHSDv08LczmZbLPh/20K5NDIgD9z5AHCGOIoXNNI51Cooqc2NZ+QPBJl
0LPh24y0YjR067qGXxhBaKppATa69iz/R0/j0L4N3+sF1LLGQuYnixeK/wKTZpQf
mKMz/pRPm3j+5LtMnW+iJsIHzu5jBL/F+6r1gnKaGuPjjYp5QJ27IRxpry/zQ4r9
r0t9OuE5PinQvl1ohlqDzUuso05Q8a6gfKaWJVV2/0S2
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:34 2025 by rpki-client