Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/hFOUamtPv5EbgsfXFcMxOhYA16M.roa
File: hFOUamtPv5EbgsfXFcMxOhYA16M.roa (raw, json)
Hash identifier: qMZRVqsGHa68mdCog+f4urvc7eadAUpVZl4IAvV0N8I=
Subject key identifier: 84:53:94:6A:6B:4F:BF:91:1B:82:C7:D7:15:C3:31:3A:16:00:D7:A3
Certificate issuer: /CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Certificate serial: 018B12F2CC13A7987CD31DD0354CE46C29F4
Authority key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/hFOUamtPv5EbgsfXFcMxOhYA16M.roa
Signing time: Mon 09 Oct 2023 05:39:43 +0000
ROA not before: Mon 09 Oct 2023 05:39:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 62.106.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:f2:cc:13:a7:98:7c:d3:1d:d0:35:4c:e4:6c:29:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Validity
Not Before: Oct 9 05:39:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8453946a6b4fbf911b82c7d715c3313a1600d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:9c:52:00:dd:30:ef:49:e3:f7:ab:27:f7:
c5:0c:c7:f5:96:d4:8f:37:0f:08:78:ae:79:ae:6f:
e2:a9:bb:a3:ef:5a:e4:51:da:a0:69:63:bb:74:0c:
63:d5:fd:58:66:d7:54:fc:f9:96:6f:05:86:61:8a:
53:64:e1:74:5e:02:9f:4e:74:4a:66:18:34:15:57:
cc:36:25:5f:c1:d7:9e:e6:3b:e0:ee:e6:d5:a0:88:
74:49:e9:a3:d1:35:66:36:95:e2:c1:25:ad:8d:6b:
50:b7:34:ec:79:31:7c:9d:b9:1a:35:c3:d2:36:f4:
5f:8e:ce:67:38:00:95:a4:3b:5b:d3:38:b5:ea:0e:
59:06:50:21:16:6f:8b:b4:0e:d1:1a:2a:80:ff:fa:
12:4f:5d:6b:90:e6:c4:0c:5f:9f:97:3c:e9:3b:b6:
91:3c:6c:59:00:b0:98:6a:d7:2a:78:4d:be:07:5c:
7b:a1:de:ba:dc:64:c0:42:fe:08:2c:d6:8c:6a:38:
79:2e:b1:f5:5f:45:86:44:2d:c8:17:e2:21:6c:f1:
37:01:dd:1c:da:8e:05:46:db:cb:7f:f1:68:26:1d:
3e:25:38:7e:4c:9d:18:0d:b7:96:78:94:0f:68:6b:
f3:52:ef:83:de:2c:a1:4e:f7:8e:95:63:80:58:26:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:53:94:6A:6B:4F:BF:91:1B:82:C7:D7:15:C3:31:3A:16:00:D7:A3
X509v3 Authority Key Identifier:
keyid:B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/hFOUamtPv5EbgsfXFcMxOhYA16M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:21:45:45:79:41:28:f2:01:7a:91:82:42:5d:08:4a:36:c8:
39:3c:a6:8d:1b:ce:d6:b8:d0:f7:bb:f6:2f:45:f3:91:72:5a:
37:b1:85:2c:bd:42:1a:1e:db:f3:de:a7:ca:87:42:de:42:bc:
6f:68:e9:14:f5:f9:15:2c:9f:10:54:0a:d2:3a:d2:20:12:c9:
e7:67:6a:b9:58:cb:bb:e0:f2:9b:ef:c0:42:1c:81:fc:c9:dd:
27:85:0e:5d:72:30:55:f1:22:80:89:a4:e5:be:aa:07:be:09:
a8:b2:de:c2:fc:eb:ac:42:c2:34:cc:a7:49:4e:59:c2:9f:34:
fa:f1:7e:1d:0a:8b:e7:ff:ea:a4:77:af:5a:3e:58:c1:9d:43:
a3:f7:3a:21:e7:32:33:76:b0:ff:f7:5d:fd:9a:38:fd:5f:97:
5b:84:2b:53:73:3c:27:29:f0:50:6a:cc:d9:18:a7:a1:9b:bc:
6c:fd:8a:77:2e:94:42:b3:7a:36:aa:6b:c7:4a:15:f3:00:fd:
27:13:b5:19:85:08:ad:60:84:fd:80:f3:ed:98:a1:56:7a:54:
84:57:c2:b5:25:4c:ca:42:b1:54:6d:ff:c7:a0:cf:c5:08:9b:
41:98:33:3c:8c:64:64:b3:55:ac:a5:3a:ea:27:36:84:e8:3e:
b4:8e:5b:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsS8swTp5h80x3QNUzkbCn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjUxMzViMmZlZDkxMDY1OWZlNzc1YTRiMTFhNTllZWZl
YTVlMmUwHhcNMjMxMDA5MDUzOTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDUzOTQ2YTZiNGZiZjkxMWI4MmM3ZDcxNWMzMzEzYTE2MDBkN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx2cUgDdMO9J4/erJ/fFDMf1ltSP
Nw8IeK55rm/iqbuj71rkUdqgaWO7dAxj1f1YZtdU/PmWbwWGYYpTZOF0XgKfTnRK
Zhg0FVfMNiVfwdee5jvg7ubVoIh0Semj0TVmNpXiwSWtjWtQtzTseTF8nbkaNcPS
NvRfjs5nOACVpDtb0zi16g5ZBlAhFm+LtA7RGiqA//oST11rkObEDF+flzzpO7aR
PGxZALCYatcqeE2+B1x7od663GTAQv4ILNaMajh5LrH1X0WGRC3IF+IhbPE3Ad0c
2o4FRtvLf/FoJh0+JTh+TJ0YDbeWeJQPaGvzUu+D3iyhTveOlWOAWCab7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIRTlGprT7+RG4LH1xXDMToWANejMB8GA1UdIwQY
MBaAFLhlE1sv7ZEGWf53WksRpZ7v6l4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdVVFd5X3RrUVpaX25kYVN4R2xudV9xWGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85NTU5NTktZDUyYi00MDM0LWIwYjkt
NjM5ZTUyZDExMTg3LzEvaEZPVWFtdFB2NUViZ3NmWEZjTXhPaFlBMTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85NTU5NTktZDUyYi00MDM0LWIwYjktNjM5ZTUyZDExMTg3
LzEvdUdVVFd5X3RrUVpaX25kYVN4R2xudV9xWGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpUMA0G
CSqGSIb3DQEBCwUAA4IBAQAtIUVFeUEo8gF6kYJCXQhKNsg5PKaNG87WuND3u/Yv
RfORclo3sYUsvUIaHtvz3qfKh0LeQrxvaOkU9fkVLJ8QVArSOtIgEsnnZ2q5WMu7
4PKb78BCHIH8yd0nhQ5dcjBV8SKAiaTlvqoHvgmost7C/OusQsI0zKdJTlnCnzT6
8X4dCovn/+qkd69aPljBnUOj9zoh5zIzdrD/9139mjj9X5dbhCtTczwnKfBQaszZ
GKehm7xs/Yp3LpRCs3o2qmvHShXzAP0nE7UZhQitYIT9gPPtmKFWelSEV8K1JUzK
QrFUbf/HoM/FCJtBmDM8jGRks1WspTrqJzaE6D60jlvK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:50 2024 by rpki-client on console-fra.rpki-client.org