Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/JClib6UorUG0YnMggy5bOtMAEzE.roa
File: JClib6UorUG0YnMggy5bOtMAEzE.roa (raw, json)
Hash identifier: hTy5dQu6zPE70duAIQnFSz8nRBbTnOllYI2H5oycIWM=
Subject key identifier: 24:29:62:6F:A5:28:AD:41:B4:62:73:20:83:2E:5B:3A:D3:00:13:31
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 0185720C5B3B17838265E36B85C88C20ED67
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/JClib6UorUG0YnMggy5bOtMAEzE.roa
Signing time: Mon 02 Jan 2023 10:34:50 +0000
ROA not before: Mon 02 Jan 2023 10:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 62.179.128.0/17 maxlen: 17
2001:67c:794::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5b:3b:17:83:82:65:e3:6b:85:c8:8c:20:ed:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Jan 2 10:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2429626fa528ad41b4627320832e5b3ad3001331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:92:10:e9:b5:12:82:38:f1:eb:fb:84:4d:
74:61:36:a6:c4:6f:a5:be:85:76:95:7e:5f:7e:fa:
ae:69:91:f1:b5:2e:99:3f:a5:76:9e:41:b5:45:87:
b7:26:5e:e4:c2:62:56:a8:dd:be:98:48:c5:0c:89:
4a:b6:76:82:e2:af:80:36:88:e3:95:8a:2b:4b:84:
d6:f6:64:97:70:34:91:ae:7e:fd:15:ec:fe:ff:fc:
c0:36:37:c4:fa:f2:a1:83:bc:63:a2:be:95:19:0c:
7b:5a:f6:0d:29:7a:59:54:5b:9e:f3:01:17:54:02:
fa:be:e4:2e:22:8e:0a:4a:9a:9d:df:3f:de:79:dd:
ed:73:6b:9f:14:be:ad:41:8c:98:4d:2e:70:61:15:
3f:4e:4e:00:e2:9f:cf:85:fc:4c:6e:e2:40:c8:44:
a8:ac:ee:b0:01:0e:47:6d:36:4a:5a:51:f8:7d:a9:
bc:da:38:a0:02:76:d9:e5:5e:24:ba:95:f2:0c:04:
77:5f:af:5b:95:06:2c:34:0c:9e:e8:08:a4:56:c7:
68:71:3b:9c:cd:cd:d2:31:07:84:dd:06:58:40:67:
8a:c4:2f:99:bf:5d:0d:eb:63:74:8a:26:7f:1f:fd:
75:98:35:34:50:56:4d:11:78:06:c2:2f:f8:16:6a:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:62:6F:A5:28:AD:41:B4:62:73:20:83:2E:5B:3A:D3:00:13:31
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/JClib6UorUG0YnMggy5bOtMAEzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.128.0/17
IPv6:
2001:67c:794::/48
Signature Algorithm: sha256WithRSAEncryption
75:94:74:aa:f4:59:34:84:c4:5f:72:79:ab:1b:75:b6:6b:2e:
66:4b:d2:49:f6:3f:2b:dc:28:59:dc:e8:91:f4:44:bf:d3:92:
7a:6e:4a:96:23:3a:e7:e4:d4:5f:26:1e:ce:fd:e3:10:4f:2b:
bc:80:77:04:e7:72:c0:5e:e6:ca:6f:a7:a8:2d:c1:bf:eb:d4:
89:31:99:4c:cd:55:2d:8f:94:f4:c5:05:5f:b9:5e:b8:35:f4:
52:07:cc:ad:1e:ea:2f:07:c4:e1:39:2a:47:8a:8c:2e:28:40:
6d:d6:32:19:ed:79:f5:33:6f:b8:f2:65:ed:b0:1a:19:86:94:
a9:c2:35:2e:ff:c8:41:f5:7f:0c:4c:2c:08:43:46:ae:a2:bc:
d5:c0:3c:2f:42:d4:bf:e4:51:fb:1a:21:54:f5:5b:0c:23:c4:
70:e4:ff:83:82:83:8f:00:bb:33:23:80:ef:e8:64:b7:46:b7:
34:d2:66:77:cf:3c:b6:0f:df:e1:f2:09:f8:9c:89:5b:62:8c:
a9:b9:3a:30:fb:80:63:c5:8f:51:04:18:d4:39:41:0b:35:d6:
53:c7:0f:44:c3:38:6f:a5:2a:23:bb:dd:05:3d:ff:41:61:46:
07:eb:a5:b5:91:36:fc:24:cd:bd:6d:9b:60:3d:45:49:72:85:
fe:a8:2b:76
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVyDFs7F4OCZeNrhciMIO1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjMwMTAyMTAzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDI5NjI2ZmE1MjhhZDQxYjQ2MjczMjA4MzJlNWIzYWQzMDAxMzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BGSEOm1EoI48ev7hE10YTamxG+l
voV2lX5ffvquaZHxtS6ZP6V2nkG1RYe3Jl7kwmJWqN2+mEjFDIlKtnaC4q+ANojj
lYorS4TW9mSXcDSRrn79Fez+//zANjfE+vKhg7xjor6VGQx7WvYNKXpZVFue8wEX
VAL6vuQuIo4KSpqd3z/eed3tc2ufFL6tQYyYTS5wYRU/Tk4A4p/PhfxMbuJAyESo
rO6wAQ5HbTZKWlH4fam82jigAnbZ5V4kupXyDAR3X69blQYsNAye6AikVsdocTuc
zc3SMQeE3QZYQGeKxC+Zv10N62N0iiZ/H/11mDU0UFZNEXgGwi/4FmobSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCQpYm+lKK1BtGJzIIMuWzrTABMxMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEvSkNsaWI2VW9yVUcwWW5NZ2d5NWJPdE1BRXpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQHPrOAMA8E
AgACMAkDBwAgAQZ8B5QwDQYJKoZIhvcNAQELBQADggEBAHWUdKr0WTSExF9yeasb
dbZrLmZL0kn2PyvcKFnc6JH0RL/TknpuSpYjOufk1F8mHs794xBPK7yAdwTncsBe
5spvp6gtwb/r1IkxmUzNVS2PlPTFBV+5Xrg19FIHzK0e6i8HxOE5KkeKjC4oQG3W
MhntefUzb7jyZe2wGhmGlKnCNS7/yEH1fwxMLAhDRq6ivNXAPC9C1L/kUfsaIVT1
WwwjxHDk/4OCg48AuzMjgO/oZLdGtzTSZnfPPLYP3+HyCficiVtijKm5OjD7gGPF
j1EEGNQ5QQs11lPHD0TDOG+lKiO73QU9/0FhRgfrpbWRNvwkzb1tm2A9RUlyhf6o
K3Y=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:14 2025 by rpki-client