Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/I-MM5Ml-YOam7CpcYhtRzyVSryk.roa
File: I-MM5Ml-YOam7CpcYhtRzyVSryk.roa (raw, json)
Hash identifier: UoBmil9W7RawyMEg9OtlQnPyc6hICqgGzeUDthgbJ5g=
Subject key identifier: 23:E3:0C:E4:C9:7E:60:E6:A6:EC:2A:5C:62:1B:51:CF:25:52:AF:29
Certificate issuer: /CN=243603eff76daf94542f23d560f9fca579ac97ed
Certificate serial: C7E5ED
Authority key identifier: 24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/I-MM5Ml-YOam7CpcYhtRzyVSryk.roa
Signing time: Sat 01 Jan 2022 06:56:46 +0000
ROA not before: Sat 01 Jan 2022 06:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 62.106.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13100525 (0xc7e5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=243603eff76daf94542f23d560f9fca579ac97ed
Validity
Not Before: Jan 1 06:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23e30ce4c97e60e6a6ec2a5c621b51cf2552af29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:77:93:22:90:e9:ce:fa:9d:9d:e5:ea:b2:
03:30:29:ca:12:c2:3d:3d:b0:a2:99:6e:25:2e:60:
32:00:8b:b7:d1:c4:0f:59:d8:22:8e:3a:ba:32:a2:
ff:0a:c8:a1:87:48:34:f1:8b:1c:1e:2e:7d:73:23:
09:d7:ad:0b:33:82:c3:58:d1:f6:11:22:bf:56:33:
99:d8:4d:4f:50:d5:b4:4d:56:22:5e:f5:f1:ac:d5:
9b:79:ce:53:c5:39:88:d6:42:24:e2:e1:e9:1f:c8:
9c:a0:5a:a9:11:f9:37:3b:fe:5b:3e:24:08:72:75:
29:7e:a7:57:e8:58:09:e1:b7:bc:f5:83:73:28:fd:
72:13:dc:e6:d6:5e:31:fd:26:58:a1:bb:c3:9d:40:
d5:cd:32:3b:7a:56:83:3c:9a:32:13:69:e5:5b:2e:
a0:6c:c6:03:13:9b:e3:ea:ee:5d:d5:46:3f:a2:12:
ea:bb:97:54:9e:12:7a:47:51:6a:18:f3:98:09:ab:
b3:42:bd:bf:1f:d3:da:41:c3:24:14:4e:77:ec:c8:
b8:2c:f8:9f:3f:d5:10:09:77:59:82:45:a4:1d:70:
70:da:ec:7f:59:cf:ff:c6:fb:9b:87:26:53:2f:7c:
36:34:32:b2:ee:e1:61:6e:91:f6:8b:89:05:19:85:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:0C:E4:C9:7E:60:E6:A6:EC:2A:5C:62:1B:51:CF:25:52:AF:29
X509v3 Authority Key Identifier:
keyid:24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/I-MM5Ml-YOam7CpcYhtRzyVSryk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/JDYD7_dtr5RULyPVYPn8pXmsl-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a1:b3:92:61:af:41:93:7b:c4:3c:8f:a0:72:5c:e8:52:e0:
cc:31:e6:8e:64:1f:4d:b3:96:e8:63:32:e0:68:c9:eb:75:5b:
11:32:bf:98:4d:88:4a:46:e6:6e:66:a5:6a:0d:27:f3:06:2d:
25:79:14:69:81:14:93:1c:9e:dd:e7:1b:e4:d0:28:49:d1:5a:
bc:09:3e:a7:16:c4:36:42:76:09:b6:40:be:ee:95:f7:cd:2a:
55:67:05:3a:b4:e5:43:40:d5:8c:81:07:61:d7:9e:04:d5:7a:
28:84:b0:d1:2c:55:b4:22:18:f4:7a:1b:8f:99:17:91:7f:b2:
0e:3a:65:59:5f:90:57:b3:90:98:e8:a3:52:7e:d2:6b:ed:b4:
0f:9f:71:f9:4b:36:84:fb:1d:1c:bd:84:d5:9b:1a:a8:51:cb:
f6:ef:40:8f:cf:c3:2f:ca:4f:8b:83:e5:be:17:39:eb:48:1f:
ef:52:cc:ca:70:bc:6e:b8:c3:cf:af:bc:96:2b:0f:2c:b3:ac:
7c:43:69:6f:ad:95:dc:c4:a9:7c:a0:3c:15:51:13:c8:2c:cf:
94:49:a4:98:fc:33:89:00:61:02:da:5a:80:6f:d0:35:51:89:
5b:f2:82:5f:f4:00:f5:03:b8:30:10:af:b1:f9:24:a3:41:83:
53:29:ac:a8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMfl7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NDM2MDNlZmY3NmRhZjk0NTQyZjIzZDU2MGY5ZmNhNTc5YWM5N2VkMB4XDTIyMDEw
MTA2NTY0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjNlMzBjZTRjOTdl
NjBlNmE2ZWMyYTVjNjIxYjUxY2YyNTUyYWYyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALekd5MikOnO+p2d5eqyAzApyhLCPT2wopluJS5gMgCLt9HE
D1nYIo46ujKi/wrIoYdINPGLHB4ufXMjCdetCzOCw1jR9hEiv1YzmdhNT1DVtE1W
Il718azVm3nOU8U5iNZCJOLh6R/InKBaqRH5Nzv+Wz4kCHJ1KX6nV+hYCeG3vPWD
cyj9chPc5tZeMf0mWKG7w51A1c0yO3pWgzyaMhNp5VsuoGzGAxOb4+ruXdVGP6IS
6ruXVJ4SekdRahjzmAmrs0K9vx/T2kHDJBROd+zIuCz4nz/VEAl3WYJFpB1wcNrs
f1nP/8b7m4cmUy98NjQysu7hYW6R9ouJBRmFsKcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQj4wzkyX5g5qbsKlxiG1HPJVKvKTAfBgNVHSMEGDAWgBQkNgPv922vlFQv
I9Vg+fyleayX7TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pEWUQ3X2R0cjVSVUx5UFZZUG44cFhtc2wtMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTQvZjhhNGNlLTAxMTctNGNjNS05ODI2LTdlZjZlMTcwNDllNS8x
L0ktTU01TWwtWU9hbTdDcGNZaHRSenlWU3J5ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQv
ZjhhNGNlLTAxMTctNGNjNS05ODI2LTdlZjZlMTcwNDllNS8xL0pEWUQ3X2R0cjVS
VUx5UFZZUG44cFhtc2wtMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5qWjANBgkqhkiG9w0BAQsFAAOC
AQEAHqGzkmGvQZN7xDyPoHJc6FLgzDHmjmQfTbOW6GMy4GjJ63VbETK/mE2ISkbm
bmalag0n8wYtJXkUaYEUkxye3ecb5NAoSdFavAk+pxbENkJ2CbZAvu6V980qVWcF
OrTlQ0DVjIEHYdeeBNV6KISw0SxVtCIY9Hobj5kXkX+yDjplWV+QV7OQmOijUn7S
a+20D59x+Us2hPsdHL2E1ZsaqFHL9u9Aj8/DL8pPi4Plvhc560gf71LMynC8brjD
z6+8lisPLLOsfENpb62V3MSpfKA8FVETyCzPlEmkmPwziQBhAtpagG/QNVGJW/KC
X/QA9QO4MBCvsfkko0GDUymsqA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:00 2025 by rpki-client