Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/MGBRJ7K2P9eTwbx3Z07MiCWaKWM.roa
File: MGBRJ7K2P9eTwbx3Z07MiCWaKWM.roa (raw, json)
Hash identifier: Q4S7IGtDs6dB62VZq8/QnEgPU3pEBCAk6OvTpkr03CY=
Subject key identifier: 30:60:51:27:B2:B6:3F:D7:93:C1:BC:77:67:4E:CC:88:25:9A:29:63
Certificate issuer: /CN=71a66a84521f6f29f6f5da7c2e4f446dcf340151
Certificate serial: E238E3
Authority key identifier: 71:A6:6A:84:52:1F:6F:29:F6:F5:DA:7C:2E:4F:44:6D:CF:34:01:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caZqhFIfbyn29dp8Lk9Ebc80AVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/MGBRJ7K2P9eTwbx3Z07MiCWaKWM.roa
Signing time: Tue 15 Feb 2022 17:57:10 +0000
ROA not before: Tue 15 Feb 2022 17:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 62.204.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14825699 (0xe238e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a66a84521f6f29f6f5da7c2e4f446dcf340151
Validity
Not Before: Feb 15 17:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30605127b2b63fd793c1bc77674ecc88259a2963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:3f:4e:05:fd:ce:39:89:1e:cc:f4:45:a3:
c5:68:97:92:0f:bc:a9:15:cb:97:58:7a:24:98:5a:
9a:70:6f:b2:26:60:1c:b2:f3:f6:36:88:02:5b:87:
71:59:02:23:82:f6:13:e6:8e:3e:4f:76:34:4e:75:
0a:53:70:0a:4d:b8:1e:a8:96:23:d5:c6:8e:a6:02:
4b:e7:ee:7f:61:d2:e1:75:f7:1e:f2:70:eb:ac:f6:
88:f2:bf:d8:3a:27:fe:e7:86:af:1b:28:67:a1:5f:
f4:dd:76:ac:1b:89:45:de:7b:59:2d:9e:f9:f6:34:
e0:6b:25:fe:07:d7:2c:b5:6e:96:b9:14:b6:d2:3e:
a0:ef:88:d6:c1:7e:c1:56:2c:60:d2:28:d6:0d:ad:
fb:ea:83:b5:4d:e3:cf:4d:bd:bd:07:38:69:96:dd:
b3:8b:80:6d:d3:d9:9a:6b:ec:85:8a:a3:63:ae:de:
ad:da:c1:db:9f:7f:0c:b6:f4:80:2c:9f:e3:a0:da:
1b:b2:71:94:11:02:93:42:c7:fd:69:91:6a:c7:68:
13:3e:1c:1a:95:cc:59:ee:d7:4d:e0:7b:60:bc:e3:
62:d6:1c:20:23:16:5e:76:7f:df:68:36:6e:3f:b5:
f7:6a:e3:18:30:de:8d:0e:4a:68:e8:25:6d:85:05:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:60:51:27:B2:B6:3F:D7:93:C1:BC:77:67:4E:CC:88:25:9A:29:63
X509v3 Authority Key Identifier:
keyid:71:A6:6A:84:52:1F:6F:29:F6:F5:DA:7C:2E:4F:44:6D:CF:34:01:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caZqhFIfbyn29dp8Lk9Ebc80AVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/MGBRJ7K2P9eTwbx3Z07MiCWaKWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/caZqhFIfbyn29dp8Lk9Ebc80AVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:7a:bb:7b:8c:6a:ce:46:b6:84:59:22:2c:b7:5c:00:0a:a6:
6d:55:7b:05:d8:0a:c1:99:20:ea:b9:e3:97:c7:2e:b6:fe:fd:
ad:3c:fa:58:46:7d:77:c0:3f:0e:92:44:25:38:28:1c:2d:1c:
54:62:48:00:cb:c0:d6:12:bd:4f:ea:2b:48:bb:10:d5:ad:dd:
36:08:04:02:c3:44:3a:c5:ab:f0:9e:cd:db:ce:df:33:cb:7f:
fa:72:8e:96:e8:3d:d7:a6:3a:f6:9c:8b:f3:26:09:67:17:ee:
4d:5c:bd:64:59:3c:33:a3:87:80:8c:60:46:5b:8d:bb:9e:28:
84:e9:4d:b8:12:5e:b9:a3:19:71:0f:f1:41:8a:dd:66:4f:4b:
e4:40:d3:41:d1:4f:00:5f:6e:6f:3a:4a:57:13:f5:3e:7c:80:
cb:0a:90:08:e7:14:71:7b:47:9f:a5:a1:c7:fd:6f:78:19:3b:
06:eb:ba:40:bd:8d:d1:d7:9f:61:6b:c6:87:f2:ab:d8:8d:40:
fe:c9:67:12:95:f2:67:a8:e0:7d:05:a5:bf:86:3b:e4:bb:4e:
be:7f:9c:29:ca:ff:0f:b5:5d:38:bd:6a:66:77:38:b6:72:4a:
86:ed:94:ea:7a:db:3c:10:12:98:b7:e5:1e:f4:38:ee:0b:31:
da:43:16:31
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOI44zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MWE2NmE4NDUyMWY2ZjI5ZjZmNWRhN2MyZTRmNDQ2ZGNmMzQwMTUxMB4XDTIyMDIx
NTE3NTcxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzA2MDUxMjdiMmI2
M2ZkNzkzYzFiYzc3Njc0ZWNjODgyNTlhMjk2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJqiP04F/c45iR7M9EWjxWiXkg+8qRXLl1h6JJhamnBvsiZg
HLLz9jaIAluHcVkCI4L2E+aOPk92NE51ClNwCk24HqiWI9XGjqYCS+fuf2HS4XX3
HvJw66z2iPK/2Don/ueGrxsoZ6Ff9N12rBuJRd57WS2e+fY04Gsl/gfXLLVulrkU
ttI+oO+I1sF+wVYsYNIo1g2t++qDtU3jz029vQc4aZbds4uAbdPZmmvshYqjY67e
rdrB259/DLb0gCyf46DaG7JxlBECk0LH/WmRasdoEz4cGpXMWe7XTeB7YLzjYtYc
ICMWXnZ/32g2bj+192rjGDDejQ5KaOglbYUFmS8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQwYFEnsrY/15PBvHdnTsyIJZopYzAfBgNVHSMEGDAWgBRxpmqEUh9vKfb1
2nwuT0RtzzQBUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NhWnFoRklmYnluMjlkcDhMazlFYmM4MEFWRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvYWZiMjQxLWY3YzAtNGZkMS04OTFlLTBkODViOWE0YmIzZS8x
L01HQlJKN0syUDllVHdieDNaMDdNaUNXYUtXTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
YWZiMjQxLWY3YzAtNGZkMS04OTFlLTBkODViOWE0YmIzZS8xL2NhWnFoRklmYnlu
MjlkcDhMazlFYmM4MEFWRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7MIzANBgkqhkiG9w0BAQsFAAOC
AQEAPHq7e4xqzka2hFkiLLdcAAqmbVV7BdgKwZkg6rnjl8cutv79rTz6WEZ9d8A/
DpJEJTgoHC0cVGJIAMvA1hK9T+orSLsQ1a3dNggEAsNEOsWr8J7N287fM8t/+nKO
lug916Y69pyL8yYJZxfuTVy9ZFk8M6OHgIxgRluNu54ohOlNuBJeuaMZcQ/xQYrd
Zk9L5EDTQdFPAF9ubzpKVxP1PnyAywqQCOcUcXtHn6Whx/1veBk7Buu6QL2N0def
YWvGh/Kr2I1A/slnEpXyZ6jgfQWlv4Y75LtOvn+cKcr/D7VdOL1qZnc4tnJKhu2U
6nrbPBASmLflHvQ47gsx2kMWMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:13 2024 by rpki-client on console-ams.rpki-client.org