Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/zIEcgYh-wUpiMKbIhdQOgejUwog.roa
File: zIEcgYh-wUpiMKbIhdQOgejUwog.roa (raw, json)
Hash identifier: Pf4sEHxLgNqZKJuuacQM83YFwhTieXaOo7PLtQhx2eo=
Subject key identifier: CC:81:1C:81:88:7E:C1:4A:62:30:A6:C8:85:D4:0E:81:E8:D4:C2:88
Certificate issuer: /CN=71a66a84521f6f29f6f5da7c2e4f446dcf340151
Certificate serial: 01856DC1C469C219BFCFFBE7B0C7099AAEFF
Authority key identifier: 71:A6:6A:84:52:1F:6F:29:F6:F5:DA:7C:2E:4F:44:6D:CF:34:01:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caZqhFIfbyn29dp8Lk9Ebc80AVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/zIEcgYh-wUpiMKbIhdQOgejUwog.roa
Signing time: Sun 01 Jan 2023 14:34:53 +0000
ROA not before: Sun 01 Jan 2023 14:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 62.204.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:c4:69:c2:19:bf:cf:fb:e7:b0:c7:09:9a:ae:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a66a84521f6f29f6f5da7c2e4f446dcf340151
Validity
Not Before: Jan 1 14:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc811c81887ec14a6230a6c885d40e81e8d4c288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6c:2a:c0:e1:e9:8c:9c:05:4f:cf:5f:20:c1:
b4:76:64:5a:5f:c6:b2:ba:ff:0c:96:d8:49:f8:bb:
12:0a:62:c8:eb:01:4b:6e:13:56:17:7a:6f:1a:6a:
aa:7d:1d:82:5e:55:03:10:68:87:1a:e1:fc:5f:ed:
86:2c:22:1c:81:85:56:ff:e4:e2:04:5b:5e:c6:92:
79:98:e4:07:0f:80:32:db:59:28:7f:9b:af:4a:04:
d2:3f:65:ad:7c:9e:b8:34:2d:98:e9:a6:26:cf:17:
6f:6f:5f:c8:18:2c:0c:0f:9b:93:ef:17:9f:78:e0:
f6:48:a0:59:43:a9:0b:35:05:c7:f4:d4:7e:58:b8:
2b:95:07:e8:88:37:30:be:c3:87:be:7b:0d:7a:ed:
0e:10:cb:30:d8:1f:8f:6e:67:86:a4:eb:d6:e3:07:
e5:1a:2e:b5:48:a4:a9:55:a5:9b:2f:a9:37:48:5b:
99:eb:2f:d4:5c:89:70:9f:61:a5:b1:59:fa:33:95:
af:8b:ee:d5:b4:48:76:99:89:fb:1f:04:09:e3:0b:
32:ed:31:9c:09:68:ad:25:86:0d:f6:b4:7d:08:f7:
c0:c6:3d:39:c1:9b:97:a3:38:0b:1b:9b:ec:52:1f:
97:78:8e:e9:31:a8:c9:0e:5d:8f:a5:be:28:7b:70:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:1C:81:88:7E:C1:4A:62:30:A6:C8:85:D4:0E:81:E8:D4:C2:88
X509v3 Authority Key Identifier:
keyid:71:A6:6A:84:52:1F:6F:29:F6:F5:DA:7C:2E:4F:44:6D:CF:34:01:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caZqhFIfbyn29dp8Lk9Ebc80AVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/zIEcgYh-wUpiMKbIhdQOgejUwog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/caZqhFIfbyn29dp8Lk9Ebc80AVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:31:90:6a:23:1c:74:8d:a9:7f:90:74:2a:e9:2e:ce:83:bf:
f9:c1:c0:ba:9d:22:01:0b:3f:a2:3f:a2:75:68:a0:0a:81:02:
c9:0c:60:df:91:4d:b3:d5:87:6e:2a:34:f5:dc:d9:cb:15:48:
58:a1:d4:2a:b5:b0:01:59:ec:9c:bf:f6:04:e8:ef:cb:9c:0a:
82:bf:d4:2f:64:44:af:c3:26:7a:70:be:92:de:fc:c8:e2:ed:
0a:fe:ec:f0:2d:45:8f:ca:47:7b:10:49:c0:3d:28:14:f6:50:
19:c2:45:95:af:0c:e6:03:8a:79:bc:be:4f:79:cf:ef:86:e8:
8e:74:e7:33:26:a0:cf:19:68:5e:50:3c:fa:f2:0d:f8:84:ec:
a5:f2:99:9f:07:78:ca:bc:c3:be:a4:c1:f3:3a:f0:3a:d5:41:
13:eb:35:d7:52:ac:5b:23:08:a8:2b:a7:fd:39:1a:6a:c0:57:
f6:77:e2:04:dc:c7:fc:5e:d2:2c:b1:b4:4b:53:52:8a:fd:50:
b7:73:45:66:c3:ff:60:c5:4e:3b:c7:b9:c6:cf:45:b2:2a:4a:
f2:f2:e0:db:36:2f:74:7c:df:68:15:39:05:8f:15:24:58:4f:
8a:6a:bc:54:a3:fb:62:55:4b:69:10:48:aa:61:6e:c1:e3:60:
23:42:55:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwcRpwhm/z/vnsMcJmq7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTY2YTg0NTIxZjZmMjlmNmY1ZGE3YzJlNGY0NDZkY2Yz
NDAxNTEwHhcNMjMwMTAxMTQzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzgxMWM4MTg4N2VjMTRhNjIzMGE2Yzg4NWQ0MGU4MWU4ZDRjMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32wqwOHpjJwFT89fIMG0dmRaX8ay
uv8MlthJ+LsSCmLI6wFLbhNWF3pvGmqqfR2CXlUDEGiHGuH8X+2GLCIcgYVW/+Ti
BFtexpJ5mOQHD4Ay21kof5uvSgTSP2WtfJ64NC2Y6aYmzxdvb1/IGCwMD5uT7xef
eOD2SKBZQ6kLNQXH9NR+WLgrlQfoiDcwvsOHvnsNeu0OEMsw2B+PbmeGpOvW4wfl
Gi61SKSpVaWbL6k3SFuZ6y/UXIlwn2GlsVn6M5Wvi+7VtEh2mYn7HwQJ4wsy7TGc
CWitJYYN9rR9CPfAxj05wZuXozgLG5vsUh+XeI7pMajJDl2Ppb4oe3AtCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMyBHIGIfsFKYjCmyIXUDoHo1MKIMB8GA1UdIwQY
MBaAFHGmaoRSH28p9vXafC5PRG3PNAFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FacWhGSWZieW4yOWRwOExrOUViYzgwQVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hZmIyNDEtZjdjMC00ZmQxLTg5MWUt
MGQ4NWI5YTRiYjNlLzEveklFY2dZaC13VXBpTUtiSWhkUU9nZWpVd29nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hZmIyNDEtZjdjMC00ZmQxLTg5MWUtMGQ4NWI5YTRiYjNl
LzEvY2FacWhGSWZieW4yOWRwOExrOUViYzgwQVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPswjMA0G
CSqGSIb3DQEBCwUAA4IBAQBaMZBqIxx0jal/kHQq6S7Og7/5wcC6nSIBCz+iP6J1
aKAKgQLJDGDfkU2z1YduKjT13NnLFUhYodQqtbABWeycv/YE6O/LnAqCv9QvZESv
wyZ6cL6S3vzI4u0K/uzwLUWPykd7EEnAPSgU9lAZwkWVrwzmA4p5vL5Pec/vhuiO
dOczJqDPGWheUDz68g34hOyl8pmfB3jKvMO+pMHzOvA61UET6zXXUqxbIwioK6f9
ORpqwFf2d+IE3Mf8XtIssbRLU1KK/VC3c0Vmw/9gxU47x7nGz0WyKkry8uDbNi90
fN9oFTkFjxUkWE+KarxUo/tiVUtpEEiqYW7B42AjQlU0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org