Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d4bbdc-c00f-4b41-9945-753c39afc2cc/1/yFvN-jwfWTjVarYJHLtMAMcQc30.roa
File: yFvN-jwfWTjVarYJHLtMAMcQc30.roa (raw, json)
Hash identifier: p4pKI6bfbKPBQxYZ8AuCfYHMjiScfN32WOeLbZdiTqQ=
Subject key identifier: C8:5B:CD:FA:3C:1F:59:38:D5:6A:B6:09:1C:BB:4C:00:C7:10:73:7D
Certificate issuer: /CN=3062ddac4f2e28735b2b21f73ca19f42a18e1e7e
Certificate serial: BEE5F6
Authority key identifier: 30:62:DD:AC:4F:2E:28:73:5B:2B:21:F7:3C:A1:9F:42:A1:8E:1E:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGLdrE8uKHNbKyH3PKGfQqGOHn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d4bbdc-c00f-4b41-9945-753c39afc2cc/1/yFvN-jwfWTjVarYJHLtMAMcQc30.roa
Signing time: Sat 01 Jan 2022 02:00:24 +0000
ROA not before: Sat 01 Jan 2022 02:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 62.204.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12510710 (0xbee5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3062ddac4f2e28735b2b21f73ca19f42a18e1e7e
Validity
Not Before: Jan 1 02:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c85bcdfa3c1f5938d56ab6091cbb4c00c710737d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:bf:a0:7e:11:3d:60:f8:d0:88:b3:6b:9a:
3f:33:e5:49:a0:e9:ba:15:d2:e1:53:88:e2:de:b0:
b7:15:41:9f:8d:d5:45:52:50:b2:f4:9a:ab:19:2c:
28:4e:da:1e:c7:98:19:14:9a:fc:b7:86:1a:f3:43:
dc:75:8c:50:40:bb:34:a6:d1:78:ca:38:ce:66:25:
a4:85:dd:76:78:4e:e0:dd:22:54:b7:23:5f:ed:56:
e8:3a:e4:56:4b:e3:ae:ef:01:6b:de:84:c4:64:51:
bc:e3:7c:c5:4e:99:ab:95:00:fb:ce:b5:c2:ba:06:
14:90:7d:6e:b3:d1:4a:bd:57:71:eb:4d:42:10:bb:
0d:2d:01:ca:f9:9e:bf:2a:31:11:63:11:87:93:e4:
08:90:a4:54:9c:93:33:33:cb:e8:da:6a:72:9d:46:
55:cf:d2:e3:83:7f:a0:1f:37:d9:e4:dc:d9:78:13:
93:b9:d4:6f:aa:25:f7:71:a1:18:09:67:d9:d4:0d:
0c:30:ee:dc:ff:87:e3:fe:e1:80:b3:a4:48:c4:e2:
ff:4d:b1:ad:ff:e6:94:a3:bd:72:f0:cf:22:43:e3:
cb:82:89:4b:5f:18:38:b3:7b:88:a7:04:91:37:b1:
4f:85:44:30:e8:24:3b:75:d2:8e:b4:f6:49:9d:ce:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:CD:FA:3C:1F:59:38:D5:6A:B6:09:1C:BB:4C:00:C7:10:73:7D
X509v3 Authority Key Identifier:
keyid:30:62:DD:AC:4F:2E:28:73:5B:2B:21:F7:3C:A1:9F:42:A1:8E:1E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGLdrE8uKHNbKyH3PKGfQqGOHn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d4bbdc-c00f-4b41-9945-753c39afc2cc/1/yFvN-jwfWTjVarYJHLtMAMcQc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d4bbdc-c00f-4b41-9945-753c39afc2cc/1/MGLdrE8uKHNbKyH3PKGfQqGOHn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.32.0/24
Signature Algorithm: sha256WithRSAEncryption
87:49:dd:c8:42:87:3c:b6:12:37:da:36:01:e2:08:00:b5:d1:
5d:2a:b6:d3:9a:c4:6f:66:c0:3d:8d:ce:61:84:1c:15:75:ce:
1f:58:7a:b0:9e:41:10:7f:50:68:c0:2c:4a:c3:9b:f4:bd:99:
3d:ed:f2:9a:fb:e0:41:1e:99:fe:5a:d8:ff:48:2a:e5:20:15:
b1:17:40:dc:8e:f6:4d:d5:b0:45:9e:a1:d8:d7:f3:36:36:0b:
44:4f:24:5b:d1:27:80:c1:19:b0:dc:32:a8:18:d8:61:4b:2f:
e8:00:42:c7:0d:dc:98:ba:6d:2c:61:fe:0e:33:0b:ce:45:17:
2c:63:dc:a1:6d:7b:1d:38:a0:68:6b:a4:df:a8:84:e5:5e:f5:
f6:82:7d:1e:8d:a2:8c:ec:b4:02:b1:d7:98:25:7a:51:09:12:
91:45:89:38:f8:99:73:61:db:be:c7:72:2e:b1:75:6d:7b:32:
eb:ae:66:ac:91:f0:f3:1a:13:92:5c:34:ea:93:70:44:da:8d:
ee:06:3b:bf:65:38:8b:d6:b2:45:27:ff:4d:3f:75:c8:d5:02:
8b:06:b2:e8:0d:b5:38:8e:f2:23:c1:ba:95:cb:52:ba:82:17:
7f:9b:46:bc:19:fb:ee:a4:81:7e:e9:21:d8:98:21:e8:d6:c4:
26:45:e2:0b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAL7l9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MDYyZGRhYzRmMmUyODczNWIyYjIxZjczY2ExOWY0MmExOGUxZTdlMB4XDTIyMDEw
MTAyMDAyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzg1YmNkZmEzYzFm
NTkzOGQ1NmFiNjA5MWNiYjRjMDBjNzEwNzM3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ5iv6B+ET1g+NCIs2uaPzPlSaDpuhXS4VOI4t6wtxVBn43V
RVJQsvSaqxksKE7aHseYGRSa/LeGGvND3HWMUEC7NKbReMo4zmYlpIXddnhO4N0i
VLcjX+1W6DrkVkvjru8Ba96ExGRRvON8xU6Zq5UA+861wroGFJB9brPRSr1XcetN
QhC7DS0ByvmevyoxEWMRh5PkCJCkVJyTMzPL6Npqcp1GVc/S44N/oB832eTc2XgT
k7nUb6ol93GhGAln2dQNDDDu3P+H4/7hgLOkSMTi/02xrf/mlKO9cvDPIkPjy4KJ
S18YOLN7iKcEkTexT4VEMOgkO3XSjrT2SZ3OMOECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTIW836PB9ZONVqtgkcu0wAxxBzfTAfBgNVHSMEGDAWgBQwYt2sTy4oc1sr
Ifc8oZ9CoY4efjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01HTGRyRTh1S0hOYkt5SDNQS0dmUXFHT0huNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvZDRiYmRjLWMwMGYtNGI0MS05OTQ1LTc1M2MzOWFmYzJjYy8x
L3lGdk4tandmV1RqVmFyWUpITHRNQU1jUWMzMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
ZDRiYmRjLWMwMGYtNGI0MS05OTQ1LTc1M2MzOWFmYzJjYy8xL01HTGRyRTh1S0hO
Ykt5SDNQS0dmUXFHT0huNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7MIDANBgkqhkiG9w0BAQsFAAOC
AQEAh0ndyEKHPLYSN9o2AeIIALXRXSq205rEb2bAPY3OYYQcFXXOH1h6sJ5BEH9Q
aMAsSsOb9L2ZPe3ymvvgQR6Z/lrY/0gq5SAVsRdA3I72TdWwRZ6h2NfzNjYLRE8k
W9EngMEZsNwyqBjYYUsv6ABCxw3cmLptLGH+DjMLzkUXLGPcoW17HTigaGuk36iE
5V719oJ9Ho2ijOy0ArHXmCV6UQkSkUWJOPiZc2HbvsdyLrF1bXsy665mrJHw8xoT
klw06pNwRNqN7gY7v2U4i9ayRSf/TT91yNUCiway6A21OI7yI8G6lctSuoIXf5tG
vBn77qSBfukh2Jgh6NbEJkXiCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org