Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/U7B5N4Ah5ZZFLESOhFxQqOTyZ38.roa
File: U7B5N4Ah5ZZFLESOhFxQqOTyZ38.roa (raw, json)
Hash identifier: rtDmcAr4rDdx+OGM+yryNFx6slDrmMueQOnmT1QO0Gg=
Subject key identifier: 53:B0:79:37:80:21:E5:96:45:2C:44:8E:84:5C:50:A8:E4:F2:67:7F
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F4129BE0E5E32E1DFA7B41FBEE6E
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/U7B5N4Ah5ZZFLESOhFxQqOTyZ38.roa
Signing time: Thu 15 Aug 2024 09:34:59 +0000
ROA not before: Thu 15 Aug 2024 09:34:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2386
IP address blocks: 62.200.204.0/24 maxlen: 24
62.200.205.0/24 maxlen: 24
195.75.36.0/24 maxlen: 24
195.75.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f4:12:9b:e0:e5:e3:2e:1d:fa:7b:41:fb:ee:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:34:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53b079378021e596452c448e845c50a8e4f2677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:dc:41:6a:80:58:e9:d8:be:e7:ab:b0:50:
25:94:26:24:1f:84:b1:c4:77:31:57:cb:01:78:27:
d5:84:25:84:87:92:12:e8:8b:9f:22:6b:03:56:29:
27:12:d4:f5:37:e6:b0:98:79:ad:9c:1a:07:75:50:
e3:7c:ec:e0:76:28:fa:ad:ec:9c:93:7e:e0:97:93:
f8:91:8e:19:90:d8:27:94:73:72:32:7e:b7:de:04:
4c:11:d8:6f:c1:38:30:92:94:52:69:4a:5e:0b:50:
4f:a5:a2:db:c8:74:62:2d:5f:26:7a:5a:28:14:8d:
47:10:14:03:db:53:b7:95:74:98:ed:2e:78:a2:89:
99:6a:ec:b5:2c:27:69:59:e9:12:66:c6:19:a9:74:
b6:6d:27:c3:a1:11:8c:e6:35:56:f1:1a:45:43:57:
17:10:2d:7c:03:64:7c:9e:c4:21:a1:3a:b0:44:a5:
97:cb:1a:b4:ca:bc:84:bd:75:26:ad:56:41:34:28:
9b:bc:e2:05:59:e0:39:50:dd:53:8f:5e:42:b9:15:
d3:68:24:74:53:4d:ff:09:d1:2d:f0:7c:99:65:e9:
66:aa:d9:41:b4:28:d6:81:c5:26:26:53:16:cc:97:
41:b2:a9:82:ae:20:68:18:9e:e6:82:2a:5a:ff:c3:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B0:79:37:80:21:E5:96:45:2C:44:8E:84:5C:50:A8:E4:F2:67:7F
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/U7B5N4Ah5ZZFLESOhFxQqOTyZ38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.200.204.0/23
195.75.36.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:2f:5f:6c:80:ce:90:76:ca:cb:e7:f3:91:ec:0a:27:24:76:
de:30:50:c3:af:1f:b4:b8:b8:3f:dc:6f:32:a8:de:ac:88:70:
db:85:4e:4e:29:58:37:72:c2:49:c3:1e:8a:4f:b9:79:ea:7c:
5f:a7:32:a1:c2:cf:d3:26:6a:89:b9:ea:eb:3a:d8:67:af:f1:
d5:af:62:5d:ce:18:43:40:70:6d:69:95:cc:72:3d:c6:0c:61:
d2:3d:7c:7a:ba:d4:d6:e5:e6:58:73:8b:e6:6d:66:8a:7d:f4:
25:07:a5:7d:1d:c0:3d:cd:ce:30:ae:a9:f0:38:c4:54:5c:2c:
7b:6c:02:3a:74:da:32:3c:e6:8c:11:12:b0:e7:77:b6:d1:78:
10:02:06:5a:37:1d:84:63:88:e9:5f:f5:7a:59:77:07:29:60:
40:05:4b:1d:65:b4:25:ec:96:06:3e:83:fe:da:9b:00:2f:a9:
bc:bc:73:f5:87:75:6a:48:44:a8:53:e1:7a:81:36:f6:f1:d8:
d7:c1:7b:72:b9:c3:ab:ae:eb:48:14:3a:bb:fd:a5:f8:3b:b5:
1d:42:e0:35:08:7a:3a:48:48:58:ed:4d:53:77:93:bf:cc:99:
46:f2:e9:91:2d:e7:82:88:21:f1:93:9b:f3:2c:35:e6:dd:78:
8d:c5:89:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZFVY/QSm+Dl4y4d+ntB++5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDc4OTI0MzcxNjBkZDU3NzdlZDNlZDc4ZDQ5YmM3MmI1
ZTFjNWUwHhcNMjQwODE1MDkzNDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2IwNzkzNzgwMjFlNTk2NDUyYzQ0OGU4NDVjNTBhOGU0ZjI2NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H/cQWqAWOnYvuersFAllCYkH4Sx
xHcxV8sBeCfVhCWEh5IS6IufImsDViknEtT1N+awmHmtnBoHdVDjfOzgdij6reyc
k37gl5P4kY4ZkNgnlHNyMn633gRMEdhvwTgwkpRSaUpeC1BPpaLbyHRiLV8meloo
FI1HEBQD21O3lXSY7S54oomZauy1LCdpWekSZsYZqXS2bSfDoRGM5jVW8RpFQ1cX
EC18A2R8nsQhoTqwRKWXyxq0yryEvXUmrVZBNCibvOIFWeA5UN1Tj15CuRXTaCR0
U03/CdEt8HyZZelmqtlBtCjWgcUmJlMWzJdBsqmCriBoGJ7mgipa/8OatwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFOweTeAIeWWRSxEjoRcUKjk8md/MB8GA1UdIwQY
MBaAFGZHiSQ3Fg3Vd37T7XjUm8crXhxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtlSkpEY1dEZFYzZnRQdGVOU2J4eXRlSEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xOTExOGMtYWU2MC00OGUzLWEwMzIt
ZjhhZjU2ODU2M2U0LzEvVTdCNU40QWg1WlpGTEVTT2hGeFFxT1R5WjM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xOTExOGMtYWU2MC00OGUzLWEwMzItZjhhZjU2ODU2M2U0
LzEvWmtlSkpEY1dEZFYzZnRQdGVOU2J4eXRlSEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPsjMAwQB
w0skMA0GCSqGSIb3DQEBCwUAA4IBAQB+L19sgM6QdsrL5/OR7AonJHbeMFDDrx+0
uLg/3G8yqN6siHDbhU5OKVg3csJJwx6KT7l56nxfpzKhws/TJmqJuerrOthnr/HV
r2JdzhhDQHBtaZXMcj3GDGHSPXx6utTW5eZYc4vmbWaKffQlB6V9HcA9zc4wrqnw
OMRUXCx7bAI6dNoyPOaMERKw53e20XgQAgZaNx2EY4jpX/V6WXcHKWBABUsdZbQl
7JYGPoP+2psAL6m8vHP1h3VqSESoU+F6gTb28djXwXtyucOrrutIFDq7/aX4O7Ud
QuA1CHo6SEhY7U1Td5O/zJlG8umRLeeCiCHxk5vzLDXm3XiNxYl6
-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org