Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/GZpqTIKseOfU3treSbHnrzXaVJo.roa
File: GZpqTIKseOfU3treSbHnrzXaVJo.roa (raw, json)
Hash identifier: cBuOG4oPBkmNRvVlMIXBCoDRTHvhoo+JyOQAhIu7fzM=
Subject key identifier: 19:9A:6A:4C:82:AC:78:E7:D4:DE:DA:DE:49:B1:E7:AF:35:DA:54:9A
Certificate issuer: /CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Certificate serial: 015240B2
Authority key identifier: 16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/GZpqTIKseOfU3treSbHnrzXaVJo.roa
Signing time: Mon 11 Apr 2022 17:24:55 +0000
ROA not before: Mon 11 Apr 2022 17:24:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205450
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22167730 (0x15240b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Validity
Not Before: Apr 11 17:24:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=199a6a4c82ac78e7d4dedade49b1e7af35da549a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:50:e9:c9:72:b9:d3:16:3a:65:1a:b3:10:
65:36:99:02:37:eb:8c:48:cc:14:67:64:4e:62:a4:
26:40:81:f1:38:58:b0:4d:72:5e:71:98:e0:8b:37:
bf:fc:e2:69:96:5b:f6:c5:39:85:67:25:de:64:a8:
a1:3e:6b:4e:48:bb:b9:8a:69:ce:06:d3:5e:b8:45:
62:b0:ae:16:67:ab:a6:80:83:8c:4a:6f:af:e8:81:
3c:00:58:61:c3:45:6b:f2:f5:18:d5:cf:4f:ae:02:
03:7e:87:e1:5e:fe:be:fc:2e:98:66:59:62:9f:b8:
d7:73:05:18:d4:5a:74:b4:ac:bc:41:aa:a5:e9:e7:
84:f9:81:b3:fe:f6:c9:ec:e8:5c:ab:6b:e3:6b:27:
ad:a8:bf:0d:f5:de:6c:81:b6:92:08:55:f1:2f:2b:
5e:a2:6f:2b:90:97:18:89:9e:a0:b1:50:1f:c8:c4:
c5:96:f7:89:bf:c9:63:e3:52:59:29:cd:6d:26:6d:
8a:1b:ab:a6:b1:bb:5f:65:e8:c5:a9:23:86:12:15:
aa:50:73:0c:47:70:aa:39:94:4a:dd:f9:75:35:35:
6b:b9:0d:b9:48:12:19:54:ef:95:f3:a1:b5:cf:0c:
6c:91:3e:9d:37:0b:5b:4f:4c:74:3d:da:05:45:44:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:6A:4C:82:AC:78:E7:D4:DE:DA:DE:49:B1:E7:AF:35:DA:54:9A
X509v3 Authority Key Identifier:
keyid:16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/GZpqTIKseOfU3treSbHnrzXaVJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/FnulbNyMl2YsG1fZAaH4ZYit8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
17:92:26:a7:00:1c:79:ea:19:22:b8:28:38:dc:d9:56:1b:d5:
c4:6f:b3:f1:11:80:31:62:70:a9:f5:7c:c0:ee:a7:fa:ad:c4:
8f:50:fe:4f:ea:9f:79:9e:94:23:33:41:01:a9:03:56:e9:6c:
b5:03:1b:c4:99:a5:57:9e:03:cb:a6:42:f4:e3:80:e0:80:d2:
4d:d2:7d:8f:5c:90:74:08:8b:49:d4:7a:b1:7b:92:58:3f:bc:
b9:5e:cb:65:f2:46:a2:4d:e4:9e:e0:60:bf:13:6d:26:0d:c0:
ca:c2:d3:99:d5:ab:68:d2:72:d0:ce:40:d6:d3:9b:02:0a:f9:
ea:a1:a8:f1:36:9e:b0:1e:09:25:53:7b:e7:97:40:ae:b6:ae:
ca:38:9f:75:a4:9b:d3:9d:5f:91:6b:0d:d6:b2:98:b3:14:ad:
04:9b:d2:3f:ec:90:65:53:30:be:76:82:bb:9a:6d:94:e6:b3:
3f:fb:1a:15:39:71:f0:65:e2:d3:7d:1e:e6:66:8d:1e:95:8f:
91:22:f4:8b:ba:c9:7f:69:b1:61:b9:f2:4a:60:82:2a:4e:e9:
20:f1:6d:39:92:ea:36:c7:f8:47:66:6e:f1:2f:73:74:7f:0a:
6a:ed:de:bb:c1:ce:51:2b:b9:27:24:65:57:4c:fe:f0:d1:92:
71:73:94:3f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAVJAsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NjdiYTU2Y2RjOGM5NzY2MmMxYjU3ZDkwMWExZjg2NTg4YWRmMmFlMB4XDTIyMDQx
MTE3MjQ1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTk5YTZhNGM4MmFj
NzhlN2Q0ZGVkYWRlNDliMWU3YWYzNWRhNTQ5YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK+LUOnJcrnTFjplGrMQZTaZAjfrjEjMFGdkTmKkJkCB8ThY
sE1yXnGY4Is3v/ziaZZb9sU5hWcl3mSooT5rTki7uYppzgbTXrhFYrCuFmerpoCD
jEpvr+iBPABYYcNFa/L1GNXPT64CA36H4V7+vvwumGZZYp+413MFGNRadLSsvEGq
pennhPmBs/72yezoXKtr42snrai/DfXebIG2kghV8S8rXqJvK5CXGImeoLFQH8jE
xZb3ib/JY+NSWSnNbSZtihurprG7X2XoxakjhhIVqlBzDEdwqjmUSt35dTU1a7kN
uUgSGVTvlfOhtc8MbJE+nTcLW09MdD3aBUVEzk8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQZmmpMgqx459Te2t5JseevNdpUmjAfBgNVHSMEGDAWgBQWe6Vs3IyXZiwb
V9kBofhliK3yrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZudWxiTnlNbDJZc0cxZlpBYUg0WllpdDhxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvNWExMjkyLWQwYWUtNGE0Yi04N2JkLWU0YmI2MzYzNmNiYS8x
L0dacHFUSUtzZU9mVTN0cmVTYkhucnpYYVZKby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
NWExMjkyLWQwYWUtNGE0Yi04N2JkLWU0YmI2MzYzNmNiYS8xL0ZudWxiTnlNbDJZ
c0cxZlpBYUg0WllpdDhxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD4DADANBgkqhkiG9w0BAQsFAAOC
AQEAF5ImpwAceeoZIrgoONzZVhvVxG+z8RGAMWJwqfV8wO6n+q3Ej1D+T+qfeZ6U
IzNBAakDVulstQMbxJmlV54Dy6ZC9OOA4IDSTdJ9j1yQdAiLSdR6sXuSWD+8uV7L
ZfJGok3knuBgvxNtJg3AysLTmdWraNJy0M5A1tObAgr56qGo8TaesB4JJVN755dA
rrauyjifdaSb051fkWsN1rKYsxStBJvSP+yQZVMwvnaCu5ptlOazP/saFTlx8GXi
030e5maNHpWPkSL0i7rJf2mxYbnySmCCKk7pIPFtOZLqNsf4R2Zu8S9zdH8Kau3e
u8HOUSu5JyRlV0z+8NGScXOUPw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:03 2025 by rpki-client