Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/ZhbjheWbWerFXBB4zNXHPRZjDd4.roa
File: ZhbjheWbWerFXBB4zNXHPRZjDd4.roa (raw, json)
Hash identifier: DzcEN7T/Gjt3cexC4vuKMyCPBvxTYl/NoauLae66HvQ=
Subject key identifier: 66:16:E3:85:E5:9B:59:EA:C5:5C:10:78:CC:D5:C7:3D:16:63:0D:DE
Certificate issuer: /CN=7ad5da58d6ac9c7c26754bf80da9303e0b972617
Certificate serial: 01856CEF29D745AE15CD31A149A63B964169
Authority key identifier: 7A:D5:DA:58:D6:AC:9C:7C:26:75:4B:F8:0D:A9:30:3E:0B:97:26:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etXaWNasnHwmdUv4DakwPguXJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/ZhbjheWbWerFXBB4zNXHPRZjDd4.roa
Signing time: Sun 01 Jan 2023 10:44:51 +0000
ROA not before: Sun 01 Jan 2023 10:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.3.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:29:d7:45:ae:15:cd:31:a1:49:a6:3b:96:41:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad5da58d6ac9c7c26754bf80da9303e0b972617
Validity
Not Before: Jan 1 10:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6616e385e59b59eac55c1078ccd5c73d16630dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:09:05:67:01:d9:6c:4f:b1:89:65:05:b4:
01:b2:da:d8:78:fb:27:63:c5:dd:56:01:a5:f2:36:
f0:89:9b:23:47:4d:86:ee:20:8e:82:f5:1d:c4:a1:
f0:48:25:ae:29:00:a1:e7:f6:56:b9:1b:1b:a4:5d:
4a:25:1f:f5:cf:a0:c4:8c:8b:62:ab:85:a4:a9:7a:
76:e8:d7:02:2a:6e:a3:49:f2:77:e8:95:72:81:17:
d1:4b:77:a5:24:e7:1a:25:b8:81:bb:fa:05:6a:e6:
d7:9f:41:8f:bf:cd:42:d8:a9:25:8e:8d:56:d0:f5:
d2:ae:64:5e:4e:54:bb:ae:42:73:ee:c0:88:69:68:
b6:3c:74:ff:b1:a6:02:fd:66:bd:b4:d4:cf:e6:db:
ab:65:a4:16:44:9d:f6:7d:d9:42:67:7c:df:53:a7:
54:4f:b8:3e:07:5f:d0:09:5a:26:33:02:de:a9:a4:
95:95:83:46:76:b9:29:d7:11:9a:2e:81:d5:d2:fc:
71:85:7d:ee:76:93:92:83:98:7f:5c:64:fd:07:03:
76:02:3c:cb:b1:3c:43:5e:9d:02:87:ef:4c:61:dd:
15:db:d9:5c:15:0d:2f:8f:31:8e:7a:41:15:9d:b1:
40:71:75:b9:8c:5b:5d:55:12:23:b6:45:96:92:52:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:16:E3:85:E5:9B:59:EA:C5:5C:10:78:CC:D5:C7:3D:16:63:0D:DE
X509v3 Authority Key Identifier:
keyid:7A:D5:DA:58:D6:AC:9C:7C:26:75:4B:F8:0D:A9:30:3E:0B:97:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etXaWNasnHwmdUv4DakwPguXJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/ZhbjheWbWerFXBB4zNXHPRZjDd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/etXaWNasnHwmdUv4DakwPguXJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
98:0a:29:52:d7:19:b9:e4:7a:36:99:c1:e9:1e:14:06:75:23:
7a:e6:c8:ac:f7:b9:f5:7c:68:53:7f:cb:99:1a:be:4b:28:78:
c3:25:5a:02:8d:a2:33:9b:52:86:f0:b2:14:80:b4:a8:d3:90:
93:4f:09:2c:92:60:8e:9e:de:92:01:26:f0:43:06:87:76:26:
5b:d7:7f:f1:29:37:62:89:e6:f5:14:71:8a:4d:63:ff:10:0a:
52:07:60:60:67:2b:7c:21:f3:f3:c9:b8:3e:4c:6c:c4:20:86:
5f:eb:6d:86:3e:29:62:f1:90:a2:a8:62:6b:0c:3c:b7:89:84:
ca:ed:e9:84:4d:df:40:57:94:b2:25:e7:27:47:0f:c4:f3:5a:
fc:2b:4a:2c:fc:df:96:79:11:83:3a:89:cd:cc:d8:89:3e:58:
06:c0:1d:78:5a:00:68:7a:27:4a:d4:3a:52:02:a7:1f:d3:be:
81:d5:f1:b6:7e:01:b2:e2:6e:bd:bf:16:25:75:21:5a:ce:08:
a1:6a:04:25:cf:a8:31:c6:e7:4c:e9:9d:c4:93:50:00:98:8b:
9c:c0:89:35:04:ff:b8:70:00:52:52:2b:01:f3:1c:3c:24:18:
94:73:0e:ab:95:67:b2:ea:4b:c5:7a:11:09:81:63:af:17:70:
67:2a:e9:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs7ynXRa4VzTGhSaY7lkFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZDVkYTU4ZDZhYzljN2MyNjc1NGJmODBkYTkzMDNlMGI5
NzI2MTcwHhcNMjMwMTAxMTA0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjE2ZTM4NWU1OWI1OWVhYzU1YzEwNzhjY2Q1YzczZDE2NjMwZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno0JBWcB2WxPsYllBbQBstrYePsn
Y8XdVgGl8jbwiZsjR02G7iCOgvUdxKHwSCWuKQCh5/ZWuRsbpF1KJR/1z6DEjIti
q4WkqXp26NcCKm6jSfJ36JVygRfRS3elJOcaJbiBu/oFaubXn0GPv81C2Kkljo1W
0PXSrmReTlS7rkJz7sCIaWi2PHT/saYC/Wa9tNTP5turZaQWRJ32fdlCZ3zfU6dU
T7g+B1/QCVomMwLeqaSVlYNGdrkp1xGaLoHV0vxxhX3udpOSg5h/XGT9BwN2AjzL
sTxDXp0Ch+9MYd0V29lcFQ0vjzGOekEVnbFAcXW5jFtdVRIjtkWWklJS/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGYW44Xlm1nqxVwQeMzVxz0WYw3eMB8GA1UdIwQY
MBaAFHrV2ljWrJx8JnVL+A2pMD4LlyYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXRYYVdOYXNuSHdtZFV2NERha3dQZ3VYSmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hNWI2YTUtNWJhMC00NTIzLWFhNzct
ZThmMmQ2ODJhNDllLzEvWmhiamhlV2JXZXJGWEJCNHpOWEhQUlpqRGQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hNWI2YTUtNWJhMC00NTIzLWFhNzctZThmMmQ2ODJhNDll
LzEvZXRYYVdOYXNuSHdtZFV2NERha3dQZ3VYSmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMUMA0G
CSqGSIb3DQEBCwUAA4IBAQCYCilS1xm55Ho2mcHpHhQGdSN65sis97n1fGhTf8uZ
Gr5LKHjDJVoCjaIzm1KG8LIUgLSo05CTTwkskmCOnt6SASbwQwaHdiZb13/xKTdi
ieb1FHGKTWP/EApSB2BgZyt8IfPzybg+TGzEIIZf622GPili8ZCiqGJrDDy3iYTK
7emETd9AV5SyJecnRw/E81r8K0os/N+WeRGDOonNzNiJPlgGwB14WgBoeidK1DpS
Aqcf076B1fG2fgGy4m69vxYldSFazgihagQlz6gxxudM6Z3Ek1AAmIucwIk1BP+4
cABSUisB8xw8JBiUcw6rlWey6kvFehEJgWOvF3BnKulx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:00 2024 by rpki-client on console-fra.rpki-client.org