Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/F3nNhrMqmEK8oeGSFtCTLPhSSt8.roa
File: F3nNhrMqmEK8oeGSFtCTLPhSSt8.roa (raw, json)
Hash identifier: YgF1Myy3Wg7DCxn5c0mPOnioOXZ1FFsB7xgpZpKbl/Y=
Subject key identifier: 17:79:CD:86:B3:2A:98:42:BC:A1:E1:92:16:D0:93:2C:F8:52:4A:DF
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01835C8AE80242FE49A7B5576FC86A38276F
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/F3nNhrMqmEK8oeGSFtCTLPhSSt8.roa
Signing time: Tue 20 Sep 2022 20:15:50 +0000
ROA not before: Tue 20 Sep 2022 20:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 212.102.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5c:8a:e8:02:42:fe:49:a7:b5:57:6f:c8:6a:38:27:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Sep 20 20:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1779cd86b32a9842bca1e19216d0932cf8524adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:a4:2f:9c:d2:78:48:11:aa:9d:9f:ad:c2:
ce:1c:45:e9:d9:30:75:4b:57:42:4c:81:20:07:21:
9f:67:06:34:10:31:b0:c6:2d:24:90:85:6e:ab:4d:
3f:e8:3c:e7:98:63:98:87:e6:a0:cb:d6:ae:44:46:
84:06:0b:01:1f:55:50:62:f8:8d:af:05:95:b5:2f:
8a:03:d3:17:05:06:7a:af:5b:c5:2d:bb:df:49:89:
9b:47:77:49:98:43:aa:0b:68:ce:5f:ad:24:f5:af:
f0:8a:32:b9:b9:9f:c0:db:d0:14:14:1f:8f:fc:e3:
a2:6f:d8:12:0e:d3:ad:85:17:14:26:d7:87:60:56:
d6:8e:bd:2f:ca:05:2a:ef:ac:0b:8b:d4:ca:e1:65:
bd:bd:45:a0:42:b4:9b:5d:fd:c6:f7:1d:29:29:c6:
67:ad:1d:ea:7a:29:e5:7a:71:f9:1d:07:77:d3:74:
6e:d0:6b:d8:33:14:45:f4:64:16:9d:45:0c:e9:03:
e7:44:d7:5c:da:dd:f6:b7:ad:da:e2:96:de:12:26:
b4:fa:3c:9c:3a:e7:7a:97:ad:0d:6f:26:ec:11:ee:
2e:32:62:7c:5f:7f:a4:9f:07:74:0c:e7:90:ad:89:
03:a9:09:af:c7:b1:50:43:cd:e7:86:35:e6:ed:d1:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:CD:86:B3:2A:98:42:BC:A1:E1:92:16:D0:93:2C:F8:52:4A:DF
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/F3nNhrMqmEK8oeGSFtCTLPhSSt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:be:2a:1a:f4:a2:9d:2c:4f:f6:87:02:e4:8a:f0:50:5a:7d:
49:b6:12:d4:68:2d:c1:8a:3e:80:c4:0a:49:ae:88:0c:ee:d8:
31:48:38:16:73:d0:9e:d4:4e:f6:39:fb:8c:61:d2:93:8e:ee:
c6:c5:0b:3b:09:17:6e:61:2f:5a:7a:81:64:bd:3a:1d:88:f4:
ae:f8:37:e6:84:1b:40:60:27:89:d8:99:d1:92:5e:1b:19:61:
bb:72:8e:27:f7:e1:5b:66:c6:45:09:b8:00:64:44:d8:c0:b8:
13:a5:7b:ca:eb:b6:6c:6c:87:aa:3b:9f:82:c6:b1:19:5c:f0:
10:c0:91:61:e9:8b:f6:4f:d3:27:a2:69:02:30:b8:14:8e:c8:
38:4f:31:11:48:7e:96:ed:e2:bb:23:59:2f:05:6e:c7:8f:6e:
97:43:8d:fe:13:dc:b8:51:46:cf:9f:47:ca:12:49:1d:96:3c:
bd:fa:87:ae:e0:80:d1:18:e6:c3:a7:92:01:63:63:7c:7e:f4:
ea:73:26:ea:56:a6:c7:a9:ac:18:51:c7:6a:f3:46:1c:00:cd:
a4:4b:73:fe:35:cf:a9:97:85:ee:ff:24:4d:67:81:00:ce:f2:
34:42:ed:cd:d7:b4:6a:7b:d2:d0:af:75:f6:62:cf:33:cc:61:
8c:e9:f7:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNciugCQv5Jp7VXb8hqOCdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjIwOTIwMjAxNTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzc5Y2Q4NmIzMmE5ODQyYmNhMWUxOTIxNmQwOTMyY2Y4NTI0YWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmWkL5zSeEgRqp2frcLOHEXp2TB1
S1dCTIEgByGfZwY0EDGwxi0kkIVuq00/6DznmGOYh+agy9auREaEBgsBH1VQYviN
rwWVtS+KA9MXBQZ6r1vFLbvfSYmbR3dJmEOqC2jOX60k9a/wijK5uZ/A29AUFB+P
/OOib9gSDtOthRcUJteHYFbWjr0vygUq76wLi9TK4WW9vUWgQrSbXf3G9x0pKcZn
rR3qeinlenH5HQd303Ru0GvYMxRF9GQWnUUM6QPnRNdc2t32t63a4pbeEia0+jyc
Oud6l60NbybsEe4uMmJ8X3+knwd0DOeQrYkDqQmvx7FQQ83nhjXm7dGBPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBd5zYazKphCvKHhkhbQkyz4UkrfMB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvRjNuTmhyTXFtRUs4b2VHU0Z0Q1RMUGhTU3Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GZyMA0G
CSqGSIb3DQEBCwUAA4IBAQDtvioa9KKdLE/2hwLkivBQWn1JthLUaC3Bij6AxApJ
rogM7tgxSDgWc9Ce1E72OfuMYdKTju7GxQs7CRduYS9aeoFkvTodiPSu+DfmhBtA
YCeJ2JnRkl4bGWG7co4n9+FbZsZFCbgAZETYwLgTpXvK67ZsbIeqO5+CxrEZXPAQ
wJFh6Yv2T9MnomkCMLgUjsg4TzERSH6W7eK7I1kvBW7Hj26XQ43+E9y4UUbPn0fK
Ekkdljy9+oeu4IDRGObDp5IBY2N8fvTqcybqVqbHqawYUcdq80YcAM2kS3P+Nc+p
l4Xu/yRNZ4EAzvI0Qu3N17Rqe9LQr3X2Ys8zzGGM6fdB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org