Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/ZTGnOaIYOK-SXAHWxrKPBBZIzNQ.roa
File: ZTGnOaIYOK-SXAHWxrKPBBZIzNQ.roa (raw, json)
Hash identifier: fTvSDm6rDIaE0aCsNM2PIcM9z3E6C6j2DADCMFYYMdA=
Subject key identifier: 65:31:A7:39:A2:18:38:AF:92:5C:01:D6:C6:B2:8F:04:16:48:CC:D4
Certificate issuer: /CN=ac345e7c5920cc89a3ea6cada2be505283684270
Certificate serial: 018A50763E1254542FE8C24DB70B46F0DD4E
Authority key identifier: AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/ZTGnOaIYOK-SXAHWxrKPBBZIzNQ.roa
Signing time: Fri 01 Sep 2023 11:17:20 +0000
ROA not before: Fri 01 Sep 2023 11:17:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 62.3.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:76:3e:12:54:54:2f:e8:c2:4d:b7:0b:46:f0:dd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac345e7c5920cc89a3ea6cada2be505283684270
Validity
Not Before: Sep 1 11:17:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6531a739a21838af925c01d6c6b28f041648ccd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:7e:1e:37:28:43:64:fb:04:ea:3b:93:22:
c7:a8:f7:db:87:e1:12:5d:14:7a:41:f2:24:cb:c5:
d9:09:0d:b9:35:9b:82:ed:dd:90:9a:b2:bd:34:71:
2a:ef:04:ae:1e:d7:5c:fb:f0:8e:df:50:df:84:ad:
1a:42:57:4b:f5:85:24:48:4e:62:83:e4:50:c2:1b:
5c:32:fd:6d:ff:62:f8:12:51:b6:ff:78:3a:2d:8c:
d3:e7:77:c7:32:8f:16:11:2f:5d:e9:db:52:3f:e2:
36:99:c5:01:13:25:aa:a2:79:37:78:30:51:c5:97:
ce:c2:01:e0:15:b2:f7:85:5e:9f:8d:00:b9:c4:f8:
e3:1f:01:5c:e1:4c:76:98:72:b3:20:f8:7e:5c:9f:
3d:b1:44:c1:bd:d3:97:f4:b5:99:a5:53:78:41:27:
63:89:5f:14:39:2a:6c:69:00:29:3e:4d:b8:03:ab:
13:88:64:06:a9:a5:0d:43:53:b3:d2:46:c8:23:67:
4b:f4:75:7e:fb:78:fe:1f:d0:ff:4a:29:36:ea:63:
fa:26:cf:92:57:c7:54:58:43:dc:07:71:74:a4:c9:
d2:c4:fe:d7:ba:c5:a0:cd:a3:87:cd:22:f6:78:97:
cd:ae:f4:cd:82:ba:be:73:3d:ec:e5:25:0f:53:bb:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:A7:39:A2:18:38:AF:92:5C:01:D6:C6:B2:8F:04:16:48:CC:D4
X509v3 Authority Key Identifier:
keyid:AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/ZTGnOaIYOK-SXAHWxrKPBBZIzNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/rDRefFkgzImj6mytor5QUoNoQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
16:28:0f:21:55:8e:3d:16:ba:4f:19:d0:ef:77:06:cd:32:54:
1c:49:1c:b9:ab:72:a4:e3:55:0b:dc:7a:56:66:99:fd:44:da:
04:dd:79:90:c2:e1:de:c1:31:41:b5:10:77:6b:b7:b1:0f:1c:
b1:5f:e8:04:20:94:e4:36:40:9d:93:52:e7:33:61:59:4e:51:
80:33:01:11:8d:f0:e8:5a:9d:0f:8d:a0:1d:80:0a:76:c3:32:
c9:c3:83:d8:78:33:dc:ba:90:d3:56:7c:8a:20:cb:9e:36:e0:
54:47:2f:ff:bd:f6:23:98:73:19:68:89:20:f0:c4:b2:43:d0:
f8:bc:e5:dc:2b:70:ce:03:98:42:ef:41:53:5b:52:48:7c:06:
2e:22:ca:f3:7a:79:29:6d:25:6d:dd:4b:bb:e3:b5:d3:84:4d:
b3:6b:9f:62:d9:d3:2f:32:df:9b:ef:13:61:79:63:c9:4f:af:
0f:b4:47:78:8a:3a:05:47:8b:37:94:99:3e:e6:a7:67:96:6f:
63:6f:5a:99:2e:1b:e6:c1:00:1f:42:b9:42:ee:90:02:c5:c3:
10:8f:33:92:85:37:1a:02:0f:40:2a:8c:e6:dc:54:0c:4a:40:
ad:49:d9:fb:ac:99:8b:11:e4:ad:c9:a8:95:59:a1:ef:96:69:
ee:fb:41:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpQdj4SVFQv6MJNtwtG8N1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMzQ1ZTdjNTkyMGNjODlhM2VhNmNhZGEyYmU1MDUyODM2
ODQyNzAwHhcNMjMwOTAxMTExNzIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTMxYTczOWEyMTgzOGFmOTI1YzAxZDZjNmIyOGYwNDE2NDhjY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx9+HjcoQ2T7BOo7kyLHqPfbh+ES
XRR6QfIky8XZCQ25NZuC7d2QmrK9NHEq7wSuHtdc+/CO31DfhK0aQldL9YUkSE5i
g+RQwhtcMv1t/2L4ElG2/3g6LYzT53fHMo8WES9d6dtSP+I2mcUBEyWqonk3eDBR
xZfOwgHgFbL3hV6fjQC5xPjjHwFc4Ux2mHKzIPh+XJ89sUTBvdOX9LWZpVN4QSdj
iV8UOSpsaQApPk24A6sTiGQGqaUNQ1Oz0kbII2dL9HV++3j+H9D/Sik26mP6Js+S
V8dUWEPcB3F0pMnSxP7XusWgzaOHzSL2eJfNrvTNgrq+cz3s5SUPU7uVUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUxpzmiGDivklwB1sayjwQWSMzUMB8GA1UdIwQY
MBaAFKw0XnxZIMyJo+psraK+UFKDaEJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckRSZWZGa2d6SW1qNm15dG9yNVFVb05vUW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2NDItOTQyOC00YTE3LWI5MzYt
ODgzMjliMDNiMmFhLzEvWlRHbk9hSVlPSy1TWEFIV3hyS1BCQlpJek5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2NDItOTQyOC00YTE3LWI5MzYtODgzMjliMDNiMmFh
LzEvckRSZWZGa2d6SW1qNm15dG9yNVFVb05vUW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgM2MA0G
CSqGSIb3DQEBCwUAA4IBAQAWKA8hVY49FrpPGdDvdwbNMlQcSRy5q3Kk41UL3HpW
Zpn9RNoE3XmQwuHewTFBtRB3a7exDxyxX+gEIJTkNkCdk1LnM2FZTlGAMwERjfDo
Wp0PjaAdgAp2wzLJw4PYeDPcupDTVnyKIMueNuBURy//vfYjmHMZaIkg8MSyQ9D4
vOXcK3DOA5hC70FTW1JIfAYuIsrzenkpbSVt3Uu747XThE2za59i2dMvMt+b7xNh
eWPJT68PtEd4ijoFR4s3lJk+5qdnlm9jb1qZLhvmwQAfQrlC7pACxcMQjzOShTca
Ag9AKozm3FQMSkCtSdn7rJmLEeStyaiVWaHvlmnu+0ES
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:55 2025 by rpki-client