Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/AGOQH07CbOv-ptcClhHBm5EQp-4.roa
File: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (raw, json)
Hash identifier: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=
Subject key identifier: 00:63:90:1F:4E:C2:6C:EB:FE:A6:D7:02:96:11:C1:9B:91:10:A7:EE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019427B649D5ED2A2584464F67A7A261A948
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/AGOQH07CbOv-ptcClhHBm5EQp-4.roa
Signing time: Thu 02 Jan 2025 15:50:45 +0000
ROA not before: Thu 02 Jan 2025 15:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52081
IP address blocks: 62.215.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:49:d5:ed:2a:25:84:46:4f:67:a7:a2:61:a9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 2 15:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0063901f4ec26cebfea6d7029611c19b9110a7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:5f:80:4c:dd:61:fd:ae:1c:56:5a:ee:82:
52:63:ae:61:db:64:08:b2:9f:ad:88:56:ca:54:4f:
ca:d1:e7:b7:5e:54:73:4a:58:b1:ba:b1:9c:b3:1f:
f5:82:79:a9:1e:47:ed:1c:fe:6e:2c:c7:3f:66:c8:
f3:c4:d6:73:7b:f9:49:b2:9e:9d:1d:85:f4:73:33:
89:5f:27:42:53:bc:8f:52:5a:3a:e2:89:e5:01:db:
49:cd:57:08:5f:d2:d4:27:f9:40:ca:1c:79:86:16:
1d:69:45:f3:a6:0e:95:24:60:d2:c3:17:8a:77:0c:
79:16:be:db:20:97:1f:04:09:0c:53:53:29:87:43:
3a:2f:7a:cb:e0:f2:3d:4a:43:f9:ef:0d:b9:a8:30:
f9:81:5b:5f:29:f4:a3:59:4e:c3:23:ee:6e:96:fb:
fe:8f:b7:13:74:7b:a1:51:0c:4c:6e:b8:a5:c2:9c:
f9:be:ff:07:24:14:71:d2:12:ae:30:89:19:f6:ca:
4e:b3:97:99:b4:b4:4d:03:76:99:1f:db:e2:6b:7f:
21:6f:a3:87:21:72:3d:87:e5:71:66:82:f4:e4:cc:
82:06:0b:61:25:9a:59:ef:d0:ec:d7:07:70:a4:68:
49:44:0a:da:3d:d9:ea:29:c6:b2:5c:c0:6b:29:53:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:63:90:1F:4E:C2:6C:EB:FE:A6:D7:02:96:11:C1:9B:91:10:A7:EE
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/AGOQH07CbOv-ptcClhHBm5EQp-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.215.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:50:93:81:a8:98:84:3b:af:c6:49:44:e2:3b:fa:7e:1a:d4:
44:cb:51:15:24:cc:2f:47:49:30:da:d6:7a:52:d3:c3:56:b0:
48:6a:ef:27:f8:a9:a2:d7:4d:17:dc:75:8a:75:57:ce:18:9a:
3a:47:78:aa:42:41:59:11:25:b8:de:ac:98:fb:ef:6c:35:c4:
a9:8b:c5:1f:8a:b3:ee:d8:7c:87:96:1f:71:ea:1c:cd:f8:6d:
0b:85:25:4f:e5:9b:96:df:26:39:83:dd:22:7f:37:eb:15:4d:
be:14:1a:97:24:5a:6d:56:46:dc:c6:ef:be:3d:83:19:3a:e5:
3d:f6:a6:eb:7a:3d:99:bb:c2:da:f6:90:8c:d3:f8:f0:47:c7:
1a:35:25:16:14:eb:92:74:ea:8e:63:ab:a4:b3:3a:63:33:32:
21:c7:9a:78:40:e6:ce:75:e6:95:5e:73:b2:c6:59:3f:25:80:
8c:a7:85:3a:fd:82:f1:7c:25:f7:e4:64:d4:fe:d7:c0:87:4f:
98:9e:06:b1:60:09:46:63:05:3d:56:de:4d:15:31:39:9e:6f:
b5:e8:f2:3a:e6:78:9b:8c:17:57:b1:f4:aa:a9:c7:63:6b:82:
81:b6:9d:7c:4c:9c:37:93:88:4f:a6:c8:d7:6b:4f:3a:61:2d:
91:55:df:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntknV7SolhEZPZ6eiYalIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0
N2ZkY2UwHhcNMjUwMTAyMTU1MDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDYzOTAxZjRlYzI2Y2ViZmVhNmQ3MDI5NjExYzE5YjkxMTBhN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAlfgEzdYf2uHFZa7oJSY65h22QI
sp+tiFbKVE/K0ee3XlRzSlixurGcsx/1gnmpHkftHP5uLMc/ZsjzxNZze/lJsp6d
HYX0czOJXydCU7yPUlo64onlAdtJzVcIX9LUJ/lAyhx5hhYdaUXzpg6VJGDSwxeK
dwx5Fr7bIJcfBAkMU1Mph0M6L3rL4PI9SkP57w25qDD5gVtfKfSjWU7DI+5ulvv+
j7cTdHuhUQxMbrilwpz5vv8HJBRx0hKuMIkZ9spOs5eZtLRNA3aZH9via38hb6OH
IXI9h+VxZoL05MyCBgthJZpZ79Ds1wdwpGhJRAraPdnqKcayXMBrKVPXpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFABjkB9Owmzr/qbXApYRwZuREKfuMB8GA1UdIwQY
MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt
YjczYTM2ZDkzOWIyLzEvQUdPUUgwN0NiT3YtcHRjQ2xoSEJtNUVRcC00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy
LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPtcxMA0G
CSqGSIb3DQEBCwUAA4IBAQCLUJOBqJiEO6/GSUTiO/p+GtREy1EVJMwvR0kw2tZ6
UtPDVrBIau8n+Kmi100X3HWKdVfOGJo6R3iqQkFZESW43qyY++9sNcSpi8UfirPu
2HyHlh9x6hzN+G0LhSVP5ZuW3yY5g90ifzfrFU2+FBqXJFptVkbcxu++PYMZOuU9
9qbrej2Zu8La9pCM0/jwR8caNSUWFOuSdOqOY6ukszpjMzIhx5p4QObOdeaVXnOy
xlk/JYCMp4U6/YLxfCX35GTU/tfAh0+YngaxYAlGYwU9Vt5NFTE5nm+16PI65nib
jBdXsfSqqcdja4KBtp18TJw3k4hPpsjXa086YS2RVd9v
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net