Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/9N4nOv3tg3sEbPyzZf0it1Hq25E.roa
File: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (raw, json)
Hash identifier: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=
Subject key identifier: F4:DE:27:3A:FD:ED:83:7B:04:6C:FC:B3:65:FD:22:B7:51:EA:DB:91
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01942067FC7583319984F4A595421E11C1D9
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/9N4nOv3tg3sEbPyzZf0it1Hq25E.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5602
IP address blocks: 62.100.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fc:75:83:31:99:84:f4:a5:95:42:1e:11:c1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4de273afded837b046cfcb365fd22b751eadb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:fa:41:db:f2:0f:00:ee:ea:0f:52:11:67:
77:34:99:dd:31:de:66:7a:c4:a8:17:6f:13:01:fb:
57:fd:2c:68:a8:b2:84:01:9e:75:25:dc:16:cc:f7:
93:94:32:3e:9e:22:71:55:33:37:cb:65:e3:99:37:
65:67:81:e1:8a:c3:4e:e3:09:6b:e1:d0:23:34:e9:
5d:95:1b:58:f3:0a:83:e1:91:9c:bf:f1:ac:a2:15:
cb:81:9b:08:c1:6e:da:b5:ed:f3:3c:3c:96:a6:33:
d0:6b:5d:5c:ea:3d:f0:17:06:ca:98:b9:90:59:af:
e0:e0:86:91:b3:08:f1:ca:10:0f:e5:ff:e8:00:48:
d0:aa:a8:24:9a:03:1e:52:81:6c:c7:99:ed:19:de:
97:55:c4:1d:ff:c7:ed:e6:fd:fd:2c:2e:8f:59:3e:
7e:d8:75:50:ba:41:20:c7:f5:38:d0:bf:d7:10:2d:
58:c1:dc:8a:97:22:20:b1:b0:9e:a4:23:79:e9:64:
81:f1:eb:6e:4c:ba:3a:f6:8e:95:a3:01:ae:e9:dc:
02:b2:1a:06:c2:9a:25:11:6d:f3:31:49:21:a8:59:
77:08:ad:30:fc:61:1b:79:7f:e2:32:58:81:2c:67:
eb:a9:90:4a:bf:9d:2d:a9:2a:29:3b:20:b3:ef:1e:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:27:3A:FD:ED:83:7B:04:6C:FC:B3:65:FD:22:B7:51:EA:DB:91
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/9N4nOv3tg3sEbPyzZf0it1Hq25E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.76.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:3f:c7:a2:90:a8:95:1d:33:15:38:58:88:a6:36:13:0d:5c:
92:fa:46:a8:15:7b:84:e1:7a:6e:67:c7:c8:70:82:18:97:bb:
1b:03:61:33:b0:bb:f2:44:fb:fb:70:82:3e:78:c8:a5:9e:60:
32:ff:a9:24:01:08:9e:01:b7:ae:b5:c4:e9:59:85:92:ed:0b:
f0:1b:aa:f1:aa:40:75:f2:c1:32:de:c7:c0:a5:a6:aa:df:d3:
da:6a:2d:9b:02:6c:7e:9d:ef:6c:8f:55:cf:4e:3a:77:0d:65:
02:fc:80:f6:6b:63:51:3b:c8:ff:d0:90:b4:ae:70:7a:3d:de:
eb:27:f5:fe:4c:69:20:11:17:e7:3a:40:60:6b:b7:ce:d7:29:
65:26:19:e3:c4:1c:30:29:93:d5:41:96:ac:4e:11:5a:67:66:
89:1d:52:0d:41:ee:72:16:74:97:0f:0f:46:87:a5:b4:06:17:
14:f4:0c:f5:86:91:d8:6b:20:3a:6d:b9:09:91:32:65:da:3d:
5d:6d:99:bb:56:57:ca:ac:68:65:df:20:df:98:18:8a:af:f2:
73:cb:6c:50:1a:02:a2:20:c5:ab:4f:cb:11:3e:fd:e9:03:6a:
52:cf:6f:00:69:5c:02:2c:e1:57:cf:87:db:d4:00:f1:79:b0:
4d:21:e5:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ/x1gzGZhPSllUIeEcHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz
ZjBkYzUwHhcNMjUwMTAxMDU0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGRlMjczYWZkZWQ4MzdiMDQ2Y2ZjYjM2NWZkMjJiNzUxZWFkYjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwn6QdvyDwDu6g9SEWd3NJndMd5m
esSoF28TAftX/SxoqLKEAZ51JdwWzPeTlDI+niJxVTM3y2XjmTdlZ4HhisNO4wlr
4dAjNOldlRtY8wqD4ZGcv/GsohXLgZsIwW7ate3zPDyWpjPQa11c6j3wFwbKmLmQ
Wa/g4IaRswjxyhAP5f/oAEjQqqgkmgMeUoFsx5ntGd6XVcQd/8ft5v39LC6PWT5+
2HVQukEgx/U40L/XEC1YwdyKlyIgsbCepCN56WSB8etuTLo69o6VowGu6dwCshoG
wpolEW3zMUkhqFl3CK0w/GEbeX/iMliBLGfrqZBKv50tqSopOyCz7x64NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTeJzr97YN7BGz8s2X9IrdR6tuRMB8GA1UdIwQY
MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt
OGI4YTAxYmQ3NDE0LzEvOU40bk92M3RnM3NFYlB5elpmMGl0MUhxMjVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0
LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPmRMMA0G
CSqGSIb3DQEBCwUAA4IBAQCPP8eikKiVHTMVOFiIpjYTDVyS+kaoFXuE4XpuZ8fI
cIIYl7sbA2EzsLvyRPv7cII+eMilnmAy/6kkAQieAbeutcTpWYWS7QvwG6rxqkB1
8sEy3sfApaaq39Paai2bAmx+ne9sj1XPTjp3DWUC/ID2a2NRO8j/0JC0rnB6Pd7r
J/X+TGkgERfnOkBga7fO1yllJhnjxBwwKZPVQZasThFaZ2aJHVINQe5yFnSXDw9G
h6W0BhcU9Az1hpHYayA6bbkJkTJl2j1dbZm7VlfKrGhl3yDfmBiKr/Jzy2xQGgKi
IMWrT8sRPv3pA2pSz28AaVwCLOFXz4fb1ADxebBNIeVf
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net