Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9084-4ffe-476a-937e-01f7f8ed2736/1/HQOetIY5C6_tXxaRtWZqLFFrXt4.roa
File: HQOetIY5C6_tXxaRtWZqLFFrXt4.roa (raw, json)
Hash identifier: kMCW49XwWryMbC3UCloMQ9eLzUX80Uu/Pb26IVDxkqw=
Subject key identifier: 1D:03:9E:B4:86:39:0B:AF:ED:5F:16:91:B5:66:6A:2C:51:6B:5E:DE
Certificate issuer: /CN=959a30fc5c8c31204ba22fe52a4da97599bdccbc
Certificate serial: B4C2AD
Authority key identifier: 95:9A:30:FC:5C:8C:31:20:4B:A2:2F:E5:2A:4D:A9:75:99:BD:CC:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZow_FyMMSBLoi_lKk2pdZm9zLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9084-4ffe-476a-937e-01f7f8ed2736/1/HQOetIY5C6_tXxaRtWZqLFFrXt4.roa
Signing time: Sat 01 Jan 2022 06:56:32 +0000
ROA not before: Sat 01 Jan 2022 06:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 62.233.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11846317 (0xb4c2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959a30fc5c8c31204ba22fe52a4da97599bdccbc
Validity
Not Before: Jan 1 06:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d039eb486390bafed5f1691b5666a2c516b5ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:fc:67:a5:ac:62:db:f4:88:4f:7a:08:0f:
fd:d5:73:f0:ae:d7:14:17:1e:52:ba:bf:46:04:aa:
d8:68:b4:7d:06:84:c0:46:f9:5e:5b:4a:c4:e4:24:
d6:6b:ad:13:4c:cf:ce:34:03:12:72:d8:87:3a:1d:
fd:9d:f1:1a:f6:59:df:be:3d:c6:7e:d2:9e:4c:a1:
cc:3d:02:8f:92:dd:4c:e4:09:c0:96:0d:56:34:3d:
00:33:c4:1a:f5:c8:a6:c0:71:15:02:05:96:23:81:
d6:c8:3f:13:7e:a9:0a:2d:dc:d4:66:ee:73:a8:74:
80:54:e6:73:aa:e7:1c:a3:90:bd:0a:f9:38:ed:05:
ed:e8:92:5c:fc:1e:b6:a0:ad:8c:17:65:be:68:09:
56:97:50:ba:0d:1c:ab:02:c4:13:60:88:2c:23:9f:
51:bc:eb:5c:ec:fc:f0:07:44:ed:21:2d:f5:da:71:
7b:59:89:eb:c0:e1:c8:bd:07:bf:eb:fb:8d:8a:97:
91:0b:45:da:97:e6:15:1f:fa:e9:30:5f:95:8d:52:
32:6d:03:ac:6f:54:ca:99:1e:46:5d:40:29:e4:3d:
c0:d5:5b:91:3c:d1:1e:29:5c:91:34:aa:18:ec:f4:
63:3e:7a:0d:c4:73:7a:af:3f:0a:3a:06:be:c0:bc:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:9E:B4:86:39:0B:AF:ED:5F:16:91:B5:66:6A:2C:51:6B:5E:DE
X509v3 Authority Key Identifier:
keyid:95:9A:30:FC:5C:8C:31:20:4B:A2:2F:E5:2A:4D:A9:75:99:BD:CC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZow_FyMMSBLoi_lKk2pdZm9zLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9084-4ffe-476a-937e-01f7f8ed2736/1/HQOetIY5C6_tXxaRtWZqLFFrXt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9084-4ffe-476a-937e-01f7f8ed2736/1/lZow_FyMMSBLoi_lKk2pdZm9zLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:cc:33:01:7a:30:e4:f1:12:eb:1a:41:3f:80:32:54:cd:fb:
a0:6d:99:6a:ac:53:b8:83:b6:fd:3f:7e:04:2f:fe:17:2c:e4:
1c:1a:8a:f7:2b:ae:9b:57:86:34:9e:b0:93:7f:66:18:57:00:
2a:10:10:f6:00:02:a6:aa:f9:5a:fa:62:31:13:f9:68:b5:10:
83:05:56:d4:1c:11:6c:ae:ea:35:b9:a2:61:33:06:0d:ab:a7:
09:41:1f:95:45:86:eb:2e:cb:29:d8:dc:b3:6c:e8:7a:a8:ac:
17:38:c2:df:55:76:5c:f2:27:56:2d:ea:26:45:d9:4b:7c:46:
bb:25:ad:4f:4e:ae:9a:30:36:24:51:5f:b7:58:6e:7b:67:ee:
00:4d:d6:4a:00:62:4f:fe:2f:22:05:0c:6b:98:05:53:e0:44:
0f:e1:bd:d9:da:a8:46:32:0b:ab:81:26:40:78:ba:03:b7:ec:
64:00:78:a8:c6:48:28:51:fb:b5:39:f6:75:87:93:d5:02:11:
98:4e:04:25:af:d5:38:86:69:47:64:13:18:40:a5:23:0a:48:
81:29:a4:f8:dc:55:3b:04:29:d3:65:52:b8:3f:f5:37:b1:de:
f4:10:b0:b8:d1:b5:bd:33:2d:57:e7:0c:e3:ae:7e:75:a7:9c:
19:0d:33:5a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEALTCrTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NTlhMzBmYzVjOGMzMTIwNGJhMjJmZTUyYTRkYTk3NTk5YmRjY2JjMB4XDTIyMDEw
MTA2NTYzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQwMzllYjQ4NjM5
MGJhZmVkNWYxNjkxYjU2NjZhMmM1MTZiNWVkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+v/GelrGLb9IhPeggP/dVz8K7XFBceUrq/RgSq2Gi0fQaE
wEb5XltKxOQk1mutE0zPzjQDEnLYhzod/Z3xGvZZ3749xn7SnkyhzD0Cj5LdTOQJ
wJYNVjQ9ADPEGvXIpsBxFQIFliOB1sg/E36pCi3c1Gbuc6h0gFTmc6rnHKOQvQr5
OO0F7eiSXPwetqCtjBdlvmgJVpdQug0cqwLEE2CILCOfUbzrXOz88AdE7SEt9dpx
e1mJ68DhyL0Hv+v7jYqXkQtF2pfmFR/66TBflY1SMm0DrG9UypkeRl1AKeQ9wNVb
kTzRHilckTSqGOz0Yz56DcRzeq8/CjoGvsC8ft8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQdA560hjkLr+1fFpG1ZmosUWte3jAfBgNVHSMEGDAWgBSVmjD8XIwxIEui
L+UqTal1mb3MvDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xab3dfRnlNTVNCTG9pX2xLazJwZFptOXpMdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2IvNWU5MDg0LTRmZmUtNDc2YS05MzdlLTAxZjdmOGVkMjczNi8x
L0hRT2V0SVk1QzZfdFh4YVJ0V1pxTEZGclh0NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Iv
NWU5MDg0LTRmZmUtNDc2YS05MzdlLTAxZjdmOGVkMjczNi8xL2xab3dfRnlNTVNC
TG9pX2xLazJwZFptOXpMdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7pLzANBgkqhkiG9w0BAQsFAAOC
AQEAn8wzAXow5PES6xpBP4AyVM37oG2ZaqxTuIO2/T9+BC/+FyzkHBqK9yuum1eG
NJ6wk39mGFcAKhAQ9gACpqr5WvpiMRP5aLUQgwVW1BwRbK7qNbmiYTMGDaunCUEf
lUWG6y7LKdjcs2zoeqisFzjC31V2XPInVi3qJkXZS3xGuyWtT06umjA2JFFft1hu
e2fuAE3WSgBiT/4vIgUMa5gFU+BED+G92dqoRjILq4EmQHi6A7fsZAB4qMZIKFH7
tTn2dYeT1QIRmE4EJa/VOIZpR2QTGEClIwpIgSmk+NxVOwQp02VSuD/1N7He9BCw
uNG1vTMtV+cM465+daecGQ0zWg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:07:06 2025 by rpki-client