Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/_5Zqip3feO7pU4z4vtsZMvbFS1Y.roa
File: _5Zqip3feO7pU4z4vtsZMvbFS1Y.roa (raw, json)
Hash identifier: lshLZN/Gja31IekLnKk3n9k+Fk8DRfuoDzIi4RfjrCU=
Subject key identifier: FF:96:6A:8A:9D:DF:78:EE:E9:53:8C:F8:BE:DB:19:32:F6:C5:4B:56
Certificate issuer: /CN=45577ff2afd15ed1484314510c464641dea0e37c
Certificate serial: C1728B
Authority key identifier: 45:57:7F:F2:AF:D1:5E:D1:48:43:14:51:0C:46:46:41:DE:A0:E3:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVd_8q_RXtFIQxRRDEZGQd6g43w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/_5Zqip3feO7pU4z4vtsZMvbFS1Y.roa
Signing time: Sat 01 Jan 2022 03:54:17 +0000
ROA not before: Sat 01 Jan 2022 03:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209235
IP address blocks: 62.106.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12677771 (0xc1728b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45577ff2afd15ed1484314510c464641dea0e37c
Validity
Not Before: Jan 1 03:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff966a8a9ddf78eee9538cf8bedb1932f6c54b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:49:13:87:6d:e4:83:0e:52:76:bb:e9:b1:
ab:c0:07:de:81:21:39:25:37:54:30:a5:da:bf:e5:
26:99:92:52:31:77:d6:a8:d6:59:39:30:e7:e5:71:
09:e8:8c:8a:e5:27:d8:2d:53:3f:83:4a:d7:45:3e:
92:68:71:1a:58:58:1c:a3:59:30:da:5f:15:32:2c:
bf:85:04:5e:61:c9:de:03:17:bb:f8:ef:15:96:d0:
85:fb:15:c5:87:96:f7:73:ec:3c:ea:25:46:36:60:
c3:8a:7e:ef:35:69:c9:f0:94:74:60:28:f9:d2:7e:
41:e8:d0:53:4c:16:b4:1f:30:bf:9f:1b:9f:82:85:
91:38:b9:dd:f7:50:47:af:b3:89:38:cd:c4:ff:93:
43:fb:65:28:58:de:4f:c8:77:e1:12:e2:0a:38:47:
d2:3d:6c:cb:d6:fa:c7:2e:5e:53:4f:42:0f:67:0e:
b6:7a:69:d0:a7:c1:e2:9c:57:cd:ed:8f:9b:0f:e7:
53:97:2d:93:66:ab:82:dc:6c:78:c0:bd:eb:1f:82:
1e:a8:f6:1f:46:f3:01:4a:d3:9a:5e:59:ed:b0:02:
c1:a2:b6:25:38:17:35:8b:47:08:46:51:e7:1b:b5:
fd:4e:25:7f:cb:fa:43:a1:a5:19:db:bb:ea:15:fd:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:96:6A:8A:9D:DF:78:EE:E9:53:8C:F8:BE:DB:19:32:F6:C5:4B:56
X509v3 Authority Key Identifier:
keyid:45:57:7F:F2:AF:D1:5E:D1:48:43:14:51:0C:46:46:41:DE:A0:E3:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVd_8q_RXtFIQxRRDEZGQd6g43w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/_5Zqip3feO7pU4z4vtsZMvbFS1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/279bf6-b308-42e4-98a7-5823dddbbdf0/1/RVd_8q_RXtFIQxRRDEZGQd6g43w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:fa:71:c1:67:05:a2:32:c8:d7:a7:b3:97:7a:f5:81:06:eb:
45:d0:28:b3:56:1c:90:58:ad:9e:42:a7:07:22:09:ff:7b:10:
fd:9e:4f:9b:ac:61:25:6f:ab:27:7d:85:7f:6b:f5:d9:ba:ac:
1a:85:59:15:81:eb:3d:e9:59:ab:fc:ce:4f:24:5f:80:bc:1a:
da:51:18:be:0e:aa:4f:73:96:75:9c:3f:12:a3:23:02:a2:bf:
7f:7b:b5:f8:00:c8:79:1b:ba:34:86:da:77:a3:bd:a4:ce:a7:
82:bd:38:05:aa:1e:a3:8d:a0:bf:f5:53:f0:a0:0e:44:86:bc:
75:0f:01:ba:0c:6d:20:5b:51:ad:33:e3:20:d5:c6:3a:b3:7a:
d0:b4:d9:6c:f3:01:15:be:da:95:69:3d:ef:aa:ea:90:96:76:
3c:7d:2c:ce:47:ac:91:25:cd:48:f9:0e:99:e7:9d:43:2d:be:
a6:e0:8c:8f:a0:71:ca:99:e5:ff:eb:66:f1:66:d4:c3:c8:0a:
34:d1:9c:03:5c:55:88:21:9b:49:f6:36:cc:54:de:40:02:83:
b3:dd:e0:ba:7d:f9:3b:50:13:d1:eb:b5:62:4b:96:e2:d8:5f:
8a:5e:ae:80:1d:85:4c:0a:4c:1c:65:d8:b5:70:0d:4d:ed:e8:
f9:41:70:28
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMFyizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NTU3N2ZmMmFmZDE1ZWQxNDg0MzE0NTEwYzQ2NDY0MWRlYTBlMzdjMB4XDTIyMDEw
MTAzNTQxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmY5NjZhOGE5ZGRm
NzhlZWU5NTM4Y2Y4YmVkYjE5MzJmNmM1NGI1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL0cSROHbeSDDlJ2u+mxq8AH3oEhOSU3VDCl2r/lJpmSUjF3
1qjWWTkw5+VxCeiMiuUn2C1TP4NK10U+kmhxGlhYHKNZMNpfFTIsv4UEXmHJ3gMX
u/jvFZbQhfsVxYeW93PsPOolRjZgw4p+7zVpyfCUdGAo+dJ+QejQU0wWtB8wv58b
n4KFkTi53fdQR6+ziTjNxP+TQ/tlKFjeT8h34RLiCjhH0j1sy9b6xy5eU09CD2cO
tnpp0KfB4pxXze2Pmw/nU5ctk2argtxseMC96x+CHqj2H0bzAUrTml5Z7bACwaK2
JTgXNYtHCEZR5xu1/U4lf8v6Q6GlGdu76hX9ygUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT/lmqKnd947ulTjPi+2xky9sVLVjAfBgNVHSMEGDAWgBRFV3/yr9Fe0UhD
FFEMRkZB3qDjfDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JWZF84cV9SWHRGSVF4UlJERVpHUWQ2ZzQzdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvMjc5YmY2LWIzMDgtNDJlNC05OGE3LTU4MjNkZGRiYmRmMC8x
L181WnFpcDNmZU83cFU0ejR2dHNaTXZiRlMxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
Mjc5YmY2LWIzMDgtNDJlNC05OGE3LTU4MjNkZGRiYmRmMC8xL1JWZF84cV9SWHRG
SVF4UlJERVpHUWQ2ZzQzdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5qWDANBgkqhkiG9w0BAQsFAAOC
AQEAfvpxwWcFojLI16ezl3r1gQbrRdAos1YckFitnkKnByIJ/3sQ/Z5Pm6xhJW+r
J32Ff2v12bqsGoVZFYHrPelZq/zOTyRfgLwa2lEYvg6qT3OWdZw/EqMjAqK/f3u1
+ADIeRu6NIbad6O9pM6ngr04Baoeo42gv/VT8KAORIa8dQ8BugxtIFtRrTPjINXG
OrN60LTZbPMBFb7alWk976rqkJZ2PH0szkeskSXNSPkOmeedQy2+puCMj6Bxypnl
/+tm8WbUw8gKNNGcA1xViCGbSfY2zFTeQAKDs93gun35O1AT0eu1YkuW4thfil6u
gB2FTApMHGXYtXANTe3o+UFwKA==
-----END CERTIFICATE-----
Generated at Fri May 2 23:21:22 2025 by rpki-client