Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D-FhKD2IH5WW1tcP_PgbQ-Q2Hdw.roa
File: D-FhKD2IH5WW1tcP_PgbQ-Q2Hdw.roa (raw, json)
Hash identifier: qbMVB8z8dQ0QnTTA/ehTWlmNZaBqloeqo/YMj8K1KmM=
Subject key identifier: 0F:E1:61:28:3D:88:1F:95:96:D6:D7:0F:FC:F8:1B:43:E4:36:1D:DC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B38C5C9BBE7E37CF8A126BDD8C1A5A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D-FhKD2IH5WW1tcP_PgbQ-Q2Hdw.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215930
IP address blocks: 62.60.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8c:5c:9b:be:7e:37:cf:8a:12:6b:dd:8c:1a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fe161283d881f9596d6d70ffcf81b43e4361ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:61:42:a2:22:bf:0f:ab:da:b7:b3:d3:23:
e8:15:9c:c0:53:8f:ea:8a:29:69:57:27:e3:1e:cf:
40:82:55:f6:ef:af:5c:1a:dd:b3:91:59:c4:f9:80:
ad:e5:47:ea:bc:ba:2f:2a:46:6f:3f:40:72:5c:65:
29:2f:13:c6:a6:97:d3:05:73:52:4e:02:ec:59:f6:
b1:ef:f5:98:68:8a:6f:68:e4:50:87:24:85:ae:35:
a5:f7:f0:4e:d3:c0:94:aa:e1:9a:95:0b:89:ed:43:
16:ef:5f:21:9e:be:9b:f4:31:a0:ad:72:a2:18:6c:
3b:79:5a:4e:49:ad:c0:37:7d:f3:2a:98:54:b9:b5:
b1:af:35:df:cc:ba:81:11:a2:ec:5a:98:74:34:09:
8e:0a:fa:2c:36:de:5e:28:be:32:2e:ce:92:26:e8:
37:31:ed:87:a1:2b:6f:7d:3a:63:e5:31:cd:42:67:
67:36:14:53:2b:93:34:45:50:e3:dc:c9:8b:49:46:
1a:cd:61:31:36:de:bf:71:90:8d:4c:76:3a:94:9e:
e8:eb:14:23:28:39:df:18:19:71:6e:2b:33:88:80:
87:6c:cf:4c:f8:75:c9:a3:37:a5:12:c6:22:1d:bc:
18:19:cc:b5:3d:69:80:a8:19:21:fb:60:cb:f8:ab:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:61:28:3D:88:1F:95:96:D6:D7:0F:FC:F8:1B:43:E4:36:1D:DC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D-FhKD2IH5WW1tcP_PgbQ-Q2Hdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:30:20:de:72:d8:7e:1e:48:34:ae:95:22:97:6d:8e:5c:85:
f1:a3:51:7c:f5:6b:5d:ae:f6:7e:a1:25:3c:da:71:93:f5:c9:
04:76:ae:78:8c:88:a3:5b:c6:fc:d8:ab:d6:c3:a4:fb:29:23:
1f:44:16:0f:78:2e:64:c6:03:07:b1:e2:b7:17:b1:8c:3a:2f:
9f:a6:1f:d3:08:2a:6e:c8:d1:2a:c0:fb:76:ca:66:11:a9:6a:
ec:25:1f:ba:7c:99:d8:e8:e0:56:60:d1:b4:16:07:61:a0:55:
47:9f:df:33:6a:b2:ad:a8:7f:a0:c1:fe:8b:85:ef:a4:01:4b:
3a:ec:95:ba:7d:07:e3:a3:b8:24:68:bd:5f:f1:a6:0c:0b:6c:
2f:b9:b4:ea:ae:00:59:35:9f:0a:1b:e1:52:23:2e:bb:02:17:
d0:b6:c1:59:e7:23:db:1e:c3:47:61:30:e1:09:a3:b8:2e:d4:
9e:bd:43:55:9b:78:b5:e1:d6:fd:c7:bd:50:56:93:bf:1c:73:
6d:8c:7b:1b:3b:fb:02:3d:4d:1d:6c:a7:15:53:09:6c:e8:bc:
ef:43:b4:81:86:e4:84:1f:69:30:ac:97:7b:56:eb:6e:4b:b2:
46:83:17:ea:60:60:ad:a0:dc:74:ed:44:50:28:6b:1a:b5:7a:
29:ad:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:21 2025 by rpki-client