Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/0_FDf3DlAABqqJiRg1vq-Vce1rM.roa
File: 0_FDf3DlAABqqJiRg1vq-Vce1rM.roa (raw, json)
Hash identifier: WZVVSVX8Nx5izNsMwSh1W9KwxXyKF5fjEDNlSQHa/b4=
Subject key identifier: D3:F1:43:7F:70:E5:00:00:6A:A8:98:91:83:5B:EA:F9:57:1E:D6:B3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019579BD8BAAE3FA1EB9296B098E867E7798
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/0_FDf3DlAABqqJiRg1vq-Vce1rM.roa
Signing time: Sun 09 Mar 2025 07:10:20 +0000
ROA not before: Sun 09 Mar 2025 07:10:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 62.60.185.0/24 maxlen: 24
62.60.192.0/24 maxlen: 24
62.60.193.0/24 maxlen: 24
62.60.220.0/24 maxlen: 24
62.60.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:bd:8b:aa:e3:fa:1e:b9:29:6b:09:8e:86:7e:77:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 9 07:10:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3f1437f70e500006aa89891835beaf9571ed6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:80:81:92:6f:b9:97:5c:ef:89:9a:f9:58:
1c:f2:44:14:51:6a:16:a5:f1:b9:31:63:6c:72:94:
a7:51:86:09:34:85:55:5c:72:7f:68:9d:b3:00:1c:
b3:20:c8:7b:5e:9f:b6:29:af:c0:04:ac:38:ef:60:
53:e6:a0:2a:e4:23:82:82:d3:b0:84:6b:24:eb:59:
7c:54:ad:04:16:ba:df:eb:20:42:82:6c:2f:81:04:
31:ce:b7:1a:c6:4b:d6:88:b0:1d:9f:c8:19:58:c3:
40:73:7b:93:2a:a2:7f:81:0b:3b:55:73:0f:70:37:
81:22:7f:3d:8e:9f:22:72:91:ba:0e:9f:b7:4c:8f:
35:33:91:eb:60:65:b8:22:76:47:d5:a2:42:63:68:
2a:91:e9:02:dc:e2:c7:22:07:61:96:e7:90:7a:95:
a5:19:48:76:ae:8b:a6:ea:e7:fe:b9:f8:98:9e:2b:
d6:27:70:ef:b7:df:19:a7:5c:f1:79:43:a9:c1:9a:
7d:60:2e:9f:9e:c0:64:12:fa:17:13:c7:da:b2:fc:
4d:43:24:d8:a1:d7:23:6b:0c:fd:14:c9:31:e9:58:
6e:bf:14:c9:82:de:e7:40:c3:3d:e0:b7:99:c4:78:
5a:0c:cc:39:c0:21:e1:3f:46:f9:e8:b1:56:a4:58:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:43:7F:70:E5:00:00:6A:A8:98:91:83:5B:EA:F9:57:1E:D6:B3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/0_FDf3DlAABqqJiRg1vq-Vce1rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.185.0/24
62.60.192.0/23
62.60.220.0/23
Signature Algorithm: sha256WithRSAEncryption
69:c6:31:34:51:5f:9a:8b:d9:4d:de:6d:10:e1:54:3e:25:2d:
4c:17:c1:10:45:6c:5a:61:9e:90:23:25:61:1a:0c:4e:45:c7:
cc:e9:48:b0:74:0b:b9:f8:20:82:32:17:d6:54:e6:68:40:bc:
85:ec:4d:1c:cf:07:a3:93:d6:63:42:c0:1a:df:d4:4a:c5:18:
83:f6:32:4f:78:96:63:42:17:66:82:51:39:32:82:de:1f:4e:
c1:86:fb:d5:2b:94:92:16:03:1e:1e:db:1c:56:dd:77:46:e1:
6e:72:10:f1:7b:dc:c4:8f:47:52:f2:88:4f:1d:c7:1c:e9:91:
79:4f:de:f7:96:0d:b2:92:cf:97:cf:08:e1:94:ab:32:bb:d2:
21:43:65:09:dd:c7:7a:6b:14:72:1e:49:47:d1:bc:9e:73:63:
19:56:db:f1:df:53:c2:0c:ef:93:00:1c:6d:b4:c3:ba:98:76:
23:b0:e0:be:21:ef:b4:d0:a4:d4:cd:fa:90:ef:3d:d4:b8:3a:
5d:f0:99:9c:9d:8e:17:b8:ae:81:9e:08:5c:05:f7:94:4a:d8:
73:e3:90:02:a7:58:1d:b8:7b:21:0d:4a:d5:1f:71:f6:99:f5:
9a:93:b1:63:b5:29:d6:60:89:ad:8e:db:36:e8:de:76:6a:0e:
a8:bd:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:10 2025 by rpki-client