Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/23muwDdWVKU0oTYqxqkTCju7Jvc.roa
File: 23muwDdWVKU0oTYqxqkTCju7Jvc.roa (raw, json)
Hash identifier: I94NNO0gfE8IPHBDW8aUZHXxHl8PSmg4qOg9m0ZGAEI=
Subject key identifier: DB:79:AE:C0:37:56:54:A5:34:A1:36:2A:C6:A9:13:0A:3B:BB:26:F7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B38921E9581D57ED9FE9BE44B2D59A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/23muwDdWVKU0oTYqxqkTCju7Jvc.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 62.60.184.0/23 maxlen: 24
62.60.193.0/24 maxlen: 24
62.60.194.0/23 maxlen: 24
62.60.195.0/24 maxlen: 24
213.176.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:89:21:e9:58:1d:57:ed:9f:e9:be:44:b2:d5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db79aec0375654a534a1362ac6a9130a3bbb26f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:83:98:1b:80:e3:c8:67:8a:84:1a:25:f9:
ba:71:f9:44:12:63:60:b5:4e:49:f4:c7:29:e5:00:
32:7f:bb:d0:e2:1c:30:3a:e0:64:c8:b4:68:f1:1f:
39:77:9b:6d:02:65:45:07:ce:ee:5b:c2:f4:99:82:
91:8e:ca:82:83:81:76:2a:01:c4:05:de:84:bc:13:
52:82:c7:d4:11:ea:33:5a:43:ca:54:ce:0d:bf:27:
e9:55:2f:e6:9a:ef:e9:c1:ad:d2:9a:cc:71:21:b2:
1d:88:a4:47:ea:f0:b6:2b:03:b8:74:ba:bb:92:83:
6d:0d:b6:ac:26:e4:ad:0a:4f:f4:91:8a:96:e9:b7:
5e:37:4e:e5:70:ec:75:e8:cc:2b:5c:ad:24:6d:2b:
b3:ef:76:b1:62:14:db:9e:36:9a:88:85:b7:52:ce:
0f:5a:0a:e3:28:99:85:b4:03:ce:95:7b:2c:ab:ad:
e1:2f:05:d5:34:46:dd:aa:e9:f2:12:aa:67:b3:6a:
f9:dd:03:c4:1b:26:52:ca:ca:1c:46:9d:7e:6f:13:
3b:95:51:6f:30:0b:dc:55:1c:f5:1c:ad:be:c3:64:
f5:20:8c:38:ee:2b:39:49:13:74:54:6b:bd:b8:29:
89:a3:e8:6b:07:7f:8c:ea:12:50:c5:fb:4c:41:ea:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:AE:C0:37:56:54:A5:34:A1:36:2A:C6:A9:13:0A:3B:BB:26:F7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/23muwDdWVKU0oTYqxqkTCju7Jvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.184.0/23
62.60.193.0-62.60.195.255
213.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:be:2e:1b:e9:2d:da:64:e7:6a:1d:3f:1d:ac:a4:55:0b:ea:
53:9b:69:da:9e:e8:87:48:81:8e:47:3f:be:8d:29:a9:13:ce:
0a:a6:06:d5:3b:28:0b:74:80:d0:4d:0a:df:91:1d:af:05:8c:
e9:66:9b:4f:3c:12:84:dc:11:95:86:2f:c2:cb:29:0c:e8:ff:
fc:a2:4b:56:d3:e5:18:09:3d:60:5b:77:fa:38:63:42:e8:0e:
b3:55:70:51:89:47:66:41:81:c5:3a:0b:e5:49:7f:91:b8:47:
f5:ab:f0:e5:52:a5:ba:80:11:e9:88:56:71:14:5c:2b:44:e3:
0b:4c:01:f5:ea:36:95:65:dd:89:bb:3e:c0:a8:17:6d:b6:36:
63:bc:28:ae:25:f9:d8:48:ae:e2:50:a7:67:4c:d8:e8:b1:3e:
04:a5:50:6c:5e:ea:fa:49:39:0a:46:cc:c7:a8:76:3d:33:36:
db:32:2f:fb:7c:df:f2:65:3b:b6:85:0f:d2:65:ad:1b:ae:1c:
4c:a0:db:d9:90:d5:b6:33:f8:cc:6a:b2:e0:62:07:c2:00:2a:
b7:87:cd:94:df:05:93:9e:37:f6:a6:41:4a:e4:54:6c:6a:ad:
34:ec:e6:6c:13:a2:b6:0b:a6:20:17:d6:8c:dc:2c:22:b3:2c:
af:d3:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:03:13 2025 by rpki-client