Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2oxwDLzRshNK8j5aCwH5UtTCVAA.roa
File: 2oxwDLzRshNK8j5aCwH5UtTCVAA.roa (raw, json)
Hash identifier: bkIxt1Nf6MRgesYp+uwTIyApPTt4AK+Q+OtxoV4dx/Q=
Subject key identifier: DA:8C:70:0C:BC:D1:B2:13:4A:F2:3E:5A:0B:01:F9:52:D4:C2:54:00
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B389EA27BB3CF7C93135A1160E16B6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2oxwDLzRshNK8j5aCwH5UtTCVAA.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212036
IP address blocks: 62.60.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:89:ea:27:bb:3c:f7:c9:31:35:a1:16:0e:16:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da8c700cbcd1b2134af23e5a0b01f952d4c25400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:28:f0:3e:ee:bd:c2:c1:55:18:34:80:c7:
62:f9:d6:d6:2f:63:82:9a:51:45:e1:8a:1a:02:23:
89:4c:fe:d8:61:da:3a:0f:a2:d5:b5:b4:7c:c0:43:
1a:0f:e1:3b:f8:3d:77:55:02:70:c4:72:6b:dd:e9:
14:03:6e:5c:6e:dd:29:b6:bd:d5:83:7d:e3:cb:1c:
01:6b:7a:3b:fd:48:22:e1:cf:13:83:59:93:7a:ee:
af:f0:72:58:bf:5c:fb:13:82:2a:bc:72:b7:05:83:
e9:74:be:fa:5d:50:3d:fb:08:e5:b3:0e:0a:71:02:
a5:07:e9:ac:76:21:2f:ef:f6:00:9e:98:f3:ad:b1:
b2:14:4a:9b:21:bb:47:82:76:2e:f5:9f:40:01:1d:
80:7d:fe:9a:27:76:6f:36:98:e0:b7:56:7c:e9:b3:
83:bf:43:67:d7:f7:98:bd:13:73:44:29:c7:aa:c9:
8a:aa:93:ee:74:d1:ba:42:96:3c:ab:a0:50:d0:b1:
40:3b:62:a2:fd:f7:ea:81:6c:17:c3:e1:a8:4e:e2:
bc:5e:0c:94:14:20:31:8e:a8:7b:d7:ed:95:9b:5d:
0d:7a:ba:8b:f8:95:85:94:46:9f:d1:13:65:0b:08:
c7:85:9e:7b:f5:2b:87:21:57:f8:ce:fd:6d:eb:b2:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8C:70:0C:BC:D1:B2:13:4A:F2:3E:5A:0B:01:F9:52:D4:C2:54:00
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2oxwDLzRshNK8j5aCwH5UtTCVAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.143.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3b:8a:0a:88:85:96:64:46:c7:dc:99:a7:6c:65:1c:cc:56:
a1:5e:c8:44:d4:cd:cd:a1:52:4c:d7:2a:a1:18:04:a8:ca:73:
a6:39:3e:6c:0c:c9:65:9c:85:c9:15:74:3f:29:76:3b:f4:72:
56:f9:75:f2:72:f2:e3:08:7d:eb:98:8c:9f:5f:c7:d6:00:38:
01:e0:0d:20:22:b3:c5:ce:bc:98:a9:3b:c0:4c:08:f8:5d:f1:
d9:e7:51:ee:3a:b7:be:21:55:c1:69:c4:b8:8f:e4:7f:d8:62:
0f:b0:d3:c2:9b:b7:f0:de:e1:23:9f:0c:db:5e:3c:92:d7:27:
dc:2f:b0:3b:fd:a8:f4:ec:2f:61:d7:92:d8:4f:09:6d:21:52:
ad:08:f5:92:50:21:a0:d0:d8:ca:ef:fb:d9:13:e7:a3:d7:66:
1f:fd:50:63:ee:ca:a6:2d:58:25:26:56:2f:b6:33:56:6d:f9:
f4:31:8f:16:69:18:00:29:ee:b5:e4:5d:41:88:9c:d1:f5:e0:
72:5e:91:2b:7a:38:20:09:e6:c1:61:6f:5b:04:19:a4:fd:a8:
50:80:25:2a:e8:68:52:94:e9:13:49:27:96:b9:f8:f0:e1:9e:
d3:81:65:c4:f9:44:55:7e:6a:d8:32:70:24:b6:4e:7a:08:7f:
85:41:c5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:16:55 2025 by rpki-client